Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: KSk/11qVsxupNkOYjcGBNkqfoPbxcVyF4gW1bMrk2lg=
Subject key identifier: 6F:F9:09:01:02:6D:9F:65:5E:A1:15:FA:22:0E:CF:17:93:5E:B6:51
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019D27729FBADFF807CDCDDF403F3D0C1309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1317
Signing time: Thu 26 Mar 2026 00:01:56 +0000
Manifest this update: Thu 26 Mar 2026 00:01:56 +0000
Manifest next update: Fri 27 Mar 2026 00:01:56 +0000
Files and hashes: 1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: V1UHDhT/EGmu8Uz0K1V7PqpZ1L+Oqk257o0j/ntJI1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9f:ba:df:f8:07:cd:cd:df:40:3f:3d:0c:13:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Mar 26 00:01:56 2026 GMT
Not After : Mar 27 00:01:56 2026 GMT
Subject: CN=6ff90901026d9f655ea115fa220ecf17935eb651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:e5:31:20:88:ff:e3:6f:36:26:5a:f4:88:
b9:ee:e4:4d:6e:d0:e9:af:9a:30:81:b7:e8:28:fb:
91:90:40:95:ba:ef:4a:64:21:16:62:cd:02:c2:b2:
74:e8:b8:b6:8f:24:3b:d1:f4:d1:35:77:1d:b0:74:
c5:64:af:fb:23:f8:3b:2f:87:9f:d6:01:e8:07:08:
bd:b0:42:fe:7a:a7:4f:ef:8c:4a:53:3a:61:2a:4d:
58:22:c3:82:78:6a:4c:8d:ea:f3:88:7c:f2:fd:b7:
92:b1:56:cb:c7:8d:c5:ff:b0:ae:bc:16:47:32:38:
68:35:bc:71:df:1c:de:3c:6f:fc:ff:98:c4:da:55:
f5:b0:12:5a:1d:b7:4e:70:83:f2:df:49:ca:39:e8:
cc:fe:a9:9a:04:01:c9:34:76:e3:a1:a1:cd:2e:29:
5d:ef:1c:22:3a:ed:70:cf:53:61:d0:df:e0:09:f2:
3f:02:bd:d1:5f:e0:05:47:1f:58:97:6c:c1:ca:40:
44:3d:eb:e3:01:a8:6a:bc:a8:eb:db:08:63:79:00:
fb:9a:a5:8c:ad:44:40:34:62:d8:cb:0e:f2:04:33:
7b:dc:18:a6:21:f2:12:2b:b7:30:77:ac:77:e4:f9:
81:12:0b:b7:49:3a:a9:bd:48:83:5f:9e:5b:26:be:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:09:01:02:6D:9F:65:5E:A1:15:FA:22:0E:CF:17:93:5E:B6:51
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fc:e5:bf:c5:cc:07:03:8f:f7:cd:1e:5a:47:58:5a:61:a5:
f5:7c:07:c2:ea:f3:17:b0:eb:88:3f:7f:f8:97:90:88:79:1d:
db:c6:a7:e9:f3:dc:fd:84:d8:ea:ba:92:6c:77:1f:2c:6e:61:
db:25:c7:26:50:72:7e:99:8e:ea:1c:c2:c1:03:7c:bd:3e:98:
da:9a:8c:85:ba:98:c4:8c:ac:95:81:a4:fb:42:46:bf:31:91:
5a:dd:a1:f9:44:2a:48:cd:f6:bd:d5:99:05:3c:18:c8:53:51:
90:02:17:e4:28:ac:3f:95:a0:ad:21:bc:9a:0a:80:f6:fe:82:
0f:fd:ae:63:3b:c0:f2:07:c5:c9:dc:9d:fd:64:f3:0e:c0:14:
51:08:56:64:7c:04:74:75:ec:d6:26:75:55:5d:ae:91:38:b6:
4d:71:1b:74:30:9f:80:eb:0d:7a:90:d5:e9:0d:a3:5c:0e:cf:
a7:53:9b:da:47:a1:4b:89:30:d4:f1:60:93:d6:7e:19:ab:91:
ee:93:33:ea:7e:7b:a6:54:6e:bf:e5:76:d0:0c:e4:60:c3:f9:
64:d6:a0:ce:8b:f6:10:39:b1:42:f3:95:35:b8:9c:40:a7:1b:
3b:7b:c3:b7:a9:af:79:e3:cc:ba:67:10:6d:4d:2e:74:70:db:
46:91:f1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:01 2026 by rpki-client