Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
File: YtHWd-U82GA27g-wYpBs1C-8G-E.mft (raw, json)
Hash identifier: 1K2UPvDCefn5Fcc/lIP+ThSOb0msu5QRiY8O/InQTkQ=
Subject key identifier: 28:5F:95:CD:3E:0E:22:C0:D8:FE:27:F4:52:34:ED:A3:83:FF:51:3D
Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Certificate serial: 019D2583DB2A24A74975C664D2F30154A5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
Manifest number: 0144
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: 3puevpXxEmPtA5DHMhDWBwlZRcs.roa (hash: suu5X2zzvMTRS+3D69Fq6bFOqedWTYazOQgmkhD5+Mg=)
2: YtHWd-U82GA27g-wYpBs1C-8G-E.crl (hash: rUdYCVszOL7T+4BzSl7xc28Wey01upL3B5M3hG5ZPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:db:2a:24:a7:49:75:c6:64:d2:f3:01:54:a5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=285f95cd3e0e22c0d8fe27f45234eda383ff513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:79:bd:a7:7e:58:de:1e:df:ad:52:a5:c7:
28:00:f7:0f:9e:0c:62:8e:0d:a5:42:de:5a:df:91:
ef:9c:d2:70:77:06:ce:b0:ce:1b:df:05:21:23:db:
6a:12:64:43:6a:b1:f6:a1:f0:3f:c2:c8:c0:f1:29:
d6:2f:bf:77:07:47:94:1c:54:6a:52:1b:e5:66:09:
c0:00:0d:8b:5b:48:63:93:52:22:7b:89:cc:74:98:
cd:28:90:a9:7c:16:a6:2b:93:4b:88:76:6d:98:6d:
5c:81:5c:2b:87:94:c3:18:98:01:25:f1:cf:22:00:
45:7b:e3:2b:94:61:ee:37:d1:b9:93:f7:83:fd:d0:
b6:0d:15:da:37:56:a4:65:48:cf:6f:03:ba:bf:2a:
63:f4:e4:e7:bb:3d:27:4d:31:1a:bd:56:9b:5b:76:
5c:f7:58:45:c5:bc:50:ea:43:39:e8:75:86:66:e9:
37:6d:fc:4a:92:41:60:5a:83:d6:31:68:3f:ff:4c:
42:bd:82:eb:2b:de:1f:8d:fa:c3:82:a5:6a:26:86:
c2:fc:44:b6:a4:fc:84:7c:0d:6b:6d:93:2c:12:02:
d4:99:ec:73:0e:07:d7:de:cb:46:b7:2d:28:a8:e8:
ee:94:ad:ad:3b:c9:9c:d0:2b:72:bc:eb:a6:25:6c:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:95:CD:3E:0E:22:C0:D8:FE:27:F4:52:34:ED:A3:83:FF:51:3D
X509v3 Authority Key Identifier:
keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a0:6e:e8:fd:5b:e2:61:1a:7d:83:85:2b:40:b0:df:e1:5f:
1d:d4:7b:1a:60:31:2d:ab:70:db:c4:87:22:4c:9a:45:96:6e:
04:f3:7b:f9:7c:ca:9b:d7:cb:e6:fd:a3:f6:86:97:96:74:4c:
56:b1:12:32:a5:58:02:fe:56:4f:23:8a:77:76:e9:a5:9f:2a:
e3:0f:50:66:d0:f8:37:fd:b4:bd:45:74:7e:8e:cd:b1:87:51:
c3:c8:53:00:bf:9d:d8:2b:8c:de:d2:58:c5:4c:bd:56:d5:a4:
6d:38:dc:06:8d:9b:f8:b7:10:1d:da:99:c9:27:0e:ba:c3:f2:
68:f4:41:48:6c:13:51:69:79:b2:54:5d:b0:ba:7c:63:98:b3:
88:c5:1e:0d:72:1f:b9:03:e8:73:fd:6a:08:a6:d9:32:57:97:
47:a1:48:45:f6:d9:af:90:a0:e3:59:8a:01:4f:74:00:a4:27:
a1:7c:ed:d3:3b:e5:ef:06:8e:24:a2:23:6b:21:f0:08:bf:ec:
f4:4f:dd:26:b1:d8:a1:90:54:4d:5b:91:d5:fe:8d:f1:c3:81:
54:db:58:6e:59:5a:e2:b5:c4:42:0d:4a:1a:70:7d:37:c2:c0:
0a:90:68:13:0d:db:2f:a4:17:c2:06:c4:9f:d6:2f:90:83:b6:
bd:df:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:18 2026 by rpki-client