Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: 8HNLjk184bFJKmKwLUXjsRVcUgj5kbcTC5pVhP+3yXE=
Subject key identifier: 50:2D:D3:EC:23:44:E5:BF:94:89:E4:EB:ED:CA:34:8A:E1:06:B9:67
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019D281700F2D6675866A45866261CAC7A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 1021
Signing time: Thu 26 Mar 2026 03:01:29 +0000
Manifest this update: Thu 26 Mar 2026 03:01:29 +0000
Manifest next update: Fri 27 Mar 2026 03:01:29 +0000
Files and hashes: 1: 0EalOX44qspmegVtsk1N4TSFVRU.roa (hash: JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=)
2: HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (hash: z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=)
3: PdnPH6yi9ZnmicZhFfMsL9RyZYk.roa (hash: X/n23r26eZcatz6lbggQ+x24Y1SqygjdVMpGAvxLhes=)
4: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: e4/yhBxO7DRASoH9fSFB0m4642BUL7CbgWb3dsVPBaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:00:f2:d6:67:58:66:a4:58:66:26:1c:ac:7a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Mar 26 03:01:29 2026 GMT
Not After : Mar 27 03:01:29 2026 GMT
Subject: CN=502dd3ec2344e5bf9489e4ebedca348ae106b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:64:05:a0:11:1d:0f:16:19:ad:98:40:45:
e3:03:a1:35:c2:45:33:c6:9e:c9:36:fa:dc:d3:23:
ab:b5:81:72:09:2a:c5:34:84:a6:f1:8c:77:17:cf:
a7:e1:ef:d5:e9:b8:88:aa:6c:c8:60:57:cb:9d:2b:
2c:f2:91:e1:8c:81:13:9f:f1:69:a1:b3:c5:55:b1:
96:44:6a:8e:d0:97:3b:a1:7e:6e:c3:e5:a3:77:7e:
d3:a9:3b:d1:47:bd:02:ad:14:a8:44:42:b0:0a:d4:
c1:0d:a6:e9:5f:f3:48:9b:0b:57:0b:2d:46:02:dc:
0c:a8:25:26:b1:9f:ed:e1:63:ea:91:81:c6:a3:e2:
fd:8b:a5:06:63:93:51:ab:6c:8f:50:ce:c6:9c:90:
ea:df:1b:8f:63:aa:ad:c6:e4:c8:d1:a2:f3:03:f4:
3d:9b:18:64:d1:be:28:e4:c1:b2:ab:06:44:0f:56:
55:b9:bd:7c:00:eb:49:74:aa:c3:f3:e7:57:22:fc:
df:2d:01:2b:20:a5:a4:e9:7f:e5:03:d0:b0:89:78:
49:d6:2c:68:99:ea:ed:53:24:71:ab:35:cd:e5:ae:
04:76:de:9f:0c:12:bf:54:a7:c0:0d:a6:a7:87:35:
62:25:73:d9:bb:73:7a:5d:e0:96:0c:da:5b:1f:48:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:D3:EC:23:44:E5:BF:94:89:E4:EB:ED:CA:34:8A:E1:06:B9:67
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:f3:c6:c3:49:37:6d:06:44:2d:a6:6c:0a:6c:69:6e:be:
89:84:57:96:9e:f2:4d:8d:d7:5d:8b:68:06:5f:55:cd:82:ae:
e5:c1:2e:62:39:52:e2:9c:8a:6a:b3:1e:dc:47:ef:9d:c3:9e:
de:ee:2d:ea:4b:5a:a3:61:f3:fb:68:9d:ca:de:63:44:93:fb:
1a:a6:9d:a6:6b:80:5d:30:3b:a2:0f:cd:12:bd:2f:5e:43:1d:
16:9e:2a:58:33:6a:62:e6:a4:6a:3a:62:d6:8b:1f:39:90:66:
41:dd:26:7c:48:ef:0b:bd:2d:a1:02:ed:bf:22:ab:54:2f:be:
aa:a5:76:41:ee:c2:af:f9:74:7f:60:ec:7e:51:83:64:96:b0:
42:d5:96:38:1a:b2:67:ce:08:e1:31:91:e9:00:db:2b:68:fe:
2e:db:34:21:c5:81:25:e8:62:f5:d5:e8:ac:50:35:32:21:d7:
73:9c:3b:af:6b:7d:f7:68:a3:77:68:85:48:37:95:0e:68:99:
df:88:93:ec:2c:6b:04:14:43:b2:37:89:7c:03:7e:01:fb:d4:
14:ae:7d:80:eb:70:1b:d2:fb:e9:61:bf:7a:c2:12:aa:22:a7:
48:4d:d8:91:5f:9e:6b:38:ec:50:06:66:1b:51:f0:00:53:bc:
a5:99:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:04 2026 by rpki-client