Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: Q+Xp/82Vp0YxudlmbQQui8zVGlpAqHmlXO8l7KcNfZ4=
Subject key identifier: C9:44:0F:12:20:04:B8:A4:27:93:1B:46:97:DA:14:47:D2:CC:3A:1A
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019D273AADCB2A998719E1516A487C292476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: MYPXEpgkoeZh3jOzc+KlrX4a95NW9pP/DERIny++5co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ad:cb:2a:99:87:19:e1:51:6a:48:7c:29:24:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=c9440f122004b8a427931b4697da1447d2cc3a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:40:6a:4a:a0:c2:63:3f:0b:02:b2:fa:a8:
87:2a:fd:f2:e4:d8:55:58:ff:d6:e4:c4:3d:49:c9:
08:f5:d8:ea:72:23:63:2c:9e:b6:ca:f5:2d:b4:52:
26:d1:2f:51:bc:9b:0f:f7:85:ea:33:81:9c:b0:ac:
8a:e1:8b:6a:ea:ab:f4:e2:97:95:1e:ff:25:1a:95:
6d:5f:86:2f:54:98:a6:76:75:3a:4d:19:6f:7c:1f:
de:a7:7f:19:f3:39:68:c9:e6:5b:55:24:50:20:33:
3e:aa:bd:25:85:23:8c:89:1c:dc:b9:f7:31:f1:4f:
9e:1a:e4:b2:2c:d6:2e:36:21:51:b2:7a:4c:14:20:
8b:3d:24:8f:30:0d:43:c0:0a:a6:9f:d3:1f:c6:3b:
b6:1b:73:07:73:93:d0:1b:91:3c:6b:77:ae:9a:e6:
49:03:77:9e:7a:8f:49:a1:c7:d4:41:ae:e3:09:a3:
bb:d8:78:af:d2:3d:a9:b7:e0:c2:1b:90:f0:29:53:
13:88:8b:26:29:3f:c4:8b:b6:1f:36:5b:5a:3b:f6:
90:2c:bc:c7:1f:56:39:4d:5c:ce:21:ea:e6:68:5d:
34:a0:51:9b:5d:5f:24:b7:5f:33:ee:65:35:e2:ae:
f2:d5:32:ae:35:f4:c6:78:1c:ce:76:7a:28:64:e0:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:0F:12:20:04:B8:A4:27:93:1B:46:97:DA:14:47:D2:CC:3A:1A
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:d4:09:fd:78:32:50:57:25:77:fb:d4:df:47:44:80:4c:
41:51:e3:7e:a3:6f:8d:06:d7:2e:74:c7:d3:23:dc:b8:7b:25:
ec:ee:ed:13:e1:5d:0e:39:30:31:09:f6:9f:e6:68:f8:e0:ec:
99:fb:55:cc:63:ac:07:d8:56:a2:85:4c:78:3f:f3:e6:d3:46:
87:78:d2:75:37:9f:de:0d:7d:95:5c:6c:c6:a6:70:41:b2:24:
a4:91:a5:46:15:ea:56:57:a2:50:83:35:2f:0e:5f:9b:d1:e4:
e2:68:fa:b6:b6:94:27:08:9c:48:c1:c3:31:86:fc:6d:f3:eb:
9d:b4:01:54:7a:e1:91:61:a8:47:5b:08:c3:34:b4:68:e2:da:
20:2b:12:27:95:18:ab:e7:fa:53:8f:c7:0c:7a:f9:67:59:41:
c2:d8:22:36:2a:c7:c4:56:67:bf:0e:ba:40:0b:d9:da:cd:c5:
76:98:7f:21:09:2f:00:47:f3:73:fa:d8:16:af:24:23:c8:fc:
f8:e7:7b:8d:04:d3:cc:92:a3:1a:2b:08:98:25:f2:60:c7:bb:
1a:43:bc:99:bf:10:47:8f:ae:a7:69:e2:98:f4:58:e9:3d:95:
c6:09:af:08:d8:67:71:59:50:8a:49:19:3b:4f:ce:dc:b7:c7:
f3:ba:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:36 2026 by rpki-client