Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File: YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier: lumPDQz3dQmZYsRqEZeQEncbXAGjnt3OskdFTJmjO1E=
Subject key identifier: 10:10:BE:71:C5:41:A3:5B:11:38:0C:F5:7D:39:A7:AD:50:E3:30:FC
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial: 019D26CD0DA01D6B6926E866B27CC96282C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number: B0
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
3: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: KZWXezb8OLhtGpj3JT9JN2SIgELdDIsnQyfXljaq6VQ=)
4: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
5: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0d:a0:1d:6b:69:26:e8:66:b2:7c:c9:62:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=1010be71c541a35b11380cf57d39a7ad50e330fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:15:96:4c:ab:df:85:41:6c:11:af:69:bb:
7f:df:ca:ae:00:90:68:63:90:76:ec:22:85:a9:a4:
a5:a7:41:73:1d:f1:35:1e:08:6d:01:dd:8e:13:1a:
91:50:fc:c8:26:74:80:e0:4d:3e:d6:fe:f9:2d:9f:
19:85:b8:57:69:68:63:1b:20:32:91:5c:5d:ba:a1:
b0:4e:95:25:2b:be:7e:b3:19:01:db:07:a2:cf:a4:
25:a1:50:72:07:4d:46:6c:19:e9:a9:52:e6:18:f7:
70:33:bd:37:92:76:41:3e:9d:98:0a:70:4a:ad:f6:
57:92:ec:55:b3:52:f5:0a:b5:37:c4:ed:36:3f:fa:
60:f7:b6:d1:26:0a:19:e4:53:79:a1:69:65:91:3d:
53:49:a6:eb:aa:a8:b3:c8:f6:1c:4d:d5:0c:da:ef:
ee:53:18:26:cc:e2:74:1e:5a:c6:ee:3a:61:b6:42:
f1:19:31:f8:97:05:5d:3f:08:71:44:74:64:74:f9:
a8:79:05:45:b5:4c:92:64:2b:5d:88:f7:cc:a0:ef:
8a:cc:69:dd:da:fe:9e:3a:6c:39:b3:ed:dd:05:6a:
9f:00:02:22:10:18:b3:07:b7:e8:8b:e6:be:07:37:
4c:ca:f1:c4:81:34:01:a9:b3:1b:ca:c6:c6:5c:d8:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:BE:71:C5:41:A3:5B:11:38:0C:F5:7D:39:A7:AD:50:E3:30:FC
X509v3 Authority Key Identifier:
keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:e0:d5:d9:9a:c0:cb:b8:2e:e3:80:a4:28:95:c4:34:85:
e9:e2:fe:b9:57:fc:78:74:bf:79:f2:cc:3d:5d:15:5f:ec:fa:
b7:90:1f:4b:aa:21:c8:24:e6:91:e4:27:67:80:1e:7b:67:b0:
26:e2:7e:df:66:92:4c:f0:60:f2:00:ab:ff:e1:f7:f1:1b:8a:
7f:21:2f:f3:99:a4:a3:33:df:22:a8:f2:77:a6:9c:c2:00:1d:
36:9a:43:33:a1:4c:89:ec:1b:78:2b:74:79:6c:32:6c:19:cd:
13:38:5b:77:66:57:e9:88:56:6f:b3:c7:0d:1e:29:33:0f:a9:
93:5a:fb:b6:8d:64:b7:85:93:cb:5f:77:ea:16:c9:27:30:74:
fa:a8:32:7e:c5:d1:08:ac:d5:73:47:0d:5d:51:4b:0e:52:50:
4f:ad:de:09:d0:7a:cd:ce:46:ed:9c:75:ec:95:e7:fc:b7:ea:
9b:7c:f7:89:96:96:4e:58:10:c2:6a:5d:1d:7e:f3:a0:77:bd:
fe:7c:ad:55:45:1d:c5:4b:44:ec:77:28:3b:8f:9a:1f:09:7f:
4b:80:0a:cb:02:92:79:56:d5:f4:fb:1a:d7:7e:a0:63:98:3b:
22:21:ee:f6:6b:e7:1d:7b:ed:8f:73:fc:ea:a7:60:ee:ed:8e:
4f:d1:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:10 2026 by rpki-client