Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: NRTtpsBjirxh2N6LGcGbYkOF3PG+NRrCMaPQ6TNVsGg=
Subject key identifier: E0:25:25:87:B3:1C:32:DA:B2:B8:F8:41:AE:F7:1B:2B:DA:DE:9D:59
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019D27721B2246E4F5B05A8F3D9297A68FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: wMLj3AJ6Yq13NCacpJU/Cz3mHw4B8fZhNJUri7tV7Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1b:22:46:e4:f5:b0:5a:8f:3d:92:97:a6:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=e0252587b31c32dab2b8f841aef71b2bdade9d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:1a:ec:d0:11:19:77:17:de:4c:17:08:92:
9e:d5:a3:17:7b:07:47:21:ea:b3:61:30:52:86:7c:
6f:5c:5c:fe:f1:a5:0c:d0:0b:c4:5d:73:e9:5d:12:
f4:c4:48:27:2d:82:b1:b4:43:4a:07:7d:3a:53:a7:
60:59:b5:57:df:99:59:57:51:3b:e3:c9:9f:1b:84:
60:07:2c:2e:af:0e:af:59:94:29:5a:74:00:bb:14:
a6:8f:84:af:b9:ad:cd:05:be:f5:c5:de:fa:ed:45:
20:b4:c5:eb:ef:8a:81:49:0b:0f:d7:96:d5:36:3a:
da:56:78:4d:31:5e:cc:08:21:fa:ea:69:1f:fb:4d:
00:1b:cd:64:14:57:2c:fc:c0:79:1e:f4:45:c5:a5:
61:2e:51:5e:68:0d:db:7a:64:31:b6:34:13:4f:a5:
e3:9c:60:ab:6c:23:f5:db:5b:36:d3:59:68:66:af:
2f:c6:73:2b:d3:e8:14:b6:f9:76:a6:81:66:7b:0a:
30:3b:db:77:2f:a1:6b:c6:90:b9:e7:b3:72:2c:4b:
fb:14:47:92:96:d5:4a:f7:92:60:2a:28:e1:36:ef:
dc:3e:fa:c4:ac:d2:5c:a1:c7:1d:01:dd:dc:b5:f0:
4d:52:4e:5f:f6:fe:b1:51:8e:4a:b2:80:e8:34:a2:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:25:87:B3:1C:32:DA:B2:B8:F8:41:AE:F7:1B:2B:DA:DE:9D:59
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7b:cd:e0:21:8c:08:f8:ef:36:0a:bb:7e:eb:1e:34:13:8a:
56:fe:d8:81:7c:60:e1:2c:ca:34:77:4c:07:d3:87:6a:03:9a:
16:01:ff:75:a5:2f:ed:e2:24:03:91:79:ae:bc:dd:53:c2:95:
d0:82:06:fa:fa:46:d5:4d:a4:ea:b9:23:d4:c2:5d:a5:32:89:
73:dd:02:96:ab:85:46:a1:83:4b:de:75:66:af:4c:ff:36:66:
89:4a:31:6d:34:45:49:a2:d2:a3:c4:81:16:ef:b6:ae:78:7c:
95:e0:af:a5:dc:48:15:73:54:72:eb:7e:e5:56:0e:11:b6:e8:
c1:45:44:4a:e4:1f:00:2e:27:ce:64:d1:7c:d5:18:42:2f:a7:
5e:97:00:e9:11:43:12:60:eb:3a:cd:df:13:cc:c6:4c:95:da:
93:e7:83:38:ac:a2:26:20:58:27:4a:2d:a5:34:06:ed:71:20:
87:dc:4f:25:3e:85:a0:6e:21:c6:34:37:58:28:4b:57:bc:10:
18:0e:c1:8f:75:27:59:82:e9:89:3b:f7:dd:95:69:ee:51:72:
96:db:9d:60:10:c4:d6:a5:9b:00:8d:a5:50:4b:20:b9:eb:be:
2b:df:ff:46:a1:83:43:38:dc:81:b6:fa:c5:55:e0:b8:00:29:
db:2f:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:29 2026 by rpki-client