Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: uuQPeqG4ZoyQtQ6Y3XmVytwinZBo6319FgPlkyWJQIE=
Subject key identifier: B5:7D:1C:2D:79:A9:58:7B:E5:2C:96:F4:E6:7D:59:31:29:98:80:71
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019D27DF93B65087C193612130B88F88C839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1367
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: LOGfYI4tYJRZM8JNzVEC2a3qTbtAMEDzC9yl30N413E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:93:b6:50:87:c1:93:61:21:30:b8:8f:88:c8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=b57d1c2d79a9587be52c96f4e67d593129988071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:14:f0:35:54:1a:32:28:66:c0:71:43:a6:
d8:19:dd:a6:ff:bf:c9:36:f1:b2:f0:68:28:ab:9f:
f6:d1:ea:4e:f2:56:3a:02:b6:38:74:cd:31:e3:fa:
63:55:9d:af:f4:98:fd:c1:3a:14:4a:06:14:ec:0c:
e9:97:c8:60:10:5f:73:4b:d9:c4:e1:7a:d2:51:63:
13:43:35:72:17:91:ca:e9:44:99:95:a9:cc:89:b2:
d8:af:f5:0d:e6:b3:d6:58:3b:2d:57:b5:23:2b:f3:
2d:8b:1e:ed:0e:78:94:ba:e0:8b:f4:42:b6:7b:5d:
32:fe:d7:4b:02:a7:1a:63:40:a0:8f:30:6e:e6:07:
cd:1a:6d:82:6c:4d:bc:89:41:a4:f5:b7:d2:39:aa:
7a:04:27:90:3e:19:d1:3e:6b:68:1d:4d:db:90:5d:
66:78:cc:b0:8c:fb:58:d4:ad:20:33:d3:a6:f1:e6:
86:e6:e2:d8:82:3b:51:8c:11:ee:e5:63:9e:aa:4b:
88:b0:3d:7d:19:d2:81:cf:49:2a:49:93:c1:6a:7a:
3b:b6:c5:f1:43:a3:57:8b:54:81:5f:2b:cc:e8:8d:
07:ff:60:0c:02:6c:90:a4:d7:b9:f8:b4:f9:d1:fa:
5d:ff:d5:ac:48:90:73:66:f8:80:3b:42:e9:ba:ca:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:1C:2D:79:A9:58:7B:E5:2C:96:F4:E6:7D:59:31:29:98:80:71
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:90:51:27:07:61:e9:1d:f1:26:a8:f5:67:db:d2:12:58:4a:
c2:41:2e:77:2c:f7:67:e5:40:00:e3:16:48:8d:e2:2a:15:ef:
3e:8b:00:f2:c3:7c:6b:2f:8b:3d:4f:1e:0c:a3:2d:81:b3:fd:
9b:16:6e:d3:e8:a3:ca:e9:10:27:c9:b6:56:fd:41:57:d3:c8:
35:d7:64:39:1c:63:78:c4:48:22:29:d9:65:47:2e:7b:06:54:
a5:e1:e1:9e:8d:cf:20:7a:0e:c4:f7:b6:49:2b:0c:c2:fc:b5:
2f:df:fc:d5:99:61:11:a5:9b:fa:77:c7:99:61:c5:7c:50:4c:
ce:c3:e6:ec:1a:ca:53:71:56:1f:ad:d4:ea:19:38:4c:c7:35:
29:90:3c:98:20:c1:0e:d1:33:ee:da:19:96:b0:0a:ff:c1:94:
f6:38:d2:95:ea:bf:5c:3c:93:9b:94:22:47:b5:7c:ef:de:14:
44:3f:fc:b0:ba:c2:c2:b5:6b:78:a1:ab:a0:08:29:46:57:91:
42:b9:2f:7b:fe:a6:54:e0:3f:f8:4b:56:f3:47:c4:25:28:c3:
ee:fc:70:7e:54:4d:57:18:1e:d9:eb:81:7b:08:db:2d:df:28:
a5:2d:6f:32:10:31:e1:e2:d8:73:6a:42:60:a0:47:47:94:4c:
ac:6d:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:31 2026 by rpki-client