Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: FswY7p7H+eFfFz/G7N2VHpPmMksnrEqXJX3mqULzisQ=
Subject key identifier: E8:25:FD:F1:D2:DB:4A:3B:F5:47:C7:D2:6E:56:01:5C:D2:BF:21:C1
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019D284D2D486286626AE616374CFE393C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (hash: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow=)
2: MuKPEjpSeKLvjqZfVopVa-G44-Y.roa (hash: gXY94gXYWU1Pqibv85vvI+18JY770F42380MRYt28Gc=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: xxFLGXM1qfuUWylq1ydhzk8H8fExsyidsuqDaP6VjF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2d:48:62:86:62:6a:e6:16:37:4c:fe:39:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=e825fdf1d2db4a3bf547c7d26e56015cd2bf21c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:64:c6:f8:6c:c7:c3:f9:aa:6b:13:ad:0f:
75:42:8c:58:fc:d8:d8:f8:15:c0:38:c6:3e:d2:f9:
6c:15:c3:71:ab:89:d8:67:b0:31:1a:af:65:22:58:
7f:3e:3c:43:50:fb:1c:a0:08:56:e4:dc:24:1c:19:
03:00:55:3e:37:75:86:56:fe:f8:7c:a2:85:a2:4c:
d1:e3:4d:ae:e6:cd:3f:d5:b1:71:3c:3d:28:65:5f:
87:74:a2:de:fe:e1:90:3c:b0:db:81:aa:f5:bb:67:
0c:b1:52:93:01:a0:c1:4b:31:8f:cb:d9:ba:95:e0:
f6:cf:97:aa:33:27:d2:81:02:ad:47:f0:e0:07:aa:
97:10:ab:fd:a2:15:65:d6:bf:ac:70:73:cf:8b:ad:
b5:d2:28:d1:71:ee:83:72:43:63:b0:58:e8:fc:00:
31:02:cb:b5:8e:ee:42:f9:3f:35:14:3a:c7:8e:f0:
48:b7:d5:8d:dd:19:d6:51:a8:84:91:cb:13:7f:85:
18:fe:1d:3e:46:9e:e7:6b:90:ea:3b:6c:1f:73:f4:
e1:32:03:70:a8:1f:ec:c2:a9:a9:04:00:c6:d4:a7:
5d:af:57:29:8c:8e:d9:d5:95:32:8a:46:e0:d7:d5:
05:d0:82:44:b7:63:7d:f6:bd:0f:de:99:5b:63:9d:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:FD:F1:D2:DB:4A:3B:F5:47:C7:D2:6E:56:01:5C:D2:BF:21:C1
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:b5:4f:f2:a6:64:96:ac:3f:47:b5:eb:ce:f4:92:f1:4d:
c8:4e:07:ae:0e:27:3e:3e:11:e2:db:db:98:7e:14:1a:74:93:
72:d6:76:81:ce:37:93:27:c6:31:0e:e2:50:39:1a:a7:ed:84:
27:fe:83:77:b3:07:d5:33:7b:21:40:df:28:75:7f:a2:fa:0f:
1c:71:e7:ba:12:71:1e:e4:d7:fe:7a:7e:c2:4a:7d:8a:15:dc:
1b:78:42:02:c7:b2:07:91:5b:99:40:70:32:51:d8:34:1d:38:
69:e0:03:b7:5f:e7:5a:eb:aa:33:aa:ce:ba:4c:2f:c0:10:44:
d2:e5:70:67:c9:0f:22:36:da:92:13:90:89:a6:f4:5c:94:5f:
17:14:c6:d6:f9:54:b1:a2:e1:05:e9:25:2b:f7:44:76:59:63:
0e:3a:45:c2:e0:8c:e0:b9:28:92:fc:5e:30:2a:4a:cb:6c:83:
8c:b9:66:42:91:25:e9:ec:00:5d:26:46:39:9a:b8:24:12:f3:
67:b3:fc:0f:c8:39:72:83:b0:bd:8a:cd:7e:87:73:e3:74:35:
43:9c:4a:3f:45:d6:97:db:4d:e7:9b:38:5e:3f:93:40:84:30:
3d:bc:40:e3:c8:65:2d:55:fc:64:1e:ce:c1:30:03:96:4f:23:
2e:3b:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:56 2026 by rpki-client