Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
File: ym3NrZkpBFbG18GOscBY2UEIiAE.mft (raw, json)
Hash identifier: IEpLdAoWRMIe80IQw4ZxbJ+VRpc55b7GdJ2pCxk4bFU=
Subject key identifier: BF:05:8A:CE:44:F8:3C:F9:1C:69:9C:47:72:BA:AB:35:C2:FB:A5:98
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 019D288464BF862E9042874F73588C122DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
Manifest number: 182A
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: BqLAw4i8RwTxiSET0W9t_-557cY.roa (hash: 3vmf1uaZgtPEqrsbNZ2vEk3NVigksfRtXsG72qUjM2Q=)
2: ym3NrZkpBFbG18GOscBY2UEIiAE.crl (hash: zgk4YqcCFNT+5JdM2WVKW64Z2s3snvZ5QfK3NVtv4FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:64:bf:86:2e:90:42:87:4f:73:58:8c:12:2d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=bf058ace44f83cf91c699c4772baab35c2fba598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:f7:22:0d:a7:7c:a1:8a:58:bb:2c:5b:a8:
d2:61:0a:8c:15:ea:11:b9:48:4a:aa:a8:cd:39:99:
6a:b5:48:87:35:51:8c:a4:71:8b:0b:9e:be:a4:81:
84:00:c4:b5:03:b6:d6:db:87:f6:e1:a5:c4:fe:9a:
58:ff:c3:8e:ae:ba:e1:7a:39:f3:52:3c:7b:41:5e:
f8:68:09:f7:a5:71:e6:cd:5f:45:07:b8:0d:9a:da:
e5:ca:6e:f1:b7:4e:87:8e:3b:de:39:ee:78:af:f1:
eb:6e:6a:9d:5f:3c:4a:16:9a:b3:f8:ff:94:be:0d:
e7:2b:4a:29:4c:d2:6b:45:ae:01:98:b3:09:ec:d7:
df:1b:d3:6b:0d:71:53:58:66:81:a3:13:cd:20:3e:
31:c0:a4:59:45:bc:87:6b:ab:ba:76:56:91:69:11:
ab:f4:d5:60:6b:1a:e9:fc:6c:3e:e5:83:c6:1e:88:
46:74:a7:d4:3d:21:ef:21:86:05:a6:f6:bb:e7:80:
80:a3:ac:5c:2a:68:01:75:40:84:b1:a1:62:ab:48:
7b:d7:04:8f:63:b1:c0:4e:a9:b4:a7:17:17:0c:c0:
00:4d:63:04:ed:52:e9:2a:34:34:92:16:24:6c:6d:
db:c6:5d:7b:4b:21:59:aa:2d:ad:b4:c2:11:9d:ae:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:8A:CE:44:F8:3C:F9:1C:69:9C:47:72:BA:AB:35:C2:FB:A5:98
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:70:66:92:c9:12:bb:c1:3d:ca:80:7a:0b:d3:d1:13:ac:
7b:7d:df:08:5e:55:22:85:d9:04:fe:c3:6f:44:ce:c9:e0:7b:
04:44:3a:64:27:d6:5f:69:36:ef:8e:1d:6e:7e:85:f3:59:1b:
69:79:2a:cc:c5:a1:55:fd:b4:9d:ce:cb:e1:e2:57:5e:82:2a:
69:c4:1d:94:4c:9b:29:63:43:75:dd:b8:1b:17:90:16:31:c3:
ff:de:b4:ee:0d:2a:68:c8:cd:aa:5e:8e:96:a6:59:b3:f5:0e:
29:21:ea:50:5c:08:9f:a2:41:72:7a:0f:25:e8:a1:f2:8d:99:
34:48:b0:fc:48:1e:aa:31:8a:3b:9b:28:18:c7:23:a2:76:67:
3c:9f:fa:dd:2a:03:b8:5d:2d:3e:be:42:04:b9:2b:fe:31:bd:
04:f7:74:db:53:e7:aa:ed:1e:e9:72:e1:2b:b6:16:4e:4f:14:
d8:77:05:b0:34:de:66:c2:45:51:db:ea:93:91:d7:03:44:b6:
ae:7d:0d:46:fd:59:85:e5:98:ec:86:de:b8:e7:3c:35:ad:a7:
3d:f9:ab:2b:73:11:bb:18:77:b3:89:95:25:6b:93:83:f6:a1:
fa:4f:25:66:fd:6d:48:a7:e9:19:ab:d3:8b:7e:b0:93:46:38:
67:25:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:10 2026 by rpki-client