Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: /R3xphdHzux7QSB5+/9U9Wm3qYPuuC+PDXVjlG96GYQ=
Subject key identifier: 80:E6:39:8A:54:58:65:26:14:15:97:18:F9:7B:A0:00:18:92:57:38
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 019D29CE6EA6ABF2241C2A96DB8FA874CBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0E72
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: HeWtSdRZbycEkiTqxYyvQRoV8K1GBiK7RTc/xR0P2Dc=)
2: uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa (hash: Qg5heRt3GNKVhwS3i0/2Bg+iUo3g8NAjbX7YvfBxFzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6e:a6:ab:f2:24:1c:2a:96:db:8f:a8:74:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=80e6398a5458652614159718f97ba00018925738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:35:5c:c6:dc:ec:f0:a8:29:52:53:77:47:
46:50:11:a9:45:c3:fa:66:c2:41:06:d3:01:dc:c7:
62:c5:7d:3f:d5:e4:36:31:49:3c:3c:3c:7f:5d:33:
31:d8:27:21:0d:26:d8:65:f0:a2:45:3b:a0:4c:38:
15:95:c8:b1:22:8a:f7:1f:6a:91:3b:5d:c1:ca:7f:
1a:b8:96:d9:f5:a3:94:2b:23:e4:08:ed:d6:00:75:
32:35:be:75:13:50:c5:b1:04:1e:32:e3:cb:94:84:
b1:71:fc:79:d3:02:69:4c:b5:7c:cf:20:ea:b7:3e:
6b:e8:78:89:9d:a6:ad:01:66:66:9b:35:e7:91:ce:
31:d9:2d:8a:f6:3c:bf:90:46:e6:1b:e1:cc:1b:84:
17:fc:42:06:b0:ea:28:be:70:7b:56:d8:99:64:31:
7c:c8:5a:da:2d:31:d4:ba:ce:a5:1c:d5:9a:76:7d:
98:d6:cc:93:51:02:b1:f9:8d:29:4d:01:89:0e:8c:
3d:75:87:c7:23:12:5f:24:69:90:a2:1f:dd:2b:0a:
2b:5c:ac:52:d9:89:ce:f8:b4:cf:22:43:b6:f7:7e:
05:6d:52:2b:d5:4d:07:e0:a0:99:4f:9d:7e:0c:88:
90:8c:d3:9c:ab:4b:79:2a:0c:71:d5:bb:0b:0b:d4:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:39:8A:54:58:65:26:14:15:97:18:F9:7B:A0:00:18:92:57:38
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:9b:22:f8:9c:50:83:36:e5:65:e5:83:e1:91:94:14:f1:
c9:77:65:6a:e0:71:8a:84:50:06:26:a9:90:dd:f5:d1:0f:72:
a9:4d:e3:4c:2d:f3:0d:60:75:db:5f:48:2f:bd:b1:24:5e:b7:
bc:58:11:9d:92:9d:54:5e:75:2f:1e:a4:21:32:2e:ec:fe:af:
b6:ed:74:e9:27:f6:c6:7d:22:8c:e5:8f:d3:a2:14:be:23:76:
82:3f:bb:aa:ca:de:c9:78:18:04:1a:9f:d6:b0:ce:9c:ed:cc:
d7:1f:28:01:22:ff:19:ba:a0:6b:58:18:b4:46:99:5a:31:a8:
8a:53:d4:94:85:95:1c:a4:6c:a7:2f:5c:c8:bb:f4:6d:57:72:
bc:be:74:c0:bf:73:61:bf:53:bd:f9:63:b4:aa:0a:eb:29:f9:
ee:bd:c4:d8:6b:50:f6:d4:27:b1:16:c7:b2:74:a8:4a:f1:c7:
e7:10:55:d7:ca:10:dc:3c:f3:28:bb:16:c5:da:a9:c7:51:e3:
72:78:e0:2a:e7:6e:b1:4b:be:6d:47:3f:c4:3d:74:9a:cb:54:
e0:97:3e:51:0c:12:59:30:76:74:f3:81:db:46:3e:a1:50:6c:
e2:45:95:01:80:41:00:9e:b6:ea:35:51:a9:85:aa:67:13:eb:
22:10:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:21 2026 by rpki-client