Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: FQS84QxiBL6jZ2xFAz5SE9hS5RyqU4jRiVjLnJYyYGo=
Subject key identifier: 15:64:BC:4E:37:2F:13:1A:FA:83:D8:F2:8E:93:7C:A2:5C:CF:21:68
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019D2AA9FDADC8FC25010BE62C581EFCA2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 04B4
Signing time: Thu 26 Mar 2026 15:01:16 +0000
Manifest this update: Thu 26 Mar 2026 15:01:16 +0000
Manifest next update: Fri 27 Mar 2026 15:01:16 +0000
Files and hashes: 1: QWfQGr4z8VEUuY5YGNgr59n5bZA.roa (hash: lETgMikwnnnSO1uZ9XbjvLYBMxyEwNCLWUmrzKcWQbI=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: XRvD+RLkMzvWXC5XwW4ib9/t0Z+nouAKYiznBtWu7fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:fd:ad:c8:fc:25:01:0b:e6:2c:58:1e:fc:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Mar 26 15:01:16 2026 GMT
Not After : Mar 27 15:01:16 2026 GMT
Subject: CN=1564bc4e372f131afa83d8f28e937ca25ccf2168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:d7:59:be:ad:a2:fc:5b:52:d3:41:27:08:
d0:f6:9e:87:71:8f:df:8f:e2:30:9a:b8:62:7b:df:
e9:6e:35:d3:84:98:b1:77:a1:47:0d:ee:4a:41:85:
e1:68:b5:a2:32:1b:11:70:32:d9:e2:90:00:fe:d4:
58:04:01:6d:24:1d:ec:d8:14:aa:3c:4e:c2:2b:23:
2b:6c:52:2f:27:15:f1:14:0b:bd:19:4f:d4:58:bb:
47:0e:a9:64:b0:ff:ad:4a:62:ae:33:04:7c:22:56:
a2:24:5c:5a:a7:3d:01:11:39:ae:c4:e7:20:e5:e1:
c7:65:3e:9b:9a:1b:eb:85:4a:6e:c7:d0:c7:0e:1e:
4e:47:06:09:8d:d2:31:e2:17:84:08:c1:21:10:61:
fc:a3:2e:85:e8:69:44:98:5f:0e:80:16:36:db:16:
15:c7:d8:ab:a1:d2:e2:c3:44:6d:1b:ab:6a:97:07:
d3:05:43:71:31:23:91:96:a3:ba:c1:3f:2a:b2:df:
24:49:ae:ed:86:43:78:5b:7c:3d:d2:7d:2f:61:b5:
ed:6a:44:6a:00:15:5d:5c:c6:36:4e:a9:fe:03:58:
fa:d1:68:ea:6a:88:15:79:4b:cf:d7:1d:f7:c7:1f:
df:4b:d1:00:fc:a0:29:3a:d1:6a:b5:9d:07:d0:54:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:BC:4E:37:2F:13:1A:FA:83:D8:F2:8E:93:7C:A2:5C:CF:21:68
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c6:ee:ba:b4:50:4e:8e:94:7b:34:39:be:dc:4f:ee:3d:e2:
27:dd:5a:fb:66:63:76:86:c0:6b:cf:33:3d:92:ba:9f:f7:44:
08:10:92:1c:34:61:1e:be:59:25:08:76:4e:46:f7:30:86:38:
00:89:92:9e:ab:dc:b4:9f:f4:7f:3d:d2:1d:1f:d1:ce:f0:4b:
66:52:06:d9:61:46:e3:9e:64:6a:51:4e:d8:92:6a:7e:39:25:
85:13:8c:38:32:24:55:88:e1:16:4e:2a:3c:2a:77:c7:81:19:
d7:7b:6d:39:00:04:f2:9f:dd:16:3e:5d:3e:1d:fc:e3:b6:e7:
d6:4a:98:8a:fb:86:fa:95:cb:65:f3:75:7c:53:61:56:bd:a9:
01:33:14:67:10:9c:a6:b4:93:09:4c:c7:1f:2e:87:9b:60:d7:
a3:78:b8:ef:b3:7a:53:5b:4d:e2:ab:61:b5:4f:a0:cd:67:45:
d6:3a:e8:f3:85:c7:a4:1c:f0:79:ba:19:52:7c:28:2c:8a:05:
48:39:e9:91:1c:9f:a6:94:dd:a6:76:b7:d7:8f:8f:92:65:70:
57:a6:2e:9a:54:77:d2:77:f8:4b:98:e3:e8:b5:34:8e:2a:ee:
7f:02:89:05:21:33:f5:06:a3:64:81:c4:f3:3f:96:2a:a0:8e:
f1:34:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:02 2026 by rpki-client