Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: Yuu1LrZlD2ROdG6cfBHFjMlUrnIJaRjndoK4QvhOyuI=
Subject key identifier: DE:5C:F6:B7:9F:BE:0F:D7:4E:3E:1E:D5:F0:D3:82:9A:27:E8:E7:9D
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 019D265F8655BE161B5450B570648FF160AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: 2BMOpp_wwQldET06QZPy2wGLMZE.roa (hash: o3jxLcUWsaBV2UnbMYTOzdFwg6geCgqlvEJuA1VSTfU=)
2: hoZI_9EArI1Si7uz13Ke8OnteiE.roa (hash: LayP+QLnOj4vcYwwGf7M4XCZtnOUkpFaK8bKqcrT3zA=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: aEE7sck2vBQE20n0Ka05oTZlExqEadEoTZ1har6T/qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:86:55:be:16:1b:54:50:b5:70:64:8f:f1:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=de5cf6b79fbe0fd74e3e1ed5f0d3829a27e8e79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:90:70:8a:6d:33:bf:51:94:0d:5b:56:21:
c4:ad:2b:bb:0f:12:67:19:4e:f2:be:8c:42:03:cd:
92:57:8e:52:16:df:65:bc:e1:e1:1e:7d:72:ff:86:
40:df:e5:a9:0d:6f:cf:63:ee:da:7f:8e:1e:85:17:
29:27:a4:a3:ac:57:49:c0:54:c2:78:0f:a9:5b:ba:
00:96:22:73:d8:07:1b:bb:64:e0:f8:50:42:c6:7a:
1b:4d:c3:c2:a9:35:6a:e3:72:97:44:5d:dc:fc:6b:
d0:79:0a:36:91:24:fc:1a:54:53:0a:c3:a8:05:82:
8d:2d:8f:70:5c:97:ee:92:04:bf:c2:76:3a:e2:63:
d7:fd:35:36:52:37:50:4a:0c:25:d1:aa:fd:1d:22:
af:9e:41:a3:3f:e5:0f:ed:71:5c:17:f7:9f:28:52:
68:30:12:44:a2:87:85:b1:c2:f2:e1:1e:c2:18:63:
93:71:f4:b1:ca:56:1b:dc:89:49:af:40:63:64:72:
0f:84:a3:d5:0e:bc:b2:64:37:2a:8b:e2:6e:76:5e:
09:7a:1d:af:04:f8:5d:1e:9e:e7:0b:55:43:4a:3e:
8d:c3:fa:6d:dd:67:29:5a:06:3e:b9:dc:90:38:12:
6f:5e:3c:c7:60:e3:fe:0a:98:f9:de:ec:79:bb:a8:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:F6:B7:9F:BE:0F:D7:4E:3E:1E:D5:F0:D3:82:9A:27:E8:E7:9D
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:cb:00:5d:43:f4:1c:b4:ca:29:50:d1:30:38:8d:a1:9b:
af:aa:cf:90:ac:3e:b2:09:c5:f5:5a:91:2d:ab:00:36:9c:ca:
de:94:c1:c0:2f:03:34:a7:8d:33:07:69:36:d8:e1:3f:cb:11:
9e:f9:02:7d:f7:7f:a9:06:bc:02:09:29:fa:d5:97:16:1e:3b:
f4:71:90:09:ae:4b:b5:1c:46:b3:2f:cf:32:8b:73:2b:d8:b5:
1e:b7:5f:86:b6:a2:28:16:e6:ad:b7:67:b1:cb:7e:95:97:00:
cf:f6:55:ff:dd:0c:7d:99:0f:59:d8:e9:da:a8:18:fa:38:58:
14:28:ba:b7:60:83:47:1c:fb:72:e6:0d:76:a8:95:aa:05:64:
f7:84:ed:d4:84:ea:7a:06:54:07:75:90:6c:73:10:14:db:ee:
5f:8a:ea:af:7d:a2:a2:92:20:21:56:75:19:43:2c:4a:c1:25:
de:34:d8:83:9e:12:b3:36:c7:1b:ae:21:03:bf:d4:2b:45:9c:
a8:00:54:9e:a4:6c:4d:24:ad:ab:6f:7c:ac:2c:68:a3:85:20:
8c:33:27:26:58:1c:cc:e1:a0:b6:0e:26:48:13:44:9d:7e:99:
d9:96:d4:22:c4:2c:28:d0:eb:fd:b4:59:bd:f6:af:a1:ce:e3:
6c:f6:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:50 2026 by rpki-client