Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: x4O8qj/1SsuHcYybLuVGVA05mw5FDn/tOYH37ix/Bhc=
Subject key identifier: A7:08:B2:7F:EA:C8:0D:70:FF:CB:E1:B4:C6:D5:F0:61:70:9F:F9:1F
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 019D2AA99627DFA66AB88DCA72525F3839EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0F9B
Signing time: Thu 26 Mar 2026 15:00:50 +0000
Manifest this update: Thu 26 Mar 2026 15:00:50 +0000
Manifest next update: Fri 27 Mar 2026 15:00:50 +0000
Files and hashes: 1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: B4PaRZDx4DmyqtBk8dwm6/Gd4KvFf0NDYB39a/2DLEM=)
4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:96:27:df:a6:6a:b8:8d:ca:72:52:5f:38:39:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Mar 26 15:00:50 2026 GMT
Not After : Mar 27 15:00:50 2026 GMT
Subject: CN=a708b27feac80d70ffcbe1b4c6d5f061709ff91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:55:41:5a:99:1b:80:ca:a6:43:a1:62:67:
3e:f5:a8:03:16:51:54:dc:e8:8c:53:ec:85:a4:b8:
3f:8d:c6:06:89:ec:5e:cf:86:77:b2:fd:ad:83:9d:
95:8a:fa:6d:89:aa:6e:33:6c:41:f9:a9:c5:3f:ff:
14:d9:34:c4:36:f7:1b:86:6c:d4:26:de:3a:ae:44:
b2:9b:49:82:4f:46:4b:27:ac:94:75:29:d6:c1:5f:
b7:28:71:3c:d5:02:32:f4:1c:91:8c:00:02:9b:6a:
7e:ed:90:92:d2:ee:4a:c3:92:4d:04:0b:e5:4c:ca:
28:07:18:44:d8:70:cc:ee:60:e4:f6:45:8c:a0:39:
97:6e:9c:c2:e8:33:2c:a6:c4:e7:c5:e7:db:b4:cc:
83:5f:54:86:22:64:45:89:3c:03:26:dc:2a:78:3e:
05:d7:62:9e:5c:44:ad:29:cd:a6:03:49:eb:a4:c3:
51:8c:75:8a:8a:ac:af:57:e3:3e:03:9b:75:a4:da:
72:02:f4:7f:5d:09:82:0c:57:8a:51:38:6b:07:c6:
b6:14:5c:9f:22:36:5a:13:74:d7:79:7b:9d:e9:e4:
65:36:08:6d:a7:76:3b:ba:98:5c:89:24:ca:32:5e:
03:c5:43:94:92:19:c5:7f:d3:35:e3:b9:d9:5b:c4:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:B2:7F:EA:C8:0D:70:FF:CB:E1:B4:C6:D5:F0:61:70:9F:F9:1F
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:f9:06:93:5e:35:9c:24:6d:48:5e:62:e1:35:67:d9:51:
18:02:05:24:ba:cf:c7:1e:1c:e0:c2:be:24:d4:8e:9a:92:43:
6b:8d:e9:64:cc:cf:6a:f9:f0:4f:64:03:f2:db:9a:8a:8e:fb:
9f:b5:62:75:01:70:fd:da:04:5e:b2:12:7f:a6:ac:4e:29:f0:
62:63:f2:62:07:3f:df:ff:0d:23:c2:f6:32:10:01:07:a8:74:
c1:b6:f2:ea:92:9a:10:ce:78:a5:fb:14:69:12:b9:fb:3f:27:
3a:e4:08:39:41:68:bd:45:48:2c:2d:6c:9a:4c:4f:94:92:ca:
86:30:b9:f4:07:14:a3:09:fa:8c:ac:12:ae:96:e2:c9:54:e7:
2b:cd:32:f0:e5:7e:33:72:6d:5f:fb:5f:32:c5:ac:4e:2d:61:
c2:d2:55:5e:ee:f7:ef:38:a9:9b:d0:3d:37:1a:46:ee:9c:dd:
b2:92:2d:1a:3a:69:31:54:e7:ee:5d:b5:5d:5d:d4:28:85:6c:
36:95:da:25:84:2d:34:0f:f4:39:df:8f:45:9e:81:c0:c2:d5:
32:72:81:58:8f:95:2f:18:42:13:d0:06:43:86:08:4c:bb:72:
dd:4f:81:1f:ac:fc:58:c8:a6:6e:f5:cf:15:20:ae:8b:f1:a5:
87:29:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:51 2026 by rpki-client