Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier: /pMomcbaH/L7c09asFfBmEODTtzEyVdyIZAThXP0MfA=
Subject key identifier: 4A:27:74:43:95:8F:08:18:B7:88:79:C0:1D:CB:DD:50:79:E2:7E:00
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial: 019D273ABA09DB01CA1EACEFB669F5279B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number: 1497
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: FZja/z+3F/GfbR3o5ZLfBDqloLn0jOFSjhmaJFYMxa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ba:09:db:01:ca:1e:ac:ef:b6:69:f5:27:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=4a277443958f0818b78879c01dcbdd5079e27e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:e4:c2:25:2b:78:c2:df:04:00:9f:0f:8a:
31:11:fb:96:d4:03:c6:b8:9c:14:61:c9:5d:91:7e:
45:d5:a4:42:df:4e:0a:62:2d:f1:e1:40:8e:fc:17:
90:3d:d0:f7:7d:c2:3e:ba:83:eb:7c:5e:ad:1c:5f:
55:0d:f5:04:3e:ca:ff:8b:8e:21:5a:92:27:b3:6e:
2d:99:6d:26:1c:a9:e9:90:26:3d:bc:43:6f:65:41:
0a:77:63:fd:0d:6e:2d:08:0f:96:4a:26:86:9d:6a:
c7:9e:62:22:53:e6:36:69:75:3c:a3:10:ad:73:a3:
89:6b:12:ea:4d:c6:0b:f8:7f:be:8b:73:e0:89:81:
bb:e9:f0:a8:a9:59:f7:4e:92:11:72:0a:f5:f7:63:
e2:01:95:9e:80:0e:da:ec:5d:65:9c:d9:ee:40:4d:
6b:52:03:ca:47:4f:f8:05:8c:ef:22:55:88:bf:cd:
5b:26:54:58:35:a6:09:ff:b0:f1:8a:16:d1:6e:99:
6a:04:75:3d:cc:9a:ef:b3:ce:c3:a9:21:d8:8e:a9:
8c:75:4a:fd:25:6d:9b:6b:f2:fa:3f:bb:05:c9:29:
f2:e5:37:49:42:4e:60:39:63:4e:11:c6:e2:a0:5c:
0d:35:ef:8b:5f:77:c9:25:f5:0a:eb:83:bc:cd:48:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:74:43:95:8F:08:18:B7:88:79:C0:1D:CB:DD:50:79:E2:7E:00
X509v3 Authority Key Identifier:
keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fb:4f:5c:47:1e:8a:6e:8d:eb:0b:12:f8:12:b4:f6:d0:d2:
54:9d:c5:e1:31:bc:96:a5:1b:12:89:bd:57:c4:a8:76:bf:77:
0e:5d:47:bc:d3:46:be:e5:61:1a:5f:62:7e:ee:c9:2d:94:80:
59:85:3d:30:f2:44:26:a6:40:5c:56:5a:51:4e:14:5d:73:a5:
6b:87:64:ac:fd:73:53:fa:f0:91:a5:19:a1:ab:2c:25:cb:85:
bd:e6:76:ca:ae:ec:8e:43:3d:81:09:a1:54:03:af:61:8b:75:
44:69:50:a8:29:39:34:a7:ff:8e:03:ae:eb:cc:08:d8:2a:7a:
10:0f:12:b7:ab:44:85:ae:30:e7:b2:25:46:7c:1c:82:c8:c4:
13:0d:ae:7a:6e:d9:bd:f2:d1:ba:d7:61:d2:eb:41:11:90:55:
bb:90:62:39:54:f4:5b:f3:75:7e:27:a7:54:4b:1d:3f:57:b2:
5c:05:62:69:44:60:d1:d5:19:d2:37:1d:a3:86:1e:9b:1e:a9:
22:7a:58:98:13:90:f9:e7:30:c4:25:18:8d:46:f5:7c:99:3d:
77:22:3f:65:4d:9d:27:f0:92:05:8f:56:85:7f:ed:29:b2:63:
44:a5:44:18:31:5b:d9:b9:7e:a6:01:2e:30:20:c8:0b:81:a9:
15:8f:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:38 2026 by rpki-client