Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: aMbJ8C+nwMoU3y+7tkZ8PSTBf3HjIgm01IBRQxAo+/A=
Subject key identifier: C4:BE:43:5A:5B:EE:9D:A5:1D:52:D0:66:92:0C:49:D8:9B:45:66:F8
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 019D2704CB06456C4E705AC6CBC0C647928A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: /hjfKc3j9jViNdo727MlYy/TC/LL30b8Fe0FeqHq09I=)
2: tO9v7iTX50tlfuqxxssYC-eagA8.roa (hash: 3ktQe8bKd+z2Ww8PO33mte778OAShNwmN0Svd4eJMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cb:06:45:6c:4e:70:5a:c6:cb:c0:c6:47:92:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=c4be435a5bee9da51d52d066920c49d89b4566f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:4e:16:df:a2:72:89:a8:08:d2:5c:4b:d8:
d4:99:9b:6d:75:91:9b:0c:a9:d1:70:aa:28:e3:b1:
f3:3b:52:b1:a9:fa:92:4a:5b:03:ac:56:5d:c9:06:
92:71:ec:03:37:f5:28:a2:42:3c:59:81:8f:0c:96:
a0:dc:70:5e:60:5f:93:33:35:0a:77:4c:a1:b7:07:
b9:fc:63:72:de:c1:d1:3b:1d:de:b6:a6:ac:1d:4e:
e5:6e:43:09:00:14:b4:4c:55:f0:c0:ae:c6:54:16:
b2:46:d6:97:9f:11:b7:c6:d6:5a:16:e5:eb:33:80:
d8:0b:6c:a7:2f:56:f3:b2:08:cc:2c:68:c6:52:db:
e5:6d:bb:73:5b:9b:d4:0b:e5:99:78:94:c2:d7:13:
23:71:8c:ec:8f:d6:72:92:30:1c:a5:91:62:1f:81:
d2:96:e1:04:99:d6:87:dd:9b:2d:b2:a7:99:b5:ec:
b6:eb:5d:3e:33:bc:e9:51:59:9c:ef:1b:a9:34:c0:
5f:e9:67:86:e8:85:0c:05:57:62:ba:d8:38:b1:5f:
28:44:c5:4f:d8:e3:74:3a:4d:67:07:dd:db:4f:68:
87:66:fe:55:05:45:d9:1f:db:b9:59:0d:ab:b4:e4:
d2:94:7f:fb:c4:25:a9:d2:64:77:fc:7b:1f:d8:4e:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:43:5A:5B:EE:9D:A5:1D:52:D0:66:92:0C:49:D8:9B:45:66:F8
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:62:11:b2:21:22:2c:32:33:b0:ac:82:4a:57:7c:f6:b1:84:
1d:de:91:fe:0d:b1:4d:0f:50:c3:45:f2:ae:53:4a:4a:0f:8f:
c5:91:83:c4:b5:ff:43:75:a7:19:a8:5d:96:5f:5d:87:ce:b5:
87:0a:94:ac:20:8e:84:a6:16:66:a9:6c:4f:1c:e2:f7:58:44:
a0:a1:42:e5:06:73:63:b4:a5:45:ba:aa:07:58:ca:f5:d0:ad:
4a:09:87:fc:54:8f:95:f8:37:84:09:dd:ef:1d:e7:cb:98:8d:
77:32:70:9d:4c:b6:20:f6:0f:3d:8c:25:55:cf:7b:85:f5:46:
d8:95:e1:f4:d5:e2:f4:8f:a7:6a:e8:1f:c4:36:38:bd:47:aa:
6f:1e:73:d8:d0:1d:dc:e3:a7:47:20:b3:09:56:66:91:93:a3:
6a:7a:0d:c8:66:79:a6:61:ed:42:18:82:f5:81:86:68:fe:cd:
09:66:6b:6f:02:80:01:6e:55:f5:0a:da:0d:52:f3:54:4a:15:
71:23:d0:a5:f4:5e:72:8a:9e:d5:90:c3:de:8d:17:88:23:53:
28:ba:6a:fb:0a:8b:e4:38:c0:72:88:0b:4e:b5:c7:06:ae:07:
f9:83:4c:18:cb:bb:90:e4:a0:6f:60:00:7a:21:4f:01:c3:67:
3d:e5:0d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:20 2026 by rpki-client