Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: OOTZrrtq6bd6q3uQpi1EC9+ast1lo3WeLgKducvLcIw=
Subject key identifier: A3:00:B6:28:A4:59:C0:C7:A7:08:10:58:49:B5:95:FA:14:6D:00:42
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019D27DF78279EC87EFA3B510AF73172168A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 07F1
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: tFK370Mkzz2Qk74KbqIZkfGJXYwMTX7lpOsfcUtDnAg=)
2: lx_m8lIf1dHw-IAcYKK_R-Ht8Qk.roa (hash: lr8Q0BYtKVvTJjMgHZk4vVtiuhJT4h3L6oT8ft8o5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:78:27:9e:c8:7e:fa:3b:51:0a:f7:31:72:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=a300b628a459c0c7a708105849b595fa146d0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:dc:6e:a1:24:db:36:24:d2:6c:73:9c:dd:
26:4a:e1:74:9e:b8:c7:c0:98:ce:37:37:89:a9:68:
81:d1:6a:81:31:80:52:94:20:d5:ba:2a:55:68:22:
9b:e6:20:c0:34:06:74:85:3f:11:12:8e:2b:3d:e8:
01:1e:08:13:c0:bc:1f:6e:87:07:0b:26:5b:86:60:
42:7b:ee:5d:62:cb:38:1e:44:85:b6:d4:d9:04:78:
17:b0:41:5c:4b:41:78:5c:7e:4c:76:b9:8e:7a:5c:
3e:8f:13:a0:b1:2b:c1:93:48:a9:9b:be:58:1a:d7:
86:c5:ac:bb:6f:d1:de:77:c1:f0:05:69:37:9d:dc:
a9:40:d1:78:8a:c4:bc:2e:1a:63:1b:b9:24:c7:dc:
dc:0f:c0:62:dd:33:9b:ad:bd:bd:91:18:60:e2:d7:
15:0a:b9:fe:96:27:37:2f:ea:33:50:6c:cb:fe:d4:
87:08:aa:b3:73:23:18:14:e5:2a:7e:77:35:23:dc:
9b:69:24:de:c1:32:c8:ba:69:de:a6:ac:38:8a:9c:
80:76:ff:90:5d:f8:5e:79:24:25:5d:63:77:d8:24:
98:b6:ae:dd:59:d6:66:a3:dd:a5:9c:f6:c6:72:11:
05:c4:51:7b:26:f1:9f:e3:10:d4:07:0f:ca:11:33:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:B6:28:A4:59:C0:C7:A7:08:10:58:49:B5:95:FA:14:6D:00:42
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:84:49:0f:4f:7e:06:b9:08:52:80:df:5f:4d:ae:d4:ab:
95:97:91:3f:b3:b4:06:59:bc:25:9e:9f:7c:9b:89:8c:af:20:
1e:99:83:9f:9b:5f:1d:ec:f2:4f:b0:73:a7:50:ec:39:1f:50:
03:d2:66:8a:41:d8:47:8a:93:e1:13:4f:ee:5f:d0:cb:b2:fb:
fc:be:0f:b4:0d:15:5a:3c:4b:92:2e:1a:34:8e:d4:e1:f1:ab:
67:83:64:c3:47:21:34:41:8b:5f:b4:c8:97:c5:80:08:9f:1c:
3d:5b:10:72:cd:48:fa:e0:47:3b:63:c9:24:00:f8:be:ff:3a:
4f:89:10:37:af:aa:a1:15:8f:1f:8c:48:7a:f3:8b:04:75:5e:
06:4a:7e:35:3b:5f:be:3d:55:73:80:64:10:ea:33:36:9a:8c:
37:9d:c3:9f:38:a6:87:31:a9:af:6f:21:e0:4e:0f:24:44:2a:
dd:80:42:05:f6:ca:a7:0d:e9:e7:5f:66:cd:65:cc:32:86:a4:
46:06:dc:a3:d4:a3:b5:e8:5d:7d:fb:39:97:bc:fa:2f:7f:28:
1d:fd:4e:05:6d:39:3f:fe:0b:fc:aa:0a:e9:f3:00:cd:d0:3d:
9c:d2:35:e0:bc:56:ca:7a:6c:8f:f7:15:ef:69:09:1c:b1:52:
69:37:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:22 2026 by rpki-client