Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: iJN/4eKNLLvY81ScePHV144fhVPvxGX49WEMT86Ec1o=
Subject key identifier: 18:1B:8C:ED:87:CD:36:2D:F6:CD:04:D0:EE:8C:4F:7F:F9:56:17:57
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019D28BB830C4D7CC2092E697B4918167C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: BSg41Jgo7dL3RsmaEbUsyVX7OjlcQjjuu23eYPkN0ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:83:0c:4d:7c:c2:09:2e:69:7b:49:18:16:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=181b8ced87cd362df6cd04d0ee8c4f7ff9561757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:e4:4b:2c:d5:99:ae:58:20:df:82:be:25:
a5:c5:a9:24:82:75:60:49:f2:5e:c2:de:9f:a3:c0:
c5:82:27:53:79:ec:72:57:05:13:a1:63:e5:f8:ac:
fd:b3:48:02:53:3e:19:9d:3b:8e:e1:e7:a7:38:41:
91:cc:83:82:69:eb:44:39:43:7c:13:3b:73:79:36:
48:48:32:26:84:17:a9:6b:87:ba:4c:2d:dc:be:5d:
89:dc:b5:c0:31:08:f8:7a:06:ad:83:04:10:3b:18:
40:a4:6b:1c:76:e6:c8:53:57:47:c1:c3:a8:bc:c0:
5d:c8:b4:c2:53:c1:20:29:44:9d:66:c8:9e:4e:6e:
5b:69:16:05:eb:80:84:dd:92:66:8d:bf:7f:3a:7b:
15:ac:0a:b9:d6:4f:c8:8c:8c:5e:d9:22:7e:9e:ca:
21:1d:e8:88:67:67:82:2d:34:5f:12:c5:66:19:56:
b5:4f:10:93:61:d9:4d:a3:cf:6c:47:e3:db:71:56:
ac:f4:75:56:a9:01:1a:c1:62:87:6f:e9:91:21:48:
ad:cd:3a:a6:22:28:b7:46:6f:bc:2e:98:9c:b3:75:
8e:d3:ce:c3:7a:54:c6:11:aa:27:d9:2a:86:4e:92:
ed:94:8f:cd:38:ca:68:52:57:ea:d4:24:df:3c:cc:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:8C:ED:87:CD:36:2D:F6:CD:04:D0:EE:8C:4F:7F:F9:56:17:57
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:c5:bb:c4:72:d0:24:4a:c1:de:13:20:1a:a6:5d:4b:53:
ac:f1:f9:21:62:92:5d:f6:2d:18:79:66:48:f9:98:51:11:fa:
c6:8f:a8:99:ca:14:8d:06:25:e0:b6:cd:ee:13:bb:21:8f:c4:
1d:4d:d9:0d:29:88:21:0d:64:4d:31:fa:ba:7a:c2:44:63:26:
f9:44:8e:ad:ae:41:17:a2:92:8f:56:bb:42:ab:8d:b8:3a:18:
23:31:18:ca:0a:4f:63:0b:e0:ef:e8:f3:78:5a:7b:3c:1b:27:
e2:50:1d:f5:b5:48:7d:62:5a:12:76:f6:17:37:04:6d:b3:f4:
1c:e8:10:a8:a7:3a:d6:ee:e2:c5:5e:72:a7:a8:51:a2:42:c4:
f8:58:a3:f4:41:15:5b:8a:8e:12:83:60:65:95:6a:23:0a:86:
d5:a4:b6:60:f9:82:89:57:e4:32:17:f6:33:47:d7:ca:83:43:
df:f8:c0:95:85:b2:f1:99:d2:75:62:a6:8d:5b:66:27:91:ea:
83:63:ca:31:bc:d3:4d:c7:72:f0:ef:e4:7c:56:e3:43:1e:b1:
1c:03:c9:a6:37:63:d6:d9:b6:56:0a:a4:8a:b7:da:16:eb:1d:
7c:0b:23:d6:e8:2c:2d:76:e9:eb:ef:2e:62:84:98:ff:01:cc:
f7:c1:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:09 2026 by rpki-client