Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: hX6vAxuXhTJzU5kfxF207lcrzuirEfi5IGN8cEua1RM=
Subject key identifier: E0:8F:F5:62:0A:11:6A:E9:CD:70:AA:D2:BE:1F:71:4B:7C:1C:D6:18
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019D329AF94AEA7B853CC9F03DE383F5B452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 12F3
Signing time: Sat 28 Mar 2026 04:01:50 +0000
Manifest this update: Sat 28 Mar 2026 04:01:50 +0000
Manifest next update: Sun 29 Mar 2026 04:01:50 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: 8V+zSLpr9VyAvVnqQsP7NSVJnbjRI9j+ZScd0pvHC7I=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:f9:4a:ea:7b:85:3c:c9:f0:3d:e3:83:f5:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Mar 28 04:01:50 2026 GMT
Not After : Mar 29 04:01:50 2026 GMT
Subject: CN=e08ff5620a116ae9cd70aad2be1f714b7c1cd618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:40:de:ea:db:ee:18:3f:7b:94:7d:71:6c:
a6:53:ce:62:3f:c8:04:65:25:e6:79:ae:67:08:b1:
90:f6:4f:7e:3c:9b:0a:5f:c2:2a:10:33:7a:42:c7:
4d:36:b5:a0:96:64:1c:f4:67:ea:fd:16:f0:8a:e3:
46:eb:68:99:fc:94:da:26:e8:42:67:a9:0c:7f:7a:
71:83:2a:ac:9a:38:7e:1d:39:09:b8:a6:d5:18:ba:
27:d6:1c:2e:c4:f3:fa:34:04:23:78:ad:c9:c3:72:
46:ab:43:82:4a:7a:f3:2e:81:53:40:56:4e:a8:90:
df:1c:1b:2b:a3:a6:e8:db:dd:2b:c6:20:bf:3c:d4:
a7:5c:f9:3f:7e:67:c3:53:5c:e5:86:4c:d6:c1:46:
6b:4c:92:aa:08:60:69:08:63:b9:1b:65:b5:a0:73:
46:e6:9b:bc:e0:9a:a9:d6:fb:b2:66:19:78:fe:1d:
cb:dc:79:e0:67:28:a7:d2:8e:83:c9:a8:9d:41:ef:
27:a2:f7:33:43:c2:32:63:fe:25:76:8d:fa:df:15:
2e:0e:90:7b:8a:86:3a:aa:f2:ec:4e:11:03:4b:5b:
f7:4f:5e:1b:74:5a:ff:7c:29:e3:42:96:38:34:50:
49:55:98:eb:71:e0:70:2f:ce:78:5f:33:b2:0e:5c:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:F5:62:0A:11:6A:E9:CD:70:AA:D2:BE:1F:71:4B:7C:1C:D6:18
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:55:c7:52:ea:8b:13:f4:ee:da:e2:6f:4d:ee:4c:48:fd:
72:c0:16:3d:d9:f2:2d:2e:c6:6c:9f:ab:45:66:4d:63:e1:70:
04:b0:8c:78:82:98:a0:6d:5c:3c:5e:8d:6e:0f:d9:28:93:3c:
f7:d9:85:71:33:3a:7a:d3:42:8a:1b:b0:9a:a3:f7:39:bf:41:
ec:2b:3c:35:5a:3a:01:2c:d2:89:6a:3a:29:59:e5:b1:76:cb:
98:54:af:b2:4c:c1:22:ee:cf:07:90:8e:a8:e6:f8:7a:58:70:
39:8d:4a:fe:33:09:1c:d1:05:54:37:be:0b:75:9c:30:98:f8:
19:d4:56:69:bc:35:88:f1:ac:5f:ab:cc:85:d0:a2:7a:2a:4d:
cc:07:de:2f:d4:81:f7:f0:85:a8:32:dd:33:f3:4e:56:47:cd:
4c:e6:91:61:a2:d2:29:a0:21:6c:0e:9b:94:0e:da:9f:c5:21:
be:44:e6:9b:46:96:6c:65:2b:d4:96:49:93:d6:97:15:f9:15:
d6:37:0d:d3:20:e5:5a:c8:bd:ec:ce:ad:4b:71:6d:21:37:ad:
8e:f6:6e:01:73:ef:26:a7:40:ce:94:7d:c3:a6:1f:70:5b:97:
1b:3c:17:49:cd:d2:10:1d:6b:8f:b7:b0:15:3f:0a:55:6b:1d:
cf:fe:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:21 2026 by rpki-client