Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: 7L+TkWapqBWfY7QMBYhYbR2MxZnkeMrerjYS8jIw2Io=
Subject key identifier: 14:3A:10:63:07:98:74:51:6E:F8:D6:FA:09:A8:1B:23:28:16:49:AB
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019D262848C0EF491B2DF88DA00376655818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 0328
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: /G1hTpoOyCJOAknCrtG8jiI2L+gpaXVw5eAaiQf+wnI=)
3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:48:c0:ef:49:1b:2d:f8:8d:a0:03:76:65:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=143a1063079874516ef8d6fa09a81b23281649ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:58:aa:1f:26:1a:69:a8:d0:18:1c:e6:de:
cc:45:b0:89:22:cb:e7:17:46:b7:df:21:cc:11:19:
c7:f0:9a:bb:67:45:82:b0:de:2e:48:1e:28:6e:96:
a0:a0:28:cf:2e:c2:4f:86:be:3d:23:1d:7e:b5:9c:
27:35:07:c8:9e:e3:d9:cc:9f:6f:25:58:d7:03:af:
02:24:5c:39:ad:1d:6c:72:19:32:d9:1e:a6:8d:c3:
11:3f:63:79:70:a5:1a:6b:1a:eb:99:4a:36:64:4a:
f1:84:c0:ba:12:14:ae:30:76:f6:13:8e:da:1f:7b:
82:be:2a:42:1d:93:a0:d9:21:b3:8d:55:69:86:2f:
7a:03:2a:d6:cd:99:4a:cf:35:1c:a5:9c:80:01:e6:
06:e5:f7:30:fc:74:af:d2:0d:43:fa:56:f0:b6:3f:
95:da:97:29:03:80:eb:1f:5c:f4:3e:d9:68:b2:3e:
4f:9c:48:89:db:5f:68:ed:94:78:0a:c0:06:cc:1d:
3f:02:a7:2d:a5:c7:16:a0:46:67:bc:2d:54:06:5a:
1d:70:8e:bd:89:a3:b0:3b:b0:85:52:65:ff:12:de:
d1:85:2e:a3:58:a5:2d:3b:99:51:68:d3:4f:57:b8:
d4:57:84:ae:5e:42:cc:5f:c8:e2:f3:3e:c2:52:e0:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:10:63:07:98:74:51:6E:F8:D6:FA:09:A8:1B:23:28:16:49:AB
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:12:ea:2a:b5:25:e6:15:00:f1:bd:f7:78:18:36:b7:8c:49:
b8:df:07:0b:10:73:a7:a6:df:06:11:9d:7f:4e:3b:4c:c2:7e:
36:b9:65:64:13:d5:35:c0:4c:cf:b7:f9:35:2a:27:48:b7:80:
fb:ff:5f:a8:0b:d1:c5:39:6b:35:6d:b4:0d:80:6d:7f:bc:15:
b7:c4:21:cd:74:6a:18:98:1c:e4:15:17:a1:34:52:64:89:40:
fb:d5:64:8f:ad:25:34:65:14:06:90:61:54:ba:46:f9:45:80:
e1:e2:4d:2d:89:13:bd:96:70:55:a3:3a:21:03:ee:20:83:7d:
51:12:14:be:8c:55:ea:d6:6a:16:84:bd:23:40:f0:29:93:09:
3b:43:64:4a:80:d5:30:93:78:de:93:b7:33:1c:96:52:74:16:
17:a6:56:10:f9:35:55:18:ad:83:42:e9:75:62:3f:a0:84:96:
5e:16:99:e8:47:90:a2:71:13:15:e4:5b:78:17:e1:6a:fa:b1:
cd:c5:16:dc:35:9a:f0:0c:4f:cc:69:52:2d:39:0a:33:f8:1b:
f2:34:13:20:71:ef:a5:3e:c8:51:68:59:63:c8:29:0a:1c:ce:
56:60:11:70:8a:d1:96:67:ab:4f:72:a6:67:32:14:75:0c:a4:
87:d9:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client