Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: H7Y/13JWa+7JdeiPb8UK7sYmlb/ExuU4PRKLCIVJXs4=
Subject key identifier: 63:1B:5D:73:96:B9:3F:DA:0C:9D:7B:61:70:A2:A0:1A:A1:B1:02:40
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019D29977CA91AC223C26D1A92BB4FD94E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 14FB
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: 3H1ZUfBB9I38UqvEGMRX5SDL1j2svuXSP842YCMkP9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7c:a9:1a:c2:23:c2:6d:1a:92:bb:4f:d9:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=631b5d7396b93fda0c9d7b6170a2a01aa1b10240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:53:cc:3c:8f:b1:52:c9:79:5f:2e:35:d0:
e3:1f:96:be:db:e2:a2:88:84:2e:b3:90:44:e3:cd:
3f:29:e7:c2:fb:0c:24:b2:1e:a2:c8:f5:87:47:ee:
8a:6f:c9:25:d6:59:35:ef:e6:91:2f:34:d3:ce:bb:
b5:8e:d7:06:50:7f:a9:d5:54:1f:2a:38:d9:d5:b4:
96:90:5d:d0:42:f2:1d:b4:c4:6d:2b:d7:32:b0:bc:
fc:74:40:0b:f9:f1:02:5d:f2:ef:ca:c7:1b:1b:d9:
c4:e5:71:29:40:a8:2a:1b:e3:83:4e:f0:29:3a:27:
7f:58:d6:97:5b:bb:00:d2:01:df:b6:cf:98:1f:85:
f2:4d:69:55:cc:bb:91:3b:ab:ca:6b:78:2c:4b:71:
73:47:ee:c8:b3:d0:60:04:af:b6:69:ec:24:6e:79:
79:55:30:a5:08:46:29:12:af:31:73:23:2c:a7:a0:
15:f0:b9:45:86:09:28:18:1e:ae:e3:39:10:39:16:
b6:16:67:51:40:0c:6c:fb:2e:6a:ea:74:da:28:45:
5c:7c:d3:0b:4c:85:46:be:d0:28:56:66:50:79:de:
d7:85:24:11:03:a0:99:88:c1:50:cb:31:83:f5:41:
63:dc:00:21:73:2e:1d:7d:ed:bb:7d:60:2a:be:60:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:5D:73:96:B9:3F:DA:0C:9D:7B:61:70:A2:A0:1A:A1:B1:02:40
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:24:7f:6f:0a:e4:7e:a6:36:91:97:15:30:dd:82:86:ac:28:
74:d2:57:bc:66:13:93:d3:36:d3:60:4c:3a:bd:65:14:8c:ac:
22:c6:55:16:0b:9f:4e:a3:9e:32:00:2c:ae:5e:f9:51:ef:e8:
d0:89:7c:fd:6d:e5:b3:d0:7f:f9:99:0b:40:c4:83:d0:20:11:
8e:a2:c2:5c:00:95:65:c5:be:9e:90:00:92:62:1f:38:4f:a3:
e0:5f:6e:26:ec:fc:c5:78:14:30:3f:b5:02:03:f4:51:55:16:
02:04:65:a1:a9:b9:33:7b:80:14:2a:ea:15:a6:7e:8c:7d:af:
5d:1e:08:27:ab:0a:1e:9d:0e:c7:14:7b:7b:63:69:c1:51:3a:
ba:cd:31:27:82:4e:68:de:e7:69:b7:b9:ff:1b:80:e7:13:b0:
53:95:42:5f:97:4a:eb:12:c2:a3:a0:03:f9:31:10:c9:3a:4b:
72:c5:d1:a0:1c:5c:9e:ed:35:be:2d:6a:03:fc:89:5d:a5:28:
33:eb:8b:1a:a9:d3:ad:5e:af:1f:9e:83:30:86:92:c7:4c:61:
35:26:00:31:86:43:78:13:16:b8:1e:02:b8:62:34:6d:15:0c:
f3:09:30:65:8f:f0:86:79:a9:d3:a1:cd:78:e4:0c:12:c7:e1:
b7:41:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:13 2026 by rpki-client