Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: HnkevUluLm0eAdsh1UqoS6FAEvX7sa00JaERPKPkon0=
Subject key identifier: DE:C4:61:2F:EF:80:AD:D8:43:CB:97:5F:B6:D2:A0:31:EC:7F:51:FA
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019D2961699F700720586C8288095784A1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: wl5fBhN3yEy1BQLs5A6uaZfo7eDTB6Fhs2afg+Ssq3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:69:9f:70:07:20:58:6c:82:88:09:57:84:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=dec4612fef80add843cb975fb6d2a031ec7f51fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:d9:23:46:e2:23:f4:5e:f8:c0:b9:90:76:
45:a6:3d:c0:2c:d4:09:84:9c:d9:8d:69:26:65:82:
54:25:79:f2:c0:b2:a1:e8:bf:86:f4:da:ae:67:7e:
0d:63:87:d0:33:2c:f2:1d:41:b3:55:c0:c4:66:bd:
73:58:51:f3:33:e9:fd:0c:f2:12:76:18:de:8c:cc:
68:46:e8:6b:c1:34:65:03:e4:ca:3c:b4:c7:0b:22:
59:a6:37:02:0e:ee:ba:02:ef:46:20:32:97:3b:f5:
b9:3a:7c:e4:59:d5:5a:aa:8e:e0:e3:3e:c5:b1:2f:
64:4e:dc:b2:65:b8:f5:2b:60:36:b8:62:86:95:50:
24:10:06:e4:65:7c:3b:94:82:47:0f:fe:43:08:8f:
82:af:ec:7b:88:d4:33:36:fa:63:4f:aa:ef:3f:3c:
66:0f:8a:3d:e7:d4:2c:54:ce:6d:3b:9a:51:0b:43:
84:48:d4:d9:5c:26:94:92:c5:8f:1a:df:a2:00:38:
e8:20:4c:ee:80:6e:31:02:e0:ae:f7:5f:29:6d:10:
49:e3:e2:82:57:43:be:b6:40:e2:31:46:f5:e8:fe:
7f:84:5b:80:7f:f6:53:57:39:3c:02:02:a9:fc:c8:
e5:a6:e4:47:b1:f5:6f:b9:2a:b4:63:0a:92:f0:a9:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:61:2F:EF:80:AD:D8:43:CB:97:5F:B6:D2:A0:31:EC:7F:51:FA
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1b:d5:cb:ac:c8:dc:89:b9:70:4b:e1:9a:f0:8c:d4:02:55:
82:2d:1d:12:76:aa:17:41:f7:05:a2:a3:f5:97:14:8a:81:ed:
27:4e:d2:31:ad:78:cc:cf:9d:39:75:21:19:20:c2:a6:7d:cb:
9d:60:eb:56:15:97:8e:35:32:3a:a0:76:9d:af:14:5b:c5:14:
60:d0:ec:d5:75:7e:3a:f4:6b:52:d8:2b:47:44:15:42:ed:94:
d3:a2:69:cf:2e:b2:ae:c2:3c:b0:56:dd:55:dd:04:dd:b6:1f:
d0:d0:ad:ad:a4:51:7e:92:40:cc:f8:31:3c:7c:bb:4c:90:ca:
90:6a:5f:06:07:05:8d:06:9c:30:a3:03:ab:26:8c:4e:a4:6c:
82:b3:12:79:0e:13:f7:84:b3:86:81:4a:b2:38:7f:42:26:06:
99:85:e7:d5:56:93:42:97:fc:e6:79:58:a5:7b:5c:34:2a:9d:
d5:88:44:32:85:84:cb:de:a8:da:0b:92:a1:c1:bb:a6:e3:72:
c5:ea:86:ca:6b:66:c8:96:73:26:29:92:da:8d:f6:79:e9:72:
6f:fe:11:e9:45:cc:03:fa:e6:66:bb:e8:f1:1a:3f:88:4a:52:
6c:0b:14:4f:8c:29:e5:59:7c:53:07:16:25:4c:bc:64:2b:f6:
3e:a9:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:15 2026 by rpki-client