Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: MYK+WTzHHqrwdQzI4SIhi10GeRVW5HNjr2gw5Rwj7B0=
Subject key identifier: 69:44:FA:61:85:56:4C:73:B8:A3:47:F6:D4:25:06:AE:83:C2:D7:B0
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019D2AA9FB995E0E33355735A13A871B2D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 134C
Signing time: Thu 26 Mar 2026 15:01:16 +0000
Manifest this update: Thu 26 Mar 2026 15:01:16 +0000
Manifest next update: Fri 27 Mar 2026 15:01:16 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: rzBQMTnPZ9pBs/+VkLYIU2sQ1f+ip+O238mdURkQaFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:fb:99:5e:0e:33:35:57:35:a1:3a:87:1b:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Mar 26 15:01:16 2026 GMT
Not After : Mar 27 15:01:16 2026 GMT
Subject: CN=6944fa6185564c73b8a347f6d42506ae83c2d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:35:ea:e6:fb:0d:5b:4f:fe:dd:b7:6a:8d:
6a:29:f3:70:f3:00:a5:b1:fb:af:3a:1e:20:6d:33:
fa:c6:27:4d:bb:b6:cc:54:8c:5c:5d:bb:43:65:e8:
6b:16:3b:61:d3:b8:84:4c:65:ce:7a:1e:bd:57:01:
ac:8c:96:78:dd:b7:d6:ab:fd:d9:75:46:ac:e3:64:
5d:3b:33:d8:38:9a:72:c6:38:cc:eb:3c:04:9e:c9:
54:de:d9:49:5f:6c:73:3e:95:9a:f4:47:e4:c8:46:
a0:a5:a6:3a:75:51:db:38:65:07:7a:ca:72:fa:ae:
ab:5c:98:bb:4a:d0:fd:4d:be:ca:5b:72:7b:f2:77:
a0:aa:e5:fb:56:3c:90:f1:c1:52:9f:58:25:d0:8d:
b1:c8:ed:92:89:cd:b0:8a:33:d4:0d:9c:63:9a:c2:
38:52:6b:66:37:ba:3d:37:03:4a:82:ef:22:15:7d:
8e:c2:ea:dd:9f:3e:7f:c3:3f:3c:a2:ad:3b:14:f6:
08:bb:87:6c:b4:25:6f:50:d0:5a:bf:e6:0c:51:d5:
8f:c4:63:e1:38:5b:86:dd:b5:d9:eb:94:ba:8a:a1:
5b:63:e0:96:cf:df:f2:cf:0b:e4:99:d5:25:b9:8f:
d1:f8:4b:d9:91:dc:cc:9c:1d:52:95:92:5c:8a:a0:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:FA:61:85:56:4C:73:B8:A3:47:F6:D4:25:06:AE:83:C2:D7:B0
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:16:2f:ea:c9:fb:9d:17:e8:38:4d:b0:53:2d:57:60:93:
70:94:cb:aa:3f:14:1e:41:b2:3b:b6:80:f7:68:1e:b4:bd:c1:
59:6a:7c:c7:46:94:ae:d3:8a:02:72:da:27:dd:91:17:41:29:
10:cd:37:38:b8:4d:58:5e:ae:f7:56:73:46:1b:8d:ab:46:e3:
87:a1:9a:25:e5:d7:16:39:90:7c:f9:6a:a9:52:ca:ba:c8:fc:
47:b2:5b:d6:26:9b:28:57:71:3c:1a:68:8b:ed:13:a4:60:0e:
4e:fc:e7:33:a7:04:0f:13:22:1f:fa:40:84:26:b2:c9:0c:92:
57:39:22:24:b5:f4:06:9b:a9:29:0f:14:02:02:16:48:7c:7f:
9c:48:4a:26:24:17:70:2f:13:df:56:13:34:c1:a8:8a:97:10:
10:07:36:60:d5:41:9d:0d:04:6b:dd:bc:a4:b3:9c:a3:e9:d8:
ce:0d:67:59:98:a1:a7:de:7a:95:ca:6c:e3:c9:0f:ef:1c:01:
7f:93:d0:8b:66:47:e4:f0:a5:8f:64:11:d5:5b:c9:77:05:8f:
1b:e3:5a:f1:40:a1:28:42:bb:ad:c8:45:27:58:41:80:30:1d:
b4:23:8d:0d:c8:d8:c6:4c:d8:0a:8f:38:b3:e7:6a:2f:b2:5d:
46:e8:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:23 2026 by rpki-client