Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: nvEth/9GiD3jJsuc21icMWRFKh0u8ao6vJHurRijzWo=
Subject key identifier: 44:C9:E6:96:80:0C:DC:D9:85:9E:13:04:B7:0E:6D:71:1F:83:6F:97
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019D27E06C99870A5275462A488D47884DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: fd7Qkvr6BAI13ijnlXGRL87FZg8OGtMF/qe4ukZ6eLw=)
2: dbEVVOSGmAB9BVhX1SxdhAa54XM.roa (hash: PzFQiBYckhIajBueW8NDRUzWLgElYVTtb1/iAMzZ3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6c:99:87:0a:52:75:46:2a:48:8d:47:88:4d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=44c9e696800cdcd9859e1304b70e6d711f836f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:a1:73:e9:8c:b1:de:8d:85:ee:6f:a6:93:
43:b8:d2:f2:a8:d7:58:fb:1a:3d:1d:ce:8b:2e:c0:
87:77:ae:47:7e:d2:b7:0e:88:fa:90:80:5b:28:ca:
0e:35:96:ea:58:9e:f7:4a:16:a0:98:5e:83:34:2a:
b7:ab:a2:46:6f:cc:ad:24:58:be:da:c4:2e:d6:57:
1d:0c:4e:0c:ae:87:0d:7e:39:dc:66:8c:6c:b9:fe:
74:0e:2a:14:e7:a3:80:19:a4:90:cf:59:bb:42:72:
06:57:41:e6:1b:9f:7b:64:70:b7:d4:2f:b6:0c:7e:
b5:bd:de:39:7e:1b:e3:1d:1d:ea:ee:74:73:f6:5b:
6b:c6:4e:3c:21:0a:f2:2b:f7:ba:c1:63:a9:f4:d5:
41:a6:0c:79:aa:db:b9:df:80:a9:3c:f8:65:6e:53:
04:a4:1b:86:c1:a8:fb:b1:28:0f:b4:29:ad:35:46:
ac:16:78:90:29:47:a7:f0:f6:8c:99:ca:85:0b:0a:
10:83:49:c9:2e:c6:f2:5e:df:06:5e:ed:1b:d0:8a:
d4:ed:fb:d2:9f:9c:cb:4a:04:c4:c7:88:b7:24:8a:
e7:df:f1:33:39:b9:30:19:37:bb:89:b4:80:98:c3:
35:78:7f:0a:3e:7e:18:b1:59:e2:79:e8:80:6f:26:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:E6:96:80:0C:DC:D9:85:9E:13:04:B7:0E:6D:71:1F:83:6F:97
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:24:97:13:9a:8d:10:32:d8:e2:1c:54:a5:74:c1:76:89:
6d:a4:99:d6:71:11:13:2a:8a:68:3e:6c:c7:c7:a3:3e:28:75:
22:aa:b1:bb:00:33:fa:67:c2:5c:d5:33:ae:53:7a:9f:85:66:
fb:7e:a3:a4:30:1c:aa:7f:a7:21:d4:57:22:32:85:cd:22:b4:
e7:bc:67:54:a4:4d:5f:7c:5b:c0:9d:3c:81:44:7b:5e:18:76:
b5:10:56:f5:e3:b7:15:21:53:ad:6e:55:35:9f:61:c2:ce:01:
d1:e6:c7:36:2b:c7:0b:69:82:b8:d9:e3:80:0d:7e:8a:e4:80:
aa:23:19:0f:bb:e3:87:60:d2:59:0c:a0:1d:35:3b:6e:3d:e9:
d0:65:64:d8:81:8d:f2:63:7e:c3:68:6f:1b:06:c4:ff:fa:0f:
51:fa:51:98:b1:f3:59:dd:75:42:d3:a5:d6:70:bf:db:bf:dd:
c1:08:8c:d7:ee:3a:e9:90:cd:3f:e3:bf:6e:6d:15:b4:cf:99:
f0:19:52:b3:6e:83:57:93:a2:a9:20:59:d4:82:ed:30:c4:33:
96:33:73:ae:be:d8:af:a5:4f:f1:67:a8:0c:7d:22:13:bf:4c:
dc:0b:5b:7e:8e:70:33:b4:61:75:be:6a:83:61:85:c0:ba:7d:
dd:1a:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:25 2026 by rpki-client