Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: fUc+mbp2eLfCMjw1aeCGWBUBrA3eUjUmMTZ+WdTn3oI=
Subject key identifier: 59:DB:04:E9:E3:5D:AA:77:49:17:5B:F8:B8:F7:00:4F:22:B6:AC:64
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019D25F1A85B4FF4BC05BDF136E1412E4923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0CD4
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: tYA+XA6Gq4r81j5pa1PCVVhssZEZBFwIMD/PECIZB4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a8:5b:4f:f4:bc:05:bd:f1:36:e1:41:2e:49:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=59db04e9e35daa7749175bf8b8f7004f22b6ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:e3:dd:2c:82:c0:ef:be:ca:eb:50:16:53:
fe:b2:fc:52:67:30:46:27:0c:41:5a:07:97:ce:d4:
a2:aa:19:87:ef:c8:49:97:6b:55:d6:37:c5:15:2a:
84:e6:ea:58:d4:3d:2f:05:32:17:39:bc:51:42:86:
7f:98:f8:f9:ab:02:ec:9a:5d:8c:42:bb:88:b1:b6:
0a:ee:d3:6e:15:03:5a:9b:ce:15:23:73:ee:ca:f8:
16:ed:fb:2b:32:36:25:32:eb:19:c5:b4:fa:fd:64:
b2:bb:07:2f:23:c2:86:10:c1:5d:2b:b1:50:34:ff:
c7:47:65:6d:55:5a:a9:10:7b:ab:b1:a5:3d:7b:2c:
a0:35:7e:9e:f6:74:b1:96:b2:5e:21:c1:69:60:8f:
cc:e6:97:6a:58:04:72:36:63:ee:9e:61:12:02:8e:
c0:d3:38:26:f5:c6:23:7e:8c:c7:f6:81:da:c0:21:
00:91:7b:20:ad:43:08:a1:d1:15:e2:11:b3:5b:60:
62:c9:24:f7:50:67:88:4d:24:bd:e8:80:07:73:ce:
23:14:3d:aa:17:f7:97:e1:8b:ae:9b:0b:da:2b:bb:
95:3a:3d:9b:d8:72:7c:8a:6f:4b:cf:03:9c:80:6b:
72:ef:b8:f5:97:aa:c1:19:10:43:53:41:68:93:18:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:04:E9:E3:5D:AA:77:49:17:5B:F8:B8:F7:00:4F:22:B6:AC:64
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3a:d7:0b:07:9d:31:b3:25:25:94:e7:a6:e2:b7:70:4b:72:
eb:68:c9:6c:5f:31:4d:9f:a7:94:50:fa:1c:07:0c:64:33:4f:
b6:80:c2:91:8f:24:86:3c:61:9d:6c:91:c1:76:0f:e6:f9:03:
f9:3c:d5:4b:15:13:f7:ef:80:87:68:d4:23:72:39:5f:a2:9b:
a5:2f:e6:8c:62:73:19:9e:30:dd:03:52:b7:6a:e2:ce:6a:41:
b8:f5:82:3c:d7:cb:52:1c:89:f6:7b:95:43:53:4e:eb:29:12:
8a:d9:97:7e:51:41:f1:48:6a:97:0d:61:3e:d8:6d:05:23:96:
89:58:c1:a9:d6:12:e4:be:f9:39:4b:f8:a6:5d:9b:a8:cb:9f:
a0:a7:7c:02:3c:be:77:16:d2:37:10:1b:2d:16:ed:b6:ad:a6:
f3:4a:b2:68:9a:cb:92:36:b5:92:f8:45:07:8d:2d:52:5f:a2:
b3:cf:24:b0:df:dd:9a:10:b0:22:7d:e5:55:89:0b:9e:e8:0e:
74:c0:f7:eb:35:77:fa:7b:7c:71:3e:bc:91:77:7e:73:27:e2:
18:c5:d0:ca:5a:76:52:96:48:cf:c1:7d:e2:6c:82:a1:5f:b2:
eb:5a:9a:83:3c:fa:39:5e:fc:82:ca:5a:b6:07:f5:d3:ae:7d:
f1:b7:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:24 2026 by rpki-client