Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: b4R6r4+i7w72qf2zOcPFS7bXKTJQSpGNA8OjKP22dlM=
Subject key identifier: 39:8E:D7:A5:2D:5E:03:1D:C8:B9:D0:9D:BF:AF:2B:FB:BA:65:B4:D8
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019D27A8A7B4EF7B84BD23FF570EFD262771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 16FC
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: bVi4keCowD2fh_vLEGiCaZ_PG2E.roa (hash: PcIs7Ni9PquaFgRIU/Xw9DwjNZAbOaylXmPNW0BTawQ=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: zB4fOA2R0hgc8Exif5cFgMjfq7d0V5jwXBfAjFl6hHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a7:b4:ef:7b:84:bd:23:ff:57:0e:fd:26:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=398ed7a52d5e031dc8b9d09dbfaf2bfbba65b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:35:32:62:c8:60:60:56:8f:fc:cb:8b:fc:
db:c0:88:c8:a7:4b:6a:25:3b:5c:5c:13:0e:c3:3f:
b4:f9:34:cc:c1:e4:64:73:18:91:ea:1f:11:0a:8a:
25:f8:1e:2c:06:bb:1b:80:ea:82:84:ce:24:4e:ac:
60:2a:5d:ae:98:c5:99:d5:a9:4e:97:be:2c:ec:7f:
3e:3e:70:af:53:e2:37:0e:9f:e1:0f:8f:00:ee:91:
f1:8b:77:d4:09:45:3b:17:61:75:b0:e1:e0:96:29:
0a:1a:f8:15:0a:2c:7c:65:f1:18:f8:22:6b:2a:93:
74:17:ea:8c:6f:fa:ee:d4:0c:91:c3:14:13:24:2d:
10:b9:b9:52:07:c6:7c:76:e5:03:95:26:c8:92:34:
ce:f1:9c:9d:ed:93:71:7e:fd:4f:93:9d:be:2e:6b:
26:96:6b:22:11:fa:85:f2:f8:aa:2f:eb:ae:f5:6a:
40:a3:2e:59:25:4e:6f:39:de:70:25:ad:dd:4c:81:
66:cc:0b:c9:a9:b0:d5:61:cf:c1:c1:1f:17:2f:87:
44:0d:0d:1e:a0:2b:4c:96:81:f4:4d:87:3c:6a:a5:
42:d1:a4:25:46:81:f5:fd:21:bc:52:d9:d6:aa:03:
0e:58:89:f9:8e:4f:47:a3:97:34:ac:83:fa:49:d3:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:D7:A5:2D:5E:03:1D:C8:B9:D0:9D:BF:AF:2B:FB:BA:65:B4:D8
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:a6:6e:ca:4e:7a:ab:dc:ab:db:27:4d:1a:d8:7c:89:9d:
63:09:f8:4c:30:5f:4f:c7:7b:9f:37:ca:f2:87:31:79:26:a5:
40:a7:00:5f:96:43:93:cb:30:6e:f0:20:cf:66:ac:c8:c4:83:
af:22:d9:be:98:b0:ea:64:05:9c:fe:d7:a8:ac:5e:8b:84:5a:
42:15:74:3e:bc:58:8c:6b:91:85:14:30:51:fe:3b:c0:2e:0f:
17:7b:10:b0:c8:04:77:2c:1d:f6:ca:b3:aa:14:cf:4a:f7:6e:
ca:b3:5d:e1:8e:5e:8f:1e:59:f6:48:7f:ae:0e:4f:d5:ff:94:
46:61:97:a4:cf:90:26:1f:17:f1:fc:d7:d1:49:dc:c2:e8:71:
4f:44:35:1e:d7:55:5c:d3:d7:9e:92:74:6d:c9:11:42:2c:b8:
15:31:68:c4:bb:9e:fe:95:b2:8c:3a:72:44:9c:9e:ff:89:e1:
b4:0d:59:40:ee:6e:46:a7:ce:7c:57:3d:64:e7:eb:08:2b:8a:
17:d5:e1:a7:52:50:44:b5:9f:ca:a7:a6:46:3d:df:b8:3b:df:
ed:66:b0:55:8d:be:ce:cb:67:ed:c0:dd:09:87:39:63:6f:f5:
2d:84:8e:81:d4:0b:fe:20:f6:de:17:5a:32:70:15:f2:08:b6:
4f:71:1a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKe073uEvSP/Vw79JidxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk
NjQ4OWIwHhcNMjYwMzI2MDEwMDU3WhcNMjYwMzI3MDEwMDU3WjAzMTEwLwYDVQQD
EygzOThlZDdhNTJkNWUwMzFkYzhiOWQwOWRiZmFmMmJmYmJhNjViNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0o1MmLIYGBWj/zLi/zbwIjIp0tq
JTtcXBMOwz+0+TTMweRkcxiR6h8RCool+B4sBrsbgOqChM4kTqxgKl2umMWZ1alO
l74s7H8+PnCvU+I3Dp/hD48A7pHxi3fUCUU7F2F1sOHglikKGvgVCix8ZfEY+CJr
KpN0F+qMb/ru1AyRwxQTJC0QublSB8Z8duUDlSbIkjTO8Zyd7ZNxfv1Pk52+Lmsm
lmsiEfqF8viqL+uu9WpAoy5ZJU5vOd5wJa3dTIFmzAvJqbDVYc/BwR8XL4dEDQ0e
oCtMloH0TYc8aqVC0aQlRoH1/SG8UtnWqgMOWIn5jk9Ho5c0rIP6SdMriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmO16UtXgMdyLnQnb+vK/u6ZbTYMB8GA1UdIwQY
MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt
ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4
LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn+mbspO
eqvcq9snTRrYfImdYwn4TDBfT8d7nzfK8ocxeSalQKcAX5ZDk8swbvAgz2asyMSD
ryLZvpiw6mQFnP7XqKxei4RaQhV0PrxYjGuRhRQwUf47wC4PF3sQsMgEdywd9sqz
qhTPSvduyrNd4Y5ejx5Z9kh/rg5P1f+URmGXpM+QJh8X8fzX0UncwuhxT0Q1HtdV
XNPXnpJ0bckRQiy4FTFoxLue/pWyjDpyRJye/4nhtA1ZQO5uRqfOfFc9ZOfrCCuK
F9Xhp1JQRLWfyqemRj3fuDvf7WawVY2+zstn7cDdCYc5Y2/1LYSOgdQL/iD23hda
MnAV8gi2T3EaYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:10 2026 by rpki-client