Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: lgT/11JCqZAPZIesXb6/4lyXklUj8QshHa0BRLTdhLU=
Subject key identifier: 92:27:A4:F8:28:86:0F:4F:05:89:4E:2C:03:F1:6E:03:22:8D:AC:B0
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019D2B4E9EEBB7EA347FD4F809D3AFCB33B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 18:01:05 +0000
Manifest this update: Thu 26 Mar 2026 18:01:05 +0000
Manifest next update: Fri 27 Mar 2026 18:01:05 +0000
Files and hashes: 1: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: 99VK8+4SbQuNrSHtGFHUKZvW//qty2a2Y938CzhC0+Y=)
2: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:9e:eb:b7:ea:34:7f:d4:f8:09:d3:af:cb:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Mar 26 18:01:05 2026 GMT
Not After : Mar 27 18:01:05 2026 GMT
Subject: CN=9227a4f828860f4f05894e2c03f16e03228dacb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:ef:52:78:a7:20:d9:4f:da:15:30:95:f9:
8f:fb:62:74:ee:d0:c5:17:69:02:26:5c:ba:b4:e1:
b9:70:d9:3e:7f:ea:f0:4b:47:60:bc:e1:7a:a4:b7:
78:1a:e1:b2:5f:62:e6:ba:42:ad:19:01:6c:a3:e0:
25:d9:1a:18:e2:fd:02:75:2d:e3:d2:f3:15:28:f0:
65:6b:30:61:fc:10:89:9b:b7:6e:05:ec:f1:ca:cd:
62:2f:e7:5c:f0:2e:3c:47:69:27:a1:b7:2e:48:da:
e3:3f:f7:2b:aa:36:d9:31:26:84:e1:b9:37:0e:ef:
1d:ab:8c:15:69:1f:2d:6f:04:c6:71:78:af:2e:44:
56:84:43:96:c5:70:c9:fd:83:37:8a:a7:ee:3d:23:
49:21:82:39:1f:51:0f:16:34:76:f6:22:1b:c2:89:
25:3e:9a:31:6b:8d:a4:cc:b6:75:b6:42:74:ea:56:
b4:15:4a:eb:90:69:84:68:ad:43:bc:fb:09:fd:53:
dc:25:b6:c4:71:06:a1:dc:ef:66:51:1d:d8:68:76:
3a:ff:0b:d5:8c:28:4c:fc:43:e8:50:55:e0:b4:d7:
37:ec:3f:31:5f:6b:90:44:46:01:68:5b:ff:26:d9:
84:01:11:08:43:b1:3d:42:c8:11:4e:11:b8:6f:f8:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:A4:F8:28:86:0F:4F:05:89:4E:2C:03:F1:6E:03:22:8D:AC:B0
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:f2:e8:00:e0:a3:ae:7f:e8:42:9e:05:dc:9d:7f:65:38:
58:9a:e3:f1:1e:0e:05:82:bf:32:5c:f4:60:b8:73:1e:f1:df:
9f:1e:a4:21:05:ed:aa:ef:ac:cc:3b:4b:fd:b4:85:e9:88:de:
20:17:eb:ab:dc:39:71:3a:94:a4:0c:78:f9:67:40:dc:37:0d:
a4:25:f8:e1:35:2f:8d:c2:ab:33:b0:44:e1:9a:92:fb:87:a7:
49:8a:fd:b5:3d:b4:99:4e:f9:ad:6f:4a:bb:82:8a:77:02:c1:
d8:61:0c:1d:07:de:d5:0f:d6:8e:e9:c9:25:2a:5d:ac:d6:25:
50:e5:49:44:d0:3a:d8:fa:f9:99:97:60:14:c0:53:24:30:93:
e9:f9:6d:05:12:21:9a:60:57:cf:7a:06:c6:1c:fb:a0:01:f3:
1c:68:01:83:b5:10:93:b3:58:23:12:48:30:6a:86:c5:16:0c:
23:ed:37:f2:18:82:4a:ee:7a:6b:c7:27:43:f3:29:07:ec:80:
aa:3b:b1:a5:e2:fd:9d:a9:6c:8c:db:49:07:e1:39:29:3a:c4:
80:5a:03:bc:83:8b:1a:f8:1c:22:16:df:61:03:5e:99:50:73:
e9:5b:f0:6e:48:d2:e2:f7:ee:3b:70:e5:d0:b1:88:b2:1c:fd:
a3:7e:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:23 2026 by rpki-client