Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: OUfowVqXBFcq1LAK45uazOHhmXJhOXEWruvyHMGR9Ws=
Subject key identifier: B5:48:C2:C5:54:3D:97:88:91:B5:8F:9E:3B:CD:AB:67:79:06:AF:B0
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019D2771E81B4AC118B4FFC04ECB6575222F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0D8C
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: uYLvyY2WLI_GT8ALtuBN7WJQxWc.roa (hash: 1aDErPT/oCtdeXIwL0ZqBC7wE1QZvB84rjebiPZPqXg=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: 1mdg4FAeXNJsBdDNIqE24HbTBgRWWlMDvGprzrtYSEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e8:1b:4a:c1:18:b4:ff:c0:4e:cb:65:75:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=b548c2c5543d978891b58f9e3bcdab677906afb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:28:08:53:c0:c6:d2:d4:63:17:38:b9:0f:
3b:10:11:72:54:0e:1d:46:5f:ee:ff:62:b2:a0:57:
98:a6:b1:04:6b:9c:a6:ea:64:31:c5:5c:44:ca:df:
f3:f7:35:7b:75:a8:ac:a9:ad:2a:c0:61:61:5b:f5:
07:fc:c3:1c:ed:4f:39:7f:80:03:1c:b3:dd:4e:7e:
b2:aa:10:e0:b5:73:28:fd:9d:b7:e0:e1:39:b3:58:
df:b7:1f:cf:b3:cc:60:dd:99:bb:20:8a:0f:8b:da:
7e:a6:99:93:cc:66:9f:50:91:39:5a:43:41:bc:55:
de:e0:57:e0:8c:22:88:b8:06:af:f6:fd:10:70:54:
9c:fb:cb:c1:69:d3:55:1a:b9:95:cd:9e:a3:6b:38:
11:74:54:41:16:4e:8c:f4:bb:a5:79:d0:9f:3c:91:
b9:b0:01:03:37:60:87:17:8f:ea:49:5e:eb:aa:d8:
4b:e7:3a:ee:90:da:4e:cf:74:08:76:fd:5e:91:2c:
65:5e:bf:10:56:64:95:87:82:66:68:85:f4:bf:ba:
31:39:54:73:e6:65:25:d2:6c:d0:64:fa:b3:22:9d:
94:b2:99:63:da:50:32:9f:1a:b3:04:28:5f:3a:09:
25:22:6b:cb:97:9e:01:67:56:77:9d:de:8b:c9:fb:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:C2:C5:54:3D:97:88:91:B5:8F:9E:3B:CD:AB:67:79:06:AF:B0
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c4:76:25:91:d8:6d:b5:d4:a7:2b:8d:c1:c6:e2:87:bc:22:
86:80:bf:5a:87:3b:08:ec:e4:5d:15:18:23:89:7d:e8:e6:46:
28:b3:f6:f3:7f:3b:7a:ec:08:92:81:5c:51:ec:26:de:85:22:
a4:4f:31:1e:36:b3:2c:c5:62:48:b4:ea:9d:b1:e3:e0:7e:b1:
8f:fe:1a:df:59:88:7b:24:a9:85:34:a5:5d:14:70:dc:52:44:
e3:83:b3:6a:01:67:48:69:7a:fd:38:5e:85:63:71:0b:d0:8d:
f3:a2:67:10:0e:41:22:0b:b1:e4:59:fd:0a:85:1c:92:be:d7:
8d:2a:95:78:f8:0c:ae:f3:dc:01:17:ae:69:82:9c:72:ca:08:
9f:d7:e0:95:73:4b:a2:42:38:bf:5a:59:83:c0:40:fc:ce:13:
68:52:d5:ef:fb:84:fc:f9:cb:4d:72:21:c5:e5:61:be:2a:d0:
ad:9c:6c:a3:15:5c:d2:4d:3a:b3:af:bb:f6:99:ed:18:81:a5:
6b:53:18:0f:54:3a:82:58:82:e2:0c:69:55:08:69:6d:f4:25:
1b:e9:bb:87:5d:34:6d:b2:64:d3:f9:ce:8d:4b:78:e3:81:d3:
2f:cd:ae:78:44:07:2a:4a:76:cb:e5:31:fd:30:d6:f6:8b:77:
e6:49:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:11 2026 by rpki-client