Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier: TK+T8IfgpiUy305RR1+9W/RsFc0eq/F4PudVOpOYl7g=
Subject key identifier: 33:EA:0E:63:70:B4:88:91:F3:D5:7B:60:95:F1:C9:1E:C9:D0:1B:65
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 019D284DF1BEE0D91068FB60AE2C3BD769C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number: 0234
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: XmrgB1f4aEniX+F79s6y0VeaiTW5M6eutUASUYPvZSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f1:be:e0:d9:10:68:fb:60:ae:2c:3b:d7:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=33ea0e6370b48891f3d57b6095f1c91ec9d01b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:ad:70:5a:22:b0:f4:63:9c:52:6d:13:02:
04:3e:12:0c:2a:6f:9e:fc:dd:a2:7f:40:10:9b:fe:
75:b5:1e:7f:fb:27:e1:07:de:e6:4c:ce:ff:61:f9:
8e:19:62:64:ad:97:0e:bf:29:39:2c:0d:ca:74:39:
cc:79:48:db:c1:f3:fd:b2:5c:16:6a:e5:dc:8b:e6:
c5:b9:11:8b:4d:11:15:65:e8:7e:db:50:27:97:13:
aa:79:a7:ee:3a:ba:32:ae:a7:f1:74:10:6e:6b:d2:
c6:56:08:b7:4e:30:46:a0:95:d3:f4:86:74:43:ff:
a2:46:d8:90:d6:be:6f:c1:7f:f9:3a:c8:c3:2a:78:
0f:64:4b:ad:7e:5c:0c:e0:40:20:30:5d:63:e5:1a:
5b:5d:6f:9c:62:0b:3d:c7:1e:00:e9:cf:fa:55:f6:
47:3e:8c:6e:15:0e:58:3d:21:59:c1:0a:89:a2:65:
ac:bd:74:b6:6d:f8:bf:59:d3:74:14:8a:c3:a1:58:
93:d8:15:09:f0:5c:21:e9:01:d6:1d:3e:a5:bb:0e:
e3:53:b4:88:9b:45:df:55:74:79:ab:20:78:05:86:
4f:33:a4:96:ba:d4:c6:29:37:a0:db:a0:fc:65:63:
76:b9:66:65:89:93:ae:86:10:90:64:77:fe:80:f9:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:0E:63:70:B4:88:91:F3:D5:7B:60:95:F1:C9:1E:C9:D0:1B:65
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:e1:a0:da:18:dd:83:97:3f:96:bf:ab:5b:88:21:41:19:
5e:e3:43:54:7d:05:62:de:50:7f:e2:36:d0:04:91:be:b1:ff:
30:f1:a0:c4:d0:7c:f8:8c:63:48:3a:8e:1b:d4:1f:64:f1:2f:
99:ac:74:21:70:8a:25:e4:05:89:2c:31:bd:74:6d:5f:67:f6:
fb:a3:71:25:90:61:dd:20:b6:b4:e7:16:6e:7a:9e:63:32:cb:
8d:79:c2:85:c7:8c:86:d6:68:93:80:86:dc:97:8e:87:f5:4f:
1f:e3:3e:f8:1c:4c:7c:90:ef:7b:8e:14:ca:ee:17:7b:f2:77:
e9:fe:4f:69:14:4f:eb:65:ff:85:fa:e5:d1:a2:23:db:18:c4:
ba:01:b3:da:87:f7:36:86:71:fa:4a:72:fa:bd:0c:74:c8:a2:
87:84:aa:22:14:cb:40:ab:5a:8a:75:db:59:4f:0d:76:d4:84:
35:7c:08:3a:29:d9:5a:99:5d:e2:8d:58:59:cf:c4:bd:a7:c9:
00:3d:12:26:ba:69:88:e4:df:b4:fb:93:52:58:c6:9c:8b:7d:
b1:ab:f3:3e:79:37:84:2c:8f:94:6c:29:72:4a:8c:7c:3d:55:
d1:75:8a:1d:65:9c:aa:47:35:c5:c7:f4:e6:e8:bf:ae:05:51:
0d:d3:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:59 2026 by rpki-client