Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: SJx+Kc7SGQVYJXtHYAHFSeOVGEG7Y0PunyKlrB03NgU=
Subject key identifier: 90:CA:53:94:79:63:9B:99:9A:7B:62:10:DA:8E:96:47:C2:EC:E2:D2
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019D26CCC3AC3CB87D317E328B4B633EEF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: H5EcddqTQwQmCTn+WnD2h8S4p/NsjXKODHyKcjMq+7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c3:ac:3c:b8:7d:31:7e:32:8b:4b:63:3e:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=90ca539479639b999a7b6210da8e9647c2ece2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:b7:6b:79:a3:72:63:5f:5e:5e:ad:b4:2e:
5b:0d:71:94:0d:f4:45:19:da:59:a6:7d:3a:0d:58:
e4:d0:9d:ac:72:43:bd:a2:97:90:ed:9f:49:88:95:
32:e5:79:6b:99:eb:fe:c2:58:5d:9d:4c:4f:01:38:
67:db:48:51:b0:03:04:98:f3:6e:54:4c:2d:74:37:
e1:da:6a:3a:ea:e0:14:76:da:56:48:9b:9c:f0:c6:
1f:62:c2:55:56:23:aa:65:c7:e6:65:0d:e4:9a:9b:
23:c9:5d:f3:98:7b:89:fa:32:92:28:92:4b:c6:69:
75:0b:94:d3:1d:f1:51:d3:a3:f3:b7:0d:cd:72:f3:
39:23:0e:95:c1:e2:44:96:d3:cf:ba:50:49:33:99:
a1:8a:14:02:24:36:f0:55:a4:b0:96:f2:14:d3:58:
db:d9:fa:1a:e7:10:f0:92:bb:9a:a8:3d:ec:f1:c7:
42:ab:9e:a4:ea:f0:09:3a:65:7e:cb:c2:a8:01:97:
51:ca:4e:9a:91:99:c0:b9:44:91:76:da:50:f6:ae:
03:e6:26:24:10:bb:12:29:98:f4:52:f9:eb:68:c2:
83:e0:6d:3b:84:8f:43:8a:5d:42:28:0e:b0:17:d3:
52:a0:00:85:12:9b:c2:2a:42:0c:8e:47:f0:bd:a6:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:53:94:79:63:9B:99:9A:7B:62:10:DA:8E:96:47:C2:EC:E2:D2
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:c2:68:5c:74:b5:71:f0:3f:d6:0b:97:89:a7:05:74:a7:
7b:bb:b0:37:e3:f0:a1:5c:40:1e:d2:1a:74:1a:86:15:92:b3:
66:08:56:2a:84:6c:3e:c2:ee:df:d6:ba:26:ed:2e:4c:6b:09:
df:b5:bf:3d:ea:73:bd:93:8e:6f:f5:dc:88:4a:f7:08:9f:3b:
9c:df:0d:c2:2a:1d:54:87:ea:2d:a9:b3:bf:93:0d:0c:3a:d6:
ab:9c:ea:a0:b5:c3:7c:20:8e:57:15:98:70:2c:e2:b0:df:56:
64:21:13:b8:a2:7f:9f:2c:c8:3c:57:8b:a2:44:45:1b:3c:f2:
ba:73:ca:f7:d2:04:4c:82:4c:5a:d5:a1:32:df:7e:69:9f:94:
13:d7:0a:0a:82:1f:27:37:0e:84:e6:e2:09:85:82:b1:4d:33:
20:8f:c0:2f:aa:23:c5:0c:70:d6:64:e6:2a:85:59:af:0a:fd:
b2:1d:be:b5:5e:00:9e:10:18:a3:85:fa:7c:c5:d0:c1:1f:cb:
c6:1c:b0:1b:ed:06:cb:1d:0a:cb:7e:dd:20:c8:31:08:26:bf:
bf:c0:02:8b:e0:16:77:0b:14:88:57:2d:84:1e:4a:22:2e:f8:
b3:41:67:e2:3b:90:75:ad:4b:16:f1:9f:5f:50:67:a9:48:76:
dd:df:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:05 2026 by rpki-client