Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier: l3z2bU+BSbGfNdT2o8XOGTyzCj+u48i+5JwTXP/JG3I=
Subject key identifier: 75:4F:20:EB:F9:B5:17:38:EF:AF:21:1B:68:60:E2:E4:30:43:CD:E3
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial: 019D2AE07AA52CF08E60816793C51942C6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number: 0DA5
Signing time: Thu 26 Mar 2026 16:00:47 +0000
Manifest this update: Thu 26 Mar 2026 16:00:47 +0000
Manifest next update: Fri 27 Mar 2026 16:00:47 +0000
Files and hashes: 1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: 8Y0/AS6HTqK0q9RAAal7cySYr9BLoymZbwdDjMhDF1s=)
2: dJuawEWS8NqZGJF9uJKMoItyq7U.roa (hash: IYmTE9NklyCZqQOo3sZkgAOEmHqhiMDY4VmI2iuEFr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:7a:a5:2c:f0:8e:60:81:67:93:c5:19:42:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
Validity
Not Before: Mar 26 16:00:47 2026 GMT
Not After : Mar 27 16:00:47 2026 GMT
Subject: CN=754f20ebf9b51738efaf211b6860e2e43043cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:58:9a:04:2c:87:34:13:2a:a0:06:d5:6c:
6f:ef:86:1a:a9:97:65:fb:78:da:18:19:21:15:93:
7f:3f:45:2d:b9:5c:44:71:40:6a:6e:a8:59:c6:6d:
34:0e:47:b6:fa:52:54:08:8b:7c:58:a0:50:56:55:
76:5f:54:15:87:56:d7:6a:ee:15:69:3e:9d:a9:b3:
38:bc:cd:ea:c5:7e:1f:b3:ac:52:14:ec:67:8d:85:
54:73:09:09:d0:97:5e:e7:79:3b:6a:c6:2c:9f:3b:
d8:80:62:01:c0:e3:80:da:96:db:56:31:9c:4a:27:
c8:0d:3b:8f:c5:11:b5:a6:84:14:4e:5b:dd:0d:14:
04:55:e3:df:ab:3e:63:2f:dc:ba:5d:9f:41:32:3f:
c5:8d:62:6c:1a:9f:2e:f6:82:a9:2e:45:b4:56:7c:
b0:f7:c9:a3:f8:d1:ae:29:a4:62:9d:78:bb:d5:c7:
37:81:b3:89:be:93:55:04:fe:7c:b1:91:1a:c7:ce:
c3:d7:e0:46:6d:ae:35:47:ca:87:13:71:cc:e3:f3:
f3:c4:05:b3:8e:72:00:74:54:09:74:02:d1:3f:f2:
50:33:df:da:1d:61:96:42:dd:99:27:d7:36:cd:87:
83:9e:48:49:b1:6a:75:5b:f6:fb:a7:6d:b9:63:79:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:20:EB:F9:B5:17:38:EF:AF:21:1B:68:60:E2:E4:30:43:CD:E3
X509v3 Authority Key Identifier:
keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:53:cd:55:32:1a:f4:f4:4a:73:53:7b:68:ef:75:89:65:c7:
ca:a1:c2:e2:40:10:c8:79:3f:1d:e9:27:75:6f:72:3c:ab:05:
b3:30:a4:cc:6a:90:d8:cf:4f:5e:37:29:ce:7e:d4:f3:78:51:
03:86:59:3b:80:dc:99:25:88:9a:cd:b4:c4:94:37:57:ba:38:
b9:de:94:e9:69:9e:2b:e4:7c:08:46:18:3c:7c:38:14:53:1c:
c1:68:e2:a8:77:63:e4:2a:d7:74:63:af:1a:e5:79:b4:b8:5d:
ff:c0:e7:2b:75:76:38:f9:39:70:3e:6c:e3:65:2b:ff:f5:fa:
f3:46:47:0e:3c:ff:41:b5:56:2a:31:a0:e2:47:28:d0:6e:a2:
6b:dd:8e:c0:42:b7:1d:f2:23:e0:78:25:cf:ad:1a:1f:92:7d:
f1:ab:da:16:c8:23:4d:98:d9:fe:7d:88:e3:88:cf:99:34:bf:
1b:5c:1b:69:64:b4:89:42:ce:a8:06:33:ff:b9:e6:53:65:d6:
70:57:ca:0b:79:4e:70:a6:08:73:c5:e0:9b:80:79:25:0a:2e:
e6:53:4c:92:a7:9c:f0:fd:32:05:12:ee:e5:f3:2a:74:14:61:
e3:32:62:dc:0e:f6:8d:11:39:00:f0:d5:fd:80:3f:e1:7a:8e:
37:26:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:54:13 2026 by rpki-client