
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File: Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier: 9E78g2VbfrVBm7gH86T3/ylyIAuSEeWUjrkVc+3MTlk=
Subject key identifier: 6B:F9:7F:A4:32:CF:9A:BC:B6:89:7F:3F:5C:BF:49:A0:BD:BB:CD:51
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 019D2929049D97358C25E5760EB7EEAB3B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number: 1055
Signing time: Thu 26 Mar 2026 08:00:47 +0000
Manifest this update: Thu 26 Mar 2026 08:00:47 +0000
Manifest next update: Fri 27 Mar 2026 08:00:47 +0000
Files and hashes: 1: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: cNl+zrffr5OT+vjT5eitAdo0zNDq7Ks5Zt0Bb46wTmY=)
2: wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa (hash: JaIiaqFbUadXR96s5KJcsIzRyU4XlBt77SuBIAaeHZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:04:9d:97:35:8c:25:e5:76:0e:b7:ee:ab:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Mar 26 08:00:47 2026 GMT
Not After : Mar 27 08:00:47 2026 GMT
Subject: CN=6bf97fa432cf9abcb6897f3f5cbf49a0bdbbcd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:06:95:f9:8b:78:35:9e:25:e1:9e:9f:3c:
c4:13:a6:de:f1:70:c7:34:d9:10:1b:dd:1c:76:2f:
59:1e:3f:e2:05:b1:f5:94:a1:f1:a1:eb:6f:76:57:
07:42:39:b3:5b:6d:0a:62:f9:f0:bb:4b:51:a7:b2:
83:ae:da:10:a3:34:41:f3:56:ef:57:e2:61:1e:00:
91:d5:96:ad:e1:ab:fe:9a:64:62:d7:08:cb:68:c3:
c9:e7:0d:a9:09:08:cd:9c:32:7f:eb:10:88:b7:1d:
10:38:60:ab:8a:ad:f2:25:70:e5:54:94:e8:b9:cc:
fb:8d:11:e3:f5:09:aa:6b:0e:48:94:28:fe:b7:73:
47:02:ae:71:a1:76:7a:5c:08:8e:82:81:5f:f8:2b:
da:f8:e4:f1:46:89:e4:83:2d:88:7f:10:08:17:c0:
7c:10:c7:58:f8:da:d8:ed:fd:90:d9:5c:bf:94:34:
f7:10:24:65:90:47:d5:0b:32:e6:bb:cc:14:60:e3:
99:7c:b9:81:d3:1c:36:b1:75:dc:42:c8:26:44:c6:
6d:64:4e:1f:11:45:47:f4:3d:e3:9e:b5:74:40:0b:
95:a9:48:4d:c6:3e:04:33:89:1b:93:a7:8d:ab:02:
6a:47:c2:98:81:b2:28:9a:12:ac:13:72:6d:a5:88:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:7F:A4:32:CF:9A:BC:B6:89:7F:3F:5C:BF:49:A0:BD:BB:CD:51
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:2f:38:b6:7e:5c:ed:71:55:13:6b:e4:67:f0:1e:b2:e9:
fb:38:36:b0:09:6f:b2:a3:b9:98:fd:b8:34:c6:33:50:cb:04:
a0:44:d8:6a:ac:c3:88:b3:97:4e:47:9b:e8:5a:ae:c9:a3:23:
b2:3c:8b:0e:24:ad:46:d1:ca:82:26:35:df:64:df:83:76:57:
03:be:f1:0e:92:2c:c4:62:a3:d7:33:58:cc:04:d1:b6:e3:59:
6d:0b:5f:80:e1:86:ef:1f:d4:01:be:53:a2:d3:16:eb:00:bd:
d4:dc:61:d7:91:25:2d:42:c7:16:b9:74:08:48:80:8e:ff:7a:
16:3b:25:98:76:a2:f9:f3:e9:10:52:e2:20:da:40:62:ae:2c:
16:29:d7:02:a3:98:69:37:36:5b:d3:b8:11:6c:0f:e5:aa:11:
c2:b5:ad:ef:07:7a:1e:d0:91:bc:e8:73:df:4b:4e:9b:24:92:
56:26:83:84:2d:b3:17:77:ad:88:04:db:e6:f3:bd:d5:cc:04:
38:77:0a:11:dc:fc:64:f9:eb:84:22:09:03:3a:f4:b3:cb:72:
e9:ba:67:cd:ed:5e:be:26:fd:b2:27:e8:0d:a3:e0:30:c0:33:
80:4c:19:6f:83:0f:7b:40:c8:66:2e:d7:54:8b:46:ad:f3:cb:
20:07:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:03 2026 by rpki-client