Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: VWNaAZqkUNs86CWMqxd0xtOgQWKhDvpVSnz7y4BjolA=
Subject key identifier: EE:3A:35:D9:78:F1:C7:A3:F3:0C:C3:23:C3:34:85:9B:FD:D1:2D:FC
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019D27722746E30105CAF6ADDD2CE59D9F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: LodNw9IXxn077KP8Tm5Ut4APR99G3lZQsxk8O8T0Diw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:27:46:e3:01:05:ca:f6:ad:dd:2c:e5:9d:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=ee3a35d978f1c7a3f30cc323c334859bfdd12dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:83:9e:b0:67:cc:40:f2:35:1a:4d:c1:05:
8c:c9:fd:d9:5b:fb:82:30:14:c1:b6:dd:fe:1f:44:
51:11:e1:1d:4c:4c:0e:d9:32:c2:ff:c6:5a:32:f8:
62:fc:0b:e7:cd:be:a5:c8:2d:87:0e:4d:bd:8f:25:
3f:01:6e:74:ff:5a:03:63:9b:ff:de:5d:2c:c2:5a:
27:58:b8:66:11:4a:59:03:3d:57:50:b5:a9:86:fe:
2a:24:0e:3e:9d:61:f1:70:12:98:cf:79:da:68:87:
11:c9:c5:91:ae:26:53:a5:6d:f1:42:16:72:f1:b3:
42:ca:a6:23:ed:b5:ab:14:c6:48:d7:2d:ff:00:e8:
ef:e0:50:7b:30:29:0c:12:5d:45:c6:dc:54:6c:8e:
a8:57:9f:08:4d:2f:6c:92:18:95:02:04:00:ee:05:
ad:e3:a7:4d:84:18:4a:45:b0:f2:9a:e4:14:4a:bd:
66:57:bd:f8:8c:66:8c:7b:89:1f:1d:44:ea:48:71:
24:9e:a4:09:77:a1:7e:0e:19:db:eb:ed:02:01:3d:
7a:d0:3b:f1:d5:d6:f9:29:e1:ee:3b:9a:53:81:1c:
3d:89:92:4e:42:ca:7e:49:4b:e4:0d:47:9f:2b:cb:
c9:b2:7d:00:25:74:60:0c:7c:58:91:a3:90:83:1f:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:35:D9:78:F1:C7:A3:F3:0C:C3:23:C3:34:85:9B:FD:D1:2D:FC
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b4:01:11:6e:ca:89:4b:34:52:4e:57:dc:9c:34:77:88:72:
c5:82:8e:a9:c4:0d:f2:b2:fb:6f:67:2a:12:b8:2a:61:e2:42:
9e:d2:3d:52:b2:bd:cc:4f:29:bd:45:c8:ad:78:ea:d2:12:ea:
20:45:61:0d:06:01:2f:aa:0a:fa:af:0c:db:9d:86:26:95:fd:
20:d5:8a:dd:be:e5:aa:ce:09:d6:89:43:a8:3b:f1:8d:8f:d9:
f7:f1:f6:a7:56:ee:3d:c3:dd:8f:75:8b:41:1a:15:9c:0b:b6:
a4:b1:02:e8:cd:31:82:2e:ae:63:2b:c4:37:7c:ca:27:72:7c:
68:39:20:a4:45:69:f3:f6:1e:bf:7a:95:ae:93:b1:d3:28:e5:
2c:70:27:a0:1d:69:14:a9:62:58:01:0b:d8:da:26:52:01:02:
50:3c:4d:69:b0:d7:cd:86:3a:e9:09:e8:cc:db:86:01:24:10:
d3:e1:37:cb:96:ba:09:35:6f:dd:94:22:c2:3a:4e:25:2e:09:
03:ff:fa:9a:b8:87:69:42:3f:15:cc:78:0d:58:59:f3:a1:e7:
db:18:a9:a6:81:33:33:27:da:dd:4f:b4:ef:7d:26:e0:59:8b:
81:ea:8b:0c:28:a8:34:df:69:d0:b3:63:91:aa:99:8a:58:19:
cf:69:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:13 2026 by rpki-client