Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: U5JSi+wkz91U9wJlxBcAcKmG9pnV0TSkdNpGwb3og30=
Subject key identifier: F8:F0:B0:D8:D1:9B:37:37:31:74:55:01:9F:78:46:CA:A6:67:7D:CB
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 019D333E87FF67A535512EB951AD6938C8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 07:00:29 +0000
Manifest this update: Sat 28 Mar 2026 07:00:29 +0000
Manifest next update: Sun 29 Mar 2026 07:00:29 +0000
Files and hashes: 1: 3rjZfOqcfFgp1DYLD9jqNvMWGus.roa (hash: fSrCbQZ8+s27wLebGDrZ4ZZ4/1z3UheqrVAoboGJ7Y8=)
2: G8OGJTANN3qV1kv7JX6zy4FVdM4.roa (hash: bFzkgRJFLCrTAvumUZb4z2jl9zK7iTZ0HUn21c/bwrY=)
3: abI-CtWCRebzyOLyUaEn0-e6TwU.roa (hash: L0A0kZevsrDZAJ7HVJnBmP3E5ETyTmhjlqZotXcXVI8=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: o42dXtnhhteYxOVjvCioqPAMC9F/jRMWtIY05+9H2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:87:ff:67:a5:35:51:2e:b9:51:ad:69:38:c8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Mar 28 07:00:29 2026 GMT
Not After : Mar 29 07:00:29 2026 GMT
Subject: CN=f8f0b0d8d19b3737317455019f7846caa6677dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:65:7e:a3:02:ab:c2:59:e7:91:16:59:7a:
34:b7:e4:b6:c3:3f:2b:b2:78:e4:2d:f4:4e:c4:2a:
b5:d8:b3:4d:e3:96:1e:38:5b:ac:23:c7:1f:6b:6c:
a9:d9:df:e6:69:5e:5d:a3:d3:84:7c:ed:43:f9:06:
8c:03:ca:49:11:21:f7:c2:f1:35:3b:1c:3f:34:d2:
8c:2f:c8:cc:1b:d3:05:26:fe:90:c0:d7:23:d2:07:
3f:f5:97:63:04:36:31:40:50:9f:3b:75:d6:30:51:
c7:cf:13:b9:b1:2c:d2:25:2f:50:37:f9:49:1d:8f:
51:df:46:5e:12:13:d0:ba:1d:0d:80:d3:f0:84:a6:
50:1a:d0:cd:c5:4a:3e:3c:96:0c:8d:89:7f:f9:93:
4e:a8:fc:7c:d4:40:a7:4c:ce:ed:bc:26:29:72:eb:
e5:a8:32:66:09:9f:d9:fc:1a:b1:d1:cd:e2:ec:1b:
17:fa:3d:10:2c:a3:e6:73:ab:f3:3c:76:9e:f4:21:
34:ce:b2:69:6f:6a:c3:33:fb:d0:e8:3d:26:01:f5:
0c:ba:83:66:ac:24:d6:c7:a0:79:c6:ec:6c:f8:79:
f6:74:75:f3:02:bd:5a:9b:60:13:77:c7:80:10:f3:
4f:70:98:2a:6f:3b:0c:ce:c2:93:c6:bc:c2:be:af:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:B0:D8:D1:9B:37:37:31:74:55:01:9F:78:46:CA:A6:67:7D:CB
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:25:32:40:49:19:cd:0c:1d:de:52:26:d6:9c:cd:c1:e9:
2a:5e:be:c2:9f:1c:8a:c5:69:fc:0d:b0:70:c2:06:11:1b:2d:
9c:ce:cb:a5:21:1e:f5:cc:90:a3:72:c2:f2:3b:82:4b:16:cf:
23:e6:88:30:12:e2:51:30:68:77:e7:eb:bd:63:cb:d1:82:6a:
9f:61:25:af:52:e0:63:a9:3a:a1:46:ac:ba:ae:ac:ff:bf:70:
19:87:53:6b:b0:da:70:e7:20:69:23:3f:fb:d4:06:b1:a5:c2:
4e:6c:60:73:8d:4f:5e:64:9e:f5:56:8a:3e:32:21:07:24:8c:
17:4a:47:bb:f0:dd:84:31:9a:2f:63:12:3e:bb:7b:73:1d:61:
71:33:b3:6e:8c:45:6b:7b:53:22:de:2b:71:a2:02:64:b4:66:
9d:7d:e9:e9:96:e8:3d:e8:2e:bb:4a:cc:93:62:da:b0:a0:fd:
8a:95:b0:fa:d6:eb:c6:c8:50:6c:ed:bb:df:7e:40:55:81:54:
8e:49:b3:85:c5:eb:03:77:9f:1b:3d:64:84:5c:db:94:0b:17:
37:22:7e:95:6c:34:f8:6c:3e:19:c6:c7:9f:be:39:0a:af:06:
f4:21:ac:e2:ba:ac:6b:2a:56:eb:b0:28:6e:67:55:14:90:d6:
96:23:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:32 2026 by rpki-client