Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: /zOWpKwduMo1llx/719zHYi383NTukksLMaR2shpWQg=
Subject key identifier: 42:BB:BB:4D:83:49:40:3F:F0:BB:DC:CC:04:9D:14:AA:3D:4B:95:B0
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019D2AA91EC9FE23ACA180EFD99EF3C0C322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:19 +0000
Manifest this update: Thu 26 Mar 2026 15:00:19 +0000
Manifest next update: Fri 27 Mar 2026 15:00:19 +0000
Files and hashes: 1: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: NhhMR8+/Ki8mhvsr6T3wsQ29jQnkqb2dNBM92YwCJZA=)
2: h4f1U0CpFFDSHXynxae3wWiZYnM.roa (hash: bjAME8b4hx8ihQ73euWcNmN5HY/fjR8Ib6ZPO1ecoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:1e:c9:fe:23:ac:a1:80:ef:d9:9e:f3:c0:c3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Mar 26 15:00:19 2026 GMT
Not After : Mar 27 15:00:19 2026 GMT
Subject: CN=42bbbb4d8349403ff0bbdccc049d14aa3d4b95b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:15:2e:4a:6f:0d:b6:58:e6:46:05:0f:e4:
ee:17:12:17:9b:ed:36:95:63:1e:41:51:fb:2b:7b:
bc:cf:18:1f:06:dc:3a:82:ae:a8:94:ba:55:47:28:
a1:7d:41:3e:7d:4f:cf:03:1e:39:4d:f3:a7:5a:64:
cc:62:fc:f0:6d:03:49:80:4b:eb:98:93:ac:ff:98:
d2:57:09:a4:ba:b6:95:6b:7c:c9:c3:ac:7f:5b:16:
ee:4e:92:49:4b:88:0f:fd:8b:c9:92:7f:30:af:61:
ea:d9:ec:bf:ca:8a:3a:61:e0:64:2b:9b:22:57:8f:
10:5c:c9:e0:59:29:a8:d3:bc:45:53:6e:4a:c6:51:
c9:d8:c1:21:02:12:a2:31:af:67:30:c1:a0:a5:0b:
a4:f0:e3:f8:e3:05:44:55:d9:f2:c2:b8:f9:38:db:
24:25:aa:ab:7b:e8:fb:b3:88:f4:dd:65:39:e4:2d:
52:5b:96:5b:2c:0f:85:f5:40:f3:38:14:b8:e8:d9:
9d:47:4c:ea:f4:0c:c9:a1:cd:a2:05:a4:8b:3d:36:
ed:bc:e2:64:bc:e2:93:46:d5:b0:8e:09:19:43:cf:
a9:51:f8:bf:cb:52:d9:15:f2:1e:19:c5:e7:ff:05:
59:d7:8b:c2:4b:67:bc:47:45:be:32:fd:89:93:df:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:BB:4D:83:49:40:3F:F0:BB:DC:CC:04:9D:14:AA:3D:4B:95:B0
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:33:a1:ff:37:76:db:32:88:24:f3:70:e1:14:af:52:c6:78:
a2:87:d6:c8:2d:92:8d:1f:47:58:e2:2a:31:6f:8e:ea:88:80:
a3:35:f7:c8:1c:af:b0:d4:83:31:24:69:7e:b3:f7:15:b0:39:
eb:ca:b3:06:f8:d1:37:6f:dd:d5:d5:a8:17:87:bd:31:0b:98:
18:eb:ff:d9:16:a1:1b:cb:a5:c3:de:79:21:c1:ce:60:fb:e9:
75:6a:3f:cb:1e:da:04:f9:6e:84:8f:58:9f:5d:d5:54:93:d6:
63:4d:e6:06:e2:b6:69:41:14:98:90:89:79:85:db:eb:1d:7a:
9f:90:da:86:87:46:3c:ce:66:a6:1d:45:15:2f:51:d0:c8:93:
ae:40:39:68:e6:33:fd:2c:ba:6d:7d:53:28:b5:79:0f:3d:40:
8e:c0:0b:0e:17:bd:0e:cd:8a:aa:f0:9c:42:6a:35:4c:fe:73:
e7:6b:9d:e3:3b:5c:c0:ea:18:e1:95:f6:50:e8:30:ec:10:3c:
2a:bb:d5:af:35:03:f1:1e:01:d3:60:e4:29:1c:19:48:e0:eb:
9c:1f:60:a9:76:b8:3d:a7:dc:64:6d:e4:4d:f2:2e:20:26:62:
6e:b1:cb:f7:73:dd:7e:3c:45:18:42:e9:17:fe:fc:8a:09:53:
2b:91:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:03:28 2026 by rpki-client