Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: b7Q9gs5A49ZVDewENHMtI2zZYLL5Hb+RI3p2tYIPyHg=
Subject key identifier: 12:79:39:C2:D0:1A:5B:4B:EF:8A:67:3F:1F:2B:37:8E:A8:DD:DC:E0
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019D326315CBD1D2465D09B5AFD2DFBB4319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 0963
Signing time: Sat 28 Mar 2026 03:00:47 +0000
Manifest this update: Sat 28 Mar 2026 03:00:47 +0000
Manifest next update: Sun 29 Mar 2026 03:00:47 +0000
Files and hashes: 1: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (hash: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 3SDnSAhXlwAwoa9RfrJPwQNSdM2BbJGt39Ggt/wXdNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:15:cb:d1:d2:46:5d:09:b5:af:d2:df:bb:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Mar 28 03:00:47 2026 GMT
Not After : Mar 29 03:00:47 2026 GMT
Subject: CN=127939c2d01a5b4bef8a673f1f2b378ea8dddce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:cf:04:b9:e3:11:e3:4a:c0:55:67:98:f0:
d9:ab:2f:6b:94:fc:33:aa:ed:cc:b6:22:ca:de:c1:
5d:f7:1d:34:e9:0b:2f:01:c9:4e:1e:0e:64:6c:1e:
10:54:25:68:80:f7:06:0f:29:fb:a9:06:14:21:c4:
fc:8f:db:11:e0:61:db:f2:e1:2d:5c:da:1b:15:00:
7b:79:d9:f9:62:4d:fd:96:ad:b7:d6:ec:aa:ce:fa:
17:a1:be:bc:04:ce:df:89:3b:8c:90:f8:85:37:7f:
64:11:03:cc:80:4e:b0:5a:d8:4b:9f:80:5c:bd:47:
d3:4c:b5:61:7c:18:3c:ab:b2:a2:8e:d6:c2:07:56:
56:36:14:31:0d:a4:f0:1d:08:df:ba:17:27:3b:f9:
76:91:32:dc:e8:65:e0:e2:53:4d:b3:56:30:24:3c:
b0:48:48:e1:4c:8f:71:8f:e9:97:68:36:3b:72:39:
77:1b:93:15:e6:64:cd:14:ba:d3:c1:2b:00:bb:45:
f6:18:9d:b1:fe:64:cf:3d:d4:83:64:30:6f:65:31:
3f:f1:5a:fb:8b:f4:2e:33:b2:eb:ad:f6:05:5b:5b:
db:c4:8d:67:3c:f6:cf:3d:b1:4e:5d:4e:2e:ad:52:
4b:45:5b:b1:54:63:f3:01:b3:ee:86:a9:7a:b1:14:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:39:C2:D0:1A:5B:4B:EF:8A:67:3F:1F:2B:37:8E:A8:DD:DC:E0
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fb:07:e9:55:c3:22:70:a8:78:68:24:d3:36:d2:ec:39:8a:
5a:2a:27:18:b5:c5:19:49:15:24:6a:47:60:2b:3d:8f:64:9e:
19:9c:75:33:4e:2e:3e:80:9b:7f:a3:19:37:74:b4:46:2d:e1:
d2:fa:39:b3:18:21:cf:6f:7d:86:a3:d7:cc:d3:e5:4c:cc:5c:
aa:3b:1b:19:b6:cc:0f:e6:05:c2:44:dd:cc:d6:1b:a1:23:a8:
97:64:80:c8:71:6a:72:e2:28:2e:83:9b:b5:5b:48:a4:94:c8:
fc:c6:d3:06:42:2b:50:a4:de:fa:1f:7f:33:68:d0:b0:40:d3:
6b:93:ee:4a:7d:d7:6f:14:57:53:3e:19:87:38:8d:b1:03:6e:
4c:4a:01:d7:46:c3:83:f4:c1:dc:ac:a8:7f:89:aa:03:71:52:
70:5e:d5:5d:0a:bb:be:a4:70:3f:b3:6b:f0:5b:01:c9:a9:b9:
10:ef:e3:c7:27:6d:d5:f3:63:5d:79:2e:5a:ac:f9:98:02:16:
a4:47:67:23:05:b6:ee:81:d1:f3:f7:fa:75:b4:f0:9a:4a:5b:
0a:ad:dd:42:56:be:cd:fa:68:77:1c:b0:01:0b:61:17:54:b6:
2e:f4:2c:4d:53:bf:b4:37:06:8b:b2:ed:70:95:fb:41:62:00:
c2:96:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:08 2026 by rpki-client