Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: 1wIgmSmcgu5l6ZzJZM86RnQnEqGpemPbsDdNo5XRfno=
Subject key identifier: 99:86:BA:29:39:EE:15:2A:E5:C1:80:0C:C6:74:79:AE:C0:D1:8A:9E
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 019D27A8A8F6B9119E713322732252F5F4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0F50
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: 8ZznKn3V+3Az377tfh7sCp2XoMW6vAneaj5YKIFrJTY=)
2: _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (hash: FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a8:f6:b9:11:9e:71:33:22:73:22:52:f5:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=9986ba2939ee152ae5c1800cc67479aec0d18a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:9b:4d:24:56:bf:63:99:53:47:63:ec:f7:
72:9b:8d:58:f4:b2:76:2f:9f:d8:eb:ab:45:0d:f7:
9f:c2:f9:f3:df:b7:4a:b6:9f:9b:6f:05:db:9f:c8:
fe:f4:56:1f:1c:70:1f:54:bb:08:8d:c5:46:6a:d2:
21:84:a1:bf:95:52:6d:08:0b:5b:69:22:f8:4c:4f:
8c:17:7a:16:7a:23:5b:78:fc:0b:6b:fd:83:32:b4:
6a:4e:22:54:c7:9b:f0:44:bb:74:5f:f1:f5:e3:f0:
60:a4:80:82:21:31:64:6b:43:a6:62:69:66:d5:4a:
16:7f:09:3b:b5:83:c7:66:89:62:6f:24:1d:d1:78:
84:2f:f4:9d:21:47:54:e6:09:07:d4:73:d9:f8:5e:
2b:0c:95:7a:62:a8:93:4d:77:fc:7b:aa:2c:3f:6e:
b8:1e:d2:fb:3e:11:98:9e:9b:45:f6:e7:78:1a:ea:
f6:69:42:00:dd:b7:51:6d:11:34:88:24:a3:15:38:
9b:4d:f0:cc:d5:f7:3c:c0:87:e3:b6:ed:64:8a:8e:
18:87:f5:23:28:a6:95:74:bf:91:6c:5e:7a:a3:5f:
8d:fc:04:b0:72:83:3e:f9:ed:ec:3e:5f:78:07:bd:
f0:4b:92:bb:e2:7d:a8:2e:60:76:f5:95:cd:56:5f:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:BA:29:39:EE:15:2A:E5:C1:80:0C:C6:74:79:AE:C0:D1:8A:9E
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c4:1f:96:79:22:e0:59:23:00:84:4c:1b:2f:b2:fa:61:44:
09:d8:86:07:41:34:4d:8f:ad:e5:c9:31:8b:13:a0:4a:2a:15:
f0:de:2e:1f:53:a7:97:44:05:cc:7d:26:a7:bd:58:f2:04:5a:
cb:a5:dc:6d:2d:0c:c0:d5:b5:2d:df:39:1d:a1:2f:a4:63:b2:
79:16:65:2e:f4:50:e2:fc:8b:8e:fd:e7:3e:89:fb:b6:56:66:
b5:f1:7c:9f:ec:c1:22:bc:0b:82:39:2d:18:93:44:c6:15:b4:
7e:86:ff:c3:a0:e4:86:ed:fb:7c:2d:02:e8:d8:8e:db:55:71:
e8:f2:de:e4:a3:6b:60:3f:85:a3:9d:e3:17:1b:e2:de:a0:26:
c5:29:1f:a9:e8:75:7c:cc:85:cc:90:83:ba:80:c0:6f:ba:fc:
29:e7:98:8c:75:08:2a:03:2f:50:82:86:75:07:55:c2:71:a6:
a9:96:db:df:2b:e4:eb:4b:dd:b0:2a:ac:e5:66:af:96:c6:ec:
ac:68:19:83:72:a1:c8:8d:db:6e:c9:a7:54:f0:dd:1b:43:ba:
f6:61:a5:7e:69:56:97:dd:e2:19:3e:ec:53:2e:de:44:17:47:
89:72:71:2e:c8:c1:f2:4e:14:21:8d:8f:a1:d2:45:d5:1e:c8:
68:3e:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:15 2026 by rpki-client