Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: UBN1z9P06QiZMmuKnBCfZJKnoD8J9TyEicrMMp0mhz0=
Subject key identifier: 75:CC:77:5B:50:43:09:BD:66:28:12:5A:77:F5:CF:15:56:85:E1:3F
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019D2884D9AE7B81BA0CF2C50F9F5A7E143C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:28 +0000
Manifest this update: Thu 26 Mar 2026 05:01:28 +0000
Manifest next update: Fri 27 Mar 2026 05:01:28 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 1M2r848F1N76vSblkuDPwAM3JI76emtrH1GnL6HYTsQ=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d9:ae:7b:81:ba:0c:f2:c5:0f:9f:5a:7e:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Mar 26 05:01:28 2026 GMT
Not After : Mar 27 05:01:28 2026 GMT
Subject: CN=75cc775b504309bd6628125a77f5cf155685e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:93:0f:6f:45:8d:7f:de:1d:bb:03:41:28:
a8:57:55:ad:55:b5:53:ac:e2:1d:d5:bf:a9:03:f9:
03:47:f5:11:d9:4d:d1:86:89:e3:8b:9e:0e:0e:49:
c4:df:78:58:fc:31:b2:ea:43:a2:45:23:c7:e8:df:
9f:af:3c:de:3d:fe:9a:93:a3:b4:11:26:da:06:01:
bc:3a:ae:ad:9f:3d:91:83:08:ed:68:73:a7:3f:f8:
39:65:a2:49:99:d6:f7:60:64:72:94:fa:ae:67:76:
e3:b1:fe:d7:c9:c7:42:69:6d:5f:e1:e2:95:c6:9d:
62:e9:de:db:2d:58:94:b4:61:74:cc:04:96:33:2e:
6a:fc:bc:8d:a2:05:20:74:b5:1b:56:27:70:88:fc:
d5:a9:78:9d:93:3d:94:d0:ae:92:97:99:7a:14:3a:
74:de:28:d4:32:dd:eb:74:06:8f:92:09:73:c6:0a:
19:b7:d1:f5:03:1c:4f:47:cd:8e:65:08:c4:19:11:
fd:23:82:be:28:83:47:ae:60:6d:ce:64:ae:58:8a:
b2:9a:45:40:6a:e1:57:da:29:78:b9:6d:32:14:bd:
a0:4d:57:50:9d:8d:fa:dc:d1:ab:a7:34:9f:2a:5d:
66:5e:ca:a6:cd:8f:32:af:08:bd:88:9d:a7:8f:88:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:77:5B:50:43:09:BD:66:28:12:5A:77:F5:CF:15:56:85:E1:3F
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:d2:fe:02:92:95:21:be:51:ef:04:de:e9:4b:38:dc:96:
76:55:a4:c7:cf:82:5a:5c:93:d1:46:79:c3:60:a5:a2:e3:d7:
23:32:84:6e:59:ac:23:79:f1:49:43:01:50:7d:a8:12:5a:b9:
56:ff:37:1f:11:d8:91:97:0a:45:03:50:8d:15:76:c6:c6:13:
7f:4b:d5:45:dc:c5:52:a0:57:e5:5d:f9:62:c7:65:fa:7d:37:
7f:2c:7f:aa:1c:31:7f:61:e7:d8:dd:16:f8:51:ac:a2:58:57:
21:f8:e2:6e:07:16:b2:df:4e:7e:97:04:22:17:23:e4:1a:4b:
32:05:41:23:fb:36:98:15:9a:95:6a:12:bd:c9:42:c4:64:0f:
c3:93:ac:08:f6:6b:fd:af:b8:01:fb:76:52:08:55:0e:53:e1:
29:8e:70:93:8a:aa:bb:c9:29:85:ca:a1:16:90:c8:42:c2:24:
bd:4c:48:ec:0b:77:27:a0:fd:e0:54:eb:3f:0c:5f:6e:2a:3f:
64:45:41:36:74:d3:39:7d:11:72:28:a7:5c:1b:c3:b5:ca:3f:
95:ec:c2:d0:8b:36:17:db:b2:5d:1d:3c:90:52:d1:01:0d:da:
58:f3:0a:c6:ed:8f:8a:5b:e6:d4:a5:7c:20:09:19:f4:40:9b:
90:05:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:21 2026 by rpki-client