Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: ovNdSFzZiddr7z8jxVdmUct9LQhEvtvLPexEHb3ts4w=
Subject key identifier: 95:2C:83:1E:2E:3C:0A:B9:AB:88:F7:A2:9B:79:52:0F:D2:63:9D:48
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019D26CCC162181361D1DE9467EF88BB70C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: bejZsgGJ86FFf9jfIWWVw8KHDUmybuqZRMyri4ZyVtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c1:62:18:13:61:d1:de:94:67:ef:88:bb:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=952c831e2e3c0ab9ab88f7a29b79520fd2639d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:98:ce:ba:50:45:04:4e:55:fc:55:5b:b4:
a2:31:3f:2c:f3:7e:d1:c3:f2:5b:18:d0:2c:1a:d1:
4c:99:98:56:17:65:bc:65:74:95:75:48:9a:11:b2:
a1:4e:b1:c0:2f:46:5f:37:74:ba:67:0b:12:0a:a1:
09:5e:46:e9:37:cf:9b:98:fb:0f:f4:ea:70:9d:fc:
0e:61:d8:1b:24:f2:1a:53:cc:b3:bf:3d:f5:08:c4:
33:a0:b3:ae:b9:b2:f0:fb:f6:7f:ff:60:ea:dc:75:
6c:d6:ea:b1:e1:a6:f1:37:c2:7b:ae:49:a6:51:75:
84:1d:78:f2:6c:98:4b:95:ad:e3:e3:2e:43:00:fa:
cc:e8:0f:2e:00:7d:c3:53:66:c6:47:ea:ef:b1:64:
3e:5d:7e:4b:63:d3:9d:f1:ba:29:6f:f2:19:e1:5c:
eb:50:f2:c2:dd:92:87:4e:b3:e4:b1:f7:d8:bb:ac:
87:88:68:f1:05:d1:21:fb:d6:d7:b2:75:aa:88:2d:
14:60:e5:15:94:65:41:1e:f0:a0:70:5f:d3:59:73:
e5:d8:3c:f3:9b:c5:20:53:ef:41:96:2c:fa:de:b8:
ce:4c:0e:a9:d4:b7:9a:6a:47:93:3b:10:87:31:dc:
3f:6c:b7:fb:59:35:dd:26:43:0b:a3:ab:2e:94:04:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2C:83:1E:2E:3C:0A:B9:AB:88:F7:A2:9B:79:52:0F:D2:63:9D:48
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:38:3f:14:04:3b:84:88:58:44:8b:59:cd:cf:86:75:9d:
1b:60:d1:bc:38:45:d1:5f:6f:fa:e5:36:90:72:58:ba:fe:9a:
b5:a8:c0:54:67:42:18:f0:0b:e0:47:5d:34:bf:d2:23:6e:eb:
95:b6:ea:8b:6f:97:c4:d7:6c:2d:87:14:da:ce:f2:09:af:6c:
75:ec:9d:b6:53:88:0f:57:2e:41:5a:ea:c0:c4:5c:65:24:47:
9d:e3:8f:5f:d6:7f:00:73:0e:8b:13:56:4f:5f:25:f0:3b:bb:
5e:6e:89:7f:3d:ca:44:fe:61:26:3f:49:e2:ff:3e:3d:2d:0a:
b6:02:7b:69:5e:b4:0c:e6:8c:88:a4:20:79:93:34:4a:13:d7:
1c:c6:50:b1:bf:3c:1b:cf:c7:91:21:8d:7e:ef:2a:b4:a7:47:
ba:74:2c:c0:4a:a8:67:50:9e:f1:96:8d:25:61:94:18:de:a6:
e7:cd:4f:36:65:7f:b9:58:c1:4a:af:a8:14:c1:f1:74:a3:4a:
05:db:68:ad:cb:ec:51:a7:43:e7:92:c4:86:33:a8:fa:c1:87:
00:dc:85:e9:90:45:09:2e:ba:f2:21:4f:a0:3b:d5:a1:ae:84:
22:a9:e2:29:eb:f2:f3:d1:18:dd:c5:24:87:c3:ea:9e:1c:be:
0c:47:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:23 2026 by rpki-client