
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: PJycleXOyTRtx0hI1S1HjjuYOxRso+lxj6BC/2KKdO4=
Subject key identifier: EB:C8:73:03:28:FC:72:C4:C0:C5:42:C7:35:BE:AE:ED:1D:C3:28:74
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019D25F1808D33CC5F760883E41CDB28AAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (hash: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk=)
2: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
3: uWQ_yyWTJKlwMIna4dHe1PfEbz8.roa (hash: tvPaUHk8Xmgw+avX8XEILYU/M4IbkxRiILy7UdTCanQ=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: Psiij2UeYTowX4Sr01nOZUpPcLLYzUoUi4bYfuDy9lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:80:8d:33:cc:5f:76:08:83:e4:1c:db:28:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=ebc8730328fc72c4c0c542c735beaeed1dc32874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:c5:b1:a6:4b:2b:41:7c:c9:57:8b:70:93:
9b:76:8c:1c:9c:ce:af:9a:5f:87:e6:7c:a9:1a:a7:
35:d8:c2:ec:78:c7:b1:d8:1b:36:71:77:b6:1a:62:
d6:3e:ce:b3:b0:4e:12:ae:37:81:e7:d8:e1:e3:77:
4f:28:55:14:25:e1:5c:74:1b:41:9f:62:5b:e9:db:
19:16:26:81:eb:af:7f:51:93:0a:3e:0c:86:ee:50:
f4:35:0d:e6:0c:42:1c:59:02:2c:e1:2e:31:1a:db:
4c:3b:1e:69:a9:c5:49:52:6b:67:45:1a:06:57:08:
df:fc:50:72:b5:0c:9d:92:56:27:57:d8:b0:3d:0f:
6f:a8:9f:c8:97:d5:97:b9:39:36:56:00:03:b9:f4:
ce:94:41:9c:ec:7a:1f:50:e5:26:90:51:b8:7f:ca:
03:03:05:0d:4a:a9:1e:26:1a:fc:2f:1f:e0:3e:b1:
4f:d3:6b:30:e7:c2:a2:d9:ce:44:6b:62:bc:05:15:
15:80:a8:6c:4c:2a:67:66:fe:29:77:80:a9:e4:64:
f3:4c:42:b6:20:60:e4:9b:8b:39:43:e8:6c:55:40:
aa:53:f3:84:ba:76:4e:bc:37:ac:6d:72:20:e3:17:
36:70:42:13:f4:67:9b:7a:69:76:f6:5d:55:48:ff:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C8:73:03:28:FC:72:C4:C0:C5:42:C7:35:BE:AE:ED:1D:C3:28:74
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:27:77:ae:9e:08:d8:9d:79:e1:dd:b7:c5:4c:d5:32:6b:86:
7a:b8:14:d1:86:9b:ec:6c:bf:3b:8d:ad:ca:bf:2c:88:03:43:
be:98:dd:e5:8f:39:d2:db:1d:ad:37:57:e8:14:15:bc:8d:59:
54:eb:9d:1f:09:3f:39:cc:bc:51:2c:69:1f:c9:95:11:07:0b:
ed:52:21:79:89:c2:34:30:aa:d3:ac:cb:1c:5e:97:d3:db:b9:
7a:fd:f0:c6:ab:96:32:58:06:ed:10:89:58:c9:95:ad:08:6b:
69:a1:2c:0c:40:c8:cc:b1:1d:b0:66:0c:cc:95:86:aa:4e:cb:
a3:c0:40:52:6a:b3:27:b6:c8:66:6b:ee:00:08:8c:21:df:02:
bc:ff:3f:95:77:dd:12:07:c5:6e:ef:3b:d5:fe:ab:98:63:4f:
11:47:43:0f:e2:9e:64:e1:6e:79:fe:b0:e6:4e:e8:6a:2d:d3:
e5:ee:3e:96:a5:9f:94:81:0f:22:f9:e9:da:b6:36:63:b8:8a:
07:f9:42:f3:d8:24:37:74:88:2e:8e:9c:c1:0f:63:18:7b:34:
00:d6:5e:5d:4d:f9:dd:74:d7:c9:5d:81:bc:15:1a:23:a6:ae:
d1:6b:f3:08:2a:03:24:7e:ac:17:5c:3a:ee:6f:e4:5e:bf:f1:
68:2b:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:51 2026 by rpki-client