Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: d4DNUE87KjOzic8iHEKPG4+mGGL7se8NwWLSBdl3wjI=
Subject key identifier: DD:A5:16:0A:58:4A:6D:2C:A1:D6:28:40:9F:34:04:BF:B6:CC:4F:79
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 01A0D0ED57356893A7633ECE8B2708EE84F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 01:00:10 +0000
Manifest this update: Thu 24 Sep 2026 01:00:10 +0000
Manifest next update: Fri 25 Sep 2026 01:00:10 +0000
Files and hashes: 1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: /2a4Vv7SrRtyCA3MKbwGUyI+ZEbMsidIsRAlPNBb3ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:57:35:68:93:a7:63:3e:ce:8b:27:08:ee:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Sep 24 01:00:10 2026 GMT
Not After : Sep 25 01:00:10 2026 GMT
Subject: CN=dda5160a584a6d2ca1d628409f3404bfb6cc4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:38:1c:b1:a9:dd:ef:48:02:a1:10:a2:07:
bb:c1:5c:5f:89:3b:ed:83:46:ba:21:8e:75:df:56:
07:40:8a:a8:ba:d0:41:04:66:b4:a1:ec:4f:ff:0a:
7d:7b:bd:73:e7:6f:91:9e:80:ef:68:e2:d1:5c:fc:
a6:c4:ed:34:0f:20:bb:16:a2:e7:b6:c4:08:08:46:
70:da:52:aa:f0:f3:63:ff:69:3b:00:1e:f8:e4:8d:
0e:ee:de:3b:0e:e1:0b:86:32:62:92:27:db:9b:15:
de:e9:b7:13:fb:01:c6:68:a9:3a:11:b7:f1:f2:ca:
08:08:f1:55:6d:e3:f7:08:11:55:ee:ed:36:89:19:
9d:53:56:67:c4:aa:c8:9d:4a:56:8e:18:f9:6f:5d:
17:cc:7d:21:c5:b7:ad:19:0f:64:ac:7b:2c:10:f5:
1b:a2:2c:8c:87:8d:df:bf:51:c5:bf:79:e0:4b:8f:
d0:ea:90:14:66:c0:22:7c:dd:11:e7:d2:86:5f:36:
93:34:6a:83:54:90:8d:33:10:06:1e:60:2e:36:9b:
82:78:6e:6a:41:2c:cb:00:31:4d:61:61:0f:37:d3:
2c:13:8c:01:f7:76:61:86:d0:7c:be:f2:c2:e5:ed:
87:b0:52:ec:54:ee:91:ec:b5:10:6c:ea:ba:06:ce:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:16:0A:58:4A:6D:2C:A1:D6:28:40:9F:34:04:BF:B6:CC:4F:79
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:1c:11:f2:93:e3:c9:03:81:b2:b3:a0:53:0a:f8:d8:c3:
0f:57:83:2f:61:12:9d:7c:59:43:85:60:c4:99:87:39:09:c2:
4c:81:db:2c:87:42:1e:87:37:78:2b:16:8f:65:59:84:be:4a:
c1:7c:75:75:9e:a6:f3:88:bf:88:20:f6:26:ad:71:a2:e7:e6:
04:32:d6:dc:c1:f7:9a:49:88:28:46:09:be:15:b3:e6:1a:5c:
19:e9:83:1d:b5:ea:3b:7f:55:db:0b:0a:c5:fa:e8:0b:ae:f3:
1f:9f:3c:8a:7f:a0:2f:eb:15:c8:00:bf:fa:4e:51:b5:ca:26:
7b:e7:77:29:c6:73:c8:a8:c7:a8:f1:e2:67:9d:e7:95:29:3f:
89:b9:64:28:da:21:0c:31:0b:4d:86:c7:b4:3c:40:8c:57:a4:
50:4e:92:70:23:09:7d:04:26:02:c2:17:ca:35:1f:49:6f:a2:
4c:2c:fe:58:f2:2e:5b:ed:66:69:67:28:cc:88:df:85:b2:54:
6c:e2:30:18:d7:40:fa:a6:10:e9:d2:a9:45:7f:d5:56:73:7e:
de:4a:cf:b4:76:7d:36:b0:5a:fc:ab:0f:37:01:a2:a3:2a:b6:
24:e6:f0:a6:fa:a3:fa:c8:9d:b0:90:48:57:07:33:f5:60:4c:
df:e4:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:48:27 2026 by rpki-client