Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: katq6AkLUVhbiq7qpafPfej1u636mhj9lw1Q55gFiX8=
Subject key identifier: 08:34:DF:0C:A7:15:D6:23:57:DD:09:9E:51:70:52:BD:60:F8:24:2E
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019D273AD3F157754C71850971ECB52599E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 042A
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: M404quKj6dKO8ZY08GZOsECir96ZB9d4UJPlMq8OHLQ=)
2: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (hash: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d3:f1:57:75:4c:71:85:09:71:ec:b5:25:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=0834df0ca715d62357dd099e517052bd60f8242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:8c:45:52:a8:08:36:a1:9c:bd:fe:e7:9d:
db:a9:4c:6d:68:48:f1:39:ae:59:d6:43:90:d1:bd:
9b:92:07:8b:f8:6b:1e:9e:ed:0f:51:df:48:36:91:
b5:5e:27:00:4d:d5:08:25:70:e7:36:19:c4:6b:c3:
d7:60:1e:00:a4:8e:63:9f:fa:db:d8:3a:49:28:2b:
b4:80:54:a1:da:a9:42:b1:ab:f1:82:2e:6d:24:f1:
45:e4:ec:b7:30:12:2d:48:ce:d8:6f:5a:76:bd:d8:
df:78:e0:92:94:69:60:9b:31:69:e6:18:03:ed:92:
93:2f:1b:f3:9a:71:8f:1c:ea:67:cb:b2:53:59:94:
39:25:86:a3:ac:71:84:43:9c:1d:57:84:f2:2e:3b:
d4:0f:ec:bb:aa:14:b8:37:d2:b8:58:1c:2f:93:70:
e7:db:2d:7d:56:04:50:21:ef:f7:91:d8:2e:d9:d8:
f3:60:fb:79:a6:4a:20:ee:5d:76:3c:51:36:ef:9f:
9d:f6:58:e4:91:57:6f:10:f6:0f:29:aa:15:4a:35:
3a:74:ab:3a:bc:83:d5:0a:c7:05:1b:7f:e7:70:7f:
d7:6c:aa:ab:0d:5c:33:8a:15:4f:a0:92:83:b2:e0:
2e:e3:60:20:74:56:e5:3d:92:ee:7d:f0:b6:84:af:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:DF:0C:A7:15:D6:23:57:DD:09:9E:51:70:52:BD:60:F8:24:2E
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2f:5f:ab:cb:02:30:13:1e:6b:2b:f4:14:ce:e8:95:c9:56:
40:5f:23:8d:93:e5:87:66:95:90:88:d9:77:0d:96:f8:43:a7:
ee:c8:c9:da:87:84:95:6b:6b:61:5c:95:55:eb:a1:3c:4c:72:
4a:b3:63:f3:a5:24:9e:81:3c:f5:04:1f:9c:7f:17:4f:2b:cd:
2d:4e:ff:4e:70:3e:55:4f:a6:68:24:4c:c9:d8:7e:3e:4d:4a:
b8:bd:59:a9:fa:a1:d4:63:4f:51:e1:37:d4:f7:88:bf:ac:af:
e0:d0:cf:a2:37:38:e1:88:9a:2a:00:9a:bf:8b:4f:59:10:89:
9d:29:11:ab:d3:9a:4b:0e:8a:55:00:59:61:c3:15:7f:42:19:
1f:7f:4e:77:ca:5b:66:a2:95:b7:b8:b7:07:18:fe:ff:21:93:
6a:51:91:17:d7:65:2a:7e:3e:5a:4b:6a:76:51:56:55:51:53:
4f:6b:2e:95:a9:1d:74:e9:74:ee:51:1e:e5:5b:9d:9c:cd:c7:
49:62:d8:58:e5:56:d4:41:b3:6f:62:1f:e9:67:6f:23:27:3e:
7c:16:a6:e3:96:af:ca:38:6b:25:7d:2a:76:f4:3c:ea:19:da:
07:87:a7:d4:d0:d0:22:2a:cf:10:c2:50:ae:88:6d:41:d0:01:
bf:8e:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:29 2026 by rpki-client