Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: cmwLG9J9TeaSepgA7PMFjznE9aLVTq8XoerbAQ8Dx5o=
Subject key identifier: 25:97:47:0B:CB:34:93:5B:A0:95:BE:D1:7F:03:F4:53:1A:8D:05:28
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 019D2A729EE0DE1353F9CCD5EA82892365BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 14:00:47 +0000
Manifest this update: Thu 26 Mar 2026 14:00:47 +0000
Manifest next update: Fri 27 Mar 2026 14:00:47 +0000
Files and hashes: 1: 9GhuMXLHbzdiDAMfsJHbqzR-MEw.roa (hash: g5IZRl4BDdytGAyq101061DrAkIRTjvTwY1EdCTIxCM=)
2: Rp8M3_sBtWj-4HdES1f560Y8DPs.roa (hash: rFSCCyJpt9So4+e0Mp2UXJjY5UcE4mhKhZ9xQZADyiI=)
3: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: zKttbQZKtPH0eYU76Av8ti41342S1y1+5H72zhiutlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:9e:e0:de:13:53:f9:cc:d5:ea:82:89:23:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Mar 26 14:00:47 2026 GMT
Not After : Mar 27 14:00:47 2026 GMT
Subject: CN=2597470bcb34935ba095bed17f03f4531a8d0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:48:08:1b:c4:c1:d9:e1:b3:ad:47:1b:36:
da:98:81:16:8a:55:87:59:c7:5b:d6:8a:7e:e0:d7:
b2:5b:e2:22:6e:c6:ae:4b:4c:80:d3:4c:07:f4:5e:
05:4e:d8:f5:86:13:7a:ed:7a:04:c8:f2:16:59:c5:
e3:b6:55:e3:0f:f5:da:c6:f4:e4:9e:db:66:92:5b:
f7:ff:26:a1:c8:44:a3:e4:4e:81:b2:3c:21:0d:49:
d3:93:8b:03:0d:92:ca:af:97:90:27:9a:aa:d8:d1:
91:ac:e8:bc:76:c9:aa:5d:1e:4d:f2:44:12:fb:9a:
10:23:91:ea:a6:a2:18:77:e3:6b:13:f4:29:ea:b9:
9b:9c:ed:1f:03:c4:a1:5f:db:9a:7c:7b:93:de:08:
94:68:6b:8f:34:3d:e0:de:b5:96:e9:c6:88:18:e5:
57:b1:66:8c:5c:f6:e9:3e:49:50:65:d5:d7:37:84:
ef:ae:78:ee:7f:e1:6d:6d:32:06:16:0d:bf:91:c8:
74:9a:f8:4a:8c:ee:c6:e5:26:fb:48:96:eb:a7:cd:
34:b9:73:0f:7c:03:d4:c1:0c:83:aa:a6:09:8f:62:
72:5a:a0:0e:b0:04:a3:31:b8:e0:ac:b7:47:ca:ab:
a8:da:a8:8a:06:5d:fa:ec:c4:7a:92:ab:13:f9:0a:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:47:0B:CB:34:93:5B:A0:95:BE:D1:7F:03:F4:53:1A:8D:05:28
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:6e:24:79:c4:bb:da:0e:63:3d:b8:9c:40:13:da:e7:37:
3c:47:a9:eb:9a:b7:80:70:16:af:82:e1:50:3d:62:3b:29:30:
77:62:bd:f9:61:31:06:4f:d3:32:77:79:98:e6:9b:69:8e:52:
e0:05:d8:f6:0d:f0:f9:55:43:0b:54:18:bf:df:21:17:2d:f5:
1f:64:62:db:8c:ce:f6:85:1c:0e:7a:60:04:bd:75:c1:3e:cc:
cb:3e:54:21:24:c5:28:82:4e:cf:7c:a0:0e:1c:18:e0:3a:e6:
9d:6c:7b:d5:21:64:e9:6b:e3:ac:fe:5c:80:a6:09:24:6c:d0:
2d:84:54:82:95:1c:80:2f:cf:a2:64:94:f7:f3:e7:60:d5:4a:
78:dc:60:47:ed:0e:b3:cb:7b:c6:05:f0:a5:2f:62:46:e8:fc:
97:75:9f:a0:04:31:10:6f:23:81:bc:d2:9e:25:0d:8a:ac:9b:
ce:b3:ef:11:60:dd:4f:34:a0:d1:bd:2b:20:65:b5:41:e5:79:
86:48:50:2c:3a:9a:84:4b:f9:6e:c5:47:63:d0:c1:b1:ca:28:
22:64:93:a7:13:e6:94:06:0b:24:fd:3d:e2:e3:c6:9c:f6:63:
e7:22:61:ef:80:29:f8:43:74:16:f4:c9:f6:57:af:73:07:80:
15:12:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:58 2026 by rpki-client