Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: x4tA2Z82l8jgzlDdkOS36fcKuTmfaDAx20E+rUWVj+E=
Subject key identifier: F5:A0:A4:64:A7:45:AA:91:1D:61:99:66:80:47:4F:DB:58:32:F9:43
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019D25F0F8FA15F30F282B30E354161C7B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: MZuhmg6RWz5PJDORbtiKw43mctPF0JAst8C75IQcwnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f8:fa:15:f3:0f:28:2b:30:e3:54:16:1c:7b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=f5a0a464a745aa911d61996680474fdb5832f943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:9e:34:9c:8e:9a:e8:3e:27:e8:98:ec:96:
dc:16:79:00:52:39:f0:17:cd:20:9f:5d:3c:6c:fc:
75:1a:6a:45:b4:ed:33:61:e3:eb:fc:f1:c2:4b:28:
1a:f4:8f:f1:5e:30:52:0c:74:42:73:9a:ba:3e:6d:
76:b8:cc:50:5a:37:31:4b:0d:36:98:86:66:7c:16:
3f:dc:42:ce:08:61:5c:a4:b4:4b:3b:2b:88:54:1e:
c9:6f:0f:b8:64:58:ac:ae:c4:8f:1c:17:04:4e:a3:
bd:a6:ce:cd:b3:80:32:d7:70:ac:35:48:b6:37:14:
32:58:56:8c:2b:fc:94:30:00:6e:6f:3d:98:ee:89:
24:b4:01:3b:35:f7:39:26:33:a3:f9:b7:92:b5:85:
6e:3c:4a:05:59:e7:9f:e3:0d:26:ba:5f:9a:2b:db:
8a:70:21:6f:ab:1d:31:ef:c9:32:79:6e:cb:e6:c9:
01:62:25:e5:c5:d8:cc:8d:ff:ef:e1:57:ec:bd:ca:
45:f6:5b:eb:ba:0d:80:75:49:af:c8:46:de:9a:89:
97:97:67:b9:0b:db:49:ed:da:52:8f:7e:46:3f:f8:
d9:28:dc:1b:66:4e:7b:21:22:f6:84:c3:fb:0e:6a:
c6:39:58:fe:a2:3c:f0:e9:fb:78:35:bd:ad:38:2f:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:A4:64:A7:45:AA:91:1D:61:99:66:80:47:4F:DB:58:32:F9:43
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:3e:65:fb:03:87:60:ed:00:99:3f:b7:5d:57:d2:3c:b2:
a1:21:5c:87:e2:ca:93:4a:cd:8f:b2:25:9b:e2:fd:ba:2a:26:
29:ac:38:ac:67:c7:41:e2:8f:a4:5c:bd:8f:66:38:ae:fb:07:
b9:8f:ce:bf:ef:d7:cc:43:70:03:23:86:8e:91:72:48:fc:f4:
01:f6:62:e0:77:ce:3b:58:0d:81:ab:46:63:4b:60:63:64:7e:
e2:80:e2:ca:a8:bc:67:f8:b9:35:8b:81:fe:86:66:33:4e:2a:
08:0d:81:2e:fe:74:ca:c6:3b:df:bc:8d:a1:80:ea:e4:cd:b9:
27:7b:85:ea:d3:23:7f:9f:c9:27:3f:f5:ef:e1:88:5f:d2:87:
a0:d4:5a:b0:e8:49:38:bb:c2:81:45:2c:9d:4f:dc:64:59:96:
ca:97:53:a6:08:ac:f1:02:a3:c8:5d:f5:a1:8f:b9:c4:39:45:
18:28:5c:10:49:fd:82:a7:62:15:50:90:43:2c:e3:b9:66:65:
ea:f2:f2:36:18:e0:e1:fe:84:45:20:25:c9:3a:09:5a:c0:d9:
69:04:94:2c:56:3b:0a:73:5a:a3:05:84:17:56:db:35:6d:6f:
c2:c0:2b:47:8e:dc:96:ac:bd:d4:06:22:07:5d:45:3f:56:5b:
e8:7f:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:47 2026 by rpki-client