Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: Nn9mc9C4caLI7l2MxMD4MBnDlF+g6G5IJqHJ6cNiNJY=
Subject key identifier: 22:2A:00:46:4E:5C:F8:8C:84:EC:C1:5F:37:C9:FE:6F:34:82:B0:5B
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 019D284D8313A777D9FED7C45090A23C8E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: BM8B377Px_56t2SpOSeIwiYb21E.roa (hash: PQvnmkxXnZbO0KU8ZDpIj5WU+BEQoUZHX+TaiKJolDY=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: drpqGOptLn+Ao+jFLIo8VNjwEO/ishTEgCPS1MnHngg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:83:13:a7:77:d9:fe:d7:c4:50:90:a2:3c:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=222a00464e5cf88c84ecc15f37c9fe6f3482b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:ee:7d:0b:5b:2a:a9:bd:78:85:7c:4f:44:
d2:97:40:16:90:65:9c:b6:21:d4:83:59:e5:ae:85:
55:86:66:a5:aa:c8:a7:64:70:e5:de:1b:0b:80:fa:
10:0d:bc:f0:82:c1:f4:de:3e:cc:c6:aa:55:dd:7d:
e2:f1:cf:5e:33:a7:93:66:9f:5a:90:2b:29:5a:b5:
cb:39:c1:60:0a:53:e2:11:7f:94:98:45:06:9f:c8:
97:3f:41:d8:37:16:13:4b:4d:14:14:c0:b1:eb:6c:
43:46:34:fd:43:ed:7b:c2:38:79:b6:04:8e:b4:f5:
97:eb:37:11:74:31:87:26:8c:f5:d4:cf:58:ec:5c:
a4:11:ba:49:b2:b5:87:bb:49:9e:89:51:38:a8:90:
be:a6:d1:d2:ed:41:c1:56:78:53:c4:4c:30:db:74:
67:7a:a2:b4:3c:8e:25:33:49:3b:86:44:47:cc:a8:
09:02:cd:36:95:55:e4:3c:69:b6:ec:71:5d:e7:89:
fd:98:07:03:e2:e1:a5:2e:97:3c:90:78:3d:87:b7:
84:b0:19:93:10:eb:8f:b4:fa:31:95:3b:17:81:9d:
3b:0e:1f:3e:aa:8c:75:0a:2e:02:e9:40:73:2a:c8:
2d:e2:37:9b:81:be:ef:f1:67:50:6e:55:e1:bb:6c:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:00:46:4E:5C:F8:8C:84:EC:C1:5F:37:C9:FE:6F:34:82:B0:5B
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f1:67:b0:2d:6c:89:16:47:af:83:66:51:7d:7b:10:d1:8d:
dc:0f:54:f4:df:65:df:c9:46:1d:91:eb:3a:51:ec:26:f0:1b:
91:a2:b9:af:a3:14:c5:70:51:f7:a6:54:39:d2:27:4a:56:49:
c6:82:c8:d0:26:c6:89:16:4f:4d:34:cc:c5:b9:be:94:cf:7c:
10:84:69:cc:b2:b4:f5:d5:b2:a7:64:cc:84:3e:de:ad:dd:f5:
21:0c:62:97:48:c6:0c:d9:4c:31:9e:9e:84:ab:d2:af:a5:53:
54:a7:3f:89:58:91:f4:a4:27:25:4b:18:12:79:24:93:f9:40:
88:e8:53:6d:d0:51:f4:94:cc:9f:5d:ad:32:66:a7:1a:b1:dd:
ed:33:06:89:99:a6:92:a2:b9:96:95:67:08:b3:c3:c3:58:18:
9a:da:b4:48:fb:76:f8:74:77:d3:78:73:3d:81:32:d8:44:dd:
c3:79:28:97:77:3f:7c:00:b9:20:ee:d2:e3:aa:97:8e:7c:32:
07:a7:34:32:22:85:e2:01:d7:cd:a7:da:74:d5:e0:a3:07:d5:
eb:34:0d:c8:a5:1e:a0:c1:71:b3:e6:bf:37:8e:32:51:3a:1d:
07:e7:af:90:1e:9d:89:0a:3b:78:3d:b0:f8:b5:b2:63:c1:52:
87:bd:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:23 2026 by rpki-client