Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: PbZjkuGa0BJY7LQriNAUePfNfeDAaAbs5OwYsG9adUo=
Subject key identifier: 87:B7:68:F4:27:CC:BE:35:BC:9E:55:A9:4C:5F:3C:D6:41:C7:F1:D6
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 019D2817055245AE7F26AE435C08E4626644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: 60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa (hash: EZkxwCyWCEu1KeBrV5jR0jwiImpY2bsUjKB0OADSv0M=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: VaMbejRa7iCe9RERECslU2dpgeHoWJ1iJfn3MxqF6A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:05:52:45:ae:7f:26:ae:43:5c:08:e4:62:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=87b768f427ccbe35bc9e55a94c5f3cd641c7f1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:8f:6b:4d:91:a5:d9:b6:ec:dd:c2:46:92:
56:ec:4b:a4:79:80:d0:f8:dd:86:12:69:0e:ec:c9:
1b:24:aa:a8:9a:a6:26:1d:4b:e8:05:5a:5c:48:61:
24:1e:22:9f:f2:e3:d3:9a:2d:61:4d:ef:55:a9:c2:
0a:87:5c:46:dd:68:f1:b0:2e:22:ea:4b:8e:b4:43:
25:e3:eb:dd:1b:9f:22:52:59:f5:ce:81:eb:1d:2a:
c7:b8:28:23:45:83:0e:f3:43:06:a8:13:8c:7c:b6:
96:17:05:c9:f8:cd:6d:98:97:9c:ca:6c:32:31:9e:
f8:7e:df:7f:e6:3c:e8:a3:83:a1:1f:e7:c5:82:0f:
9d:d1:ae:90:fe:fa:ba:8c:0e:0e:4b:94:05:04:52:
46:2c:55:68:ad:6f:6c:f6:89:21:30:ea:1e:8d:c9:
b9:09:32:0e:61:9e:58:f7:31:f0:e0:2a:43:08:8b:
36:d3:e0:8e:ff:1a:85:5d:31:a9:83:1a:0c:90:66:
ef:7e:c1:1b:cc:61:09:4b:95:53:32:24:e1:1f:b8:
e8:6f:f9:62:dc:86:a7:22:c2:6f:22:e3:c5:0c:05:
c6:ed:27:4d:f9:fc:70:49:ea:65:77:1d:f3:71:eb:
e0:44:ad:9f:5d:44:4d:69:b2:a9:8b:f0:4e:ec:0c:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:68:F4:27:CC:BE:35:BC:9E:55:A9:4C:5F:3C:D6:41:C7:F1:D6
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:83:42:48:0c:e4:12:d5:e2:30:1b:70:79:e6:bc:0d:47:
58:2a:29:4b:b3:82:bb:37:3b:85:fd:5b:bc:6a:0f:33:8a:38:
90:52:a2:9a:17:78:c0:2b:23:e4:8f:86:90:79:58:35:78:38:
a8:af:e0:d1:65:ae:bf:ea:bf:5a:2a:aa:68:72:35:38:60:2a:
56:2e:42:f8:51:51:01:fc:d1:aa:d0:13:1e:0e:db:22:59:67:
db:20:5f:69:7c:67:c2:42:eb:ce:da:5d:a2:30:f8:13:39:91:
56:99:05:88:37:59:60:0d:0f:90:c9:48:a8:82:c4:3b:d3:ab:
ec:b7:2c:e9:a1:59:30:8c:5e:e6:dd:a5:62:03:0e:73:24:96:
9f:42:2f:38:c7:75:6f:81:d5:1c:18:6c:97:c3:b6:24:f2:1e:
fe:43:4d:92:d4:78:f1:0d:65:03:54:81:14:e8:fb:35:f1:69:
88:33:46:94:6c:ac:7d:42:cd:01:9b:c2:d1:8b:d7:e5:b8:1d:
a4:b4:b9:5e:c4:13:2d:5b:59:a7:5c:dd:f0:14:b0:37:a3:85:
05:54:be:3d:bc:aa:3b:35:e9:d9:64:0e:4b:3a:bc:f7:36:a8:
e8:4a:d8:52:d9:1a:ce:62:43:f0:3b:53:4c:5e:b9:ca:00:f3:
67:63:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:42 2026 by rpki-client