Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: aLKy4o5IdJEg/2QEQ6IpuiZUwKpx22EbpZE5ktbFwBY=
Subject key identifier: 1E:8D:61:6B:08:6A:8E:A9:45:B7:1D:C1:AA:1C:7A:09:24:25:AD:0F
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019D29974728BABB88940F4F39DCAD91DF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 1723
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: nudY+xzeMfwIRlO3H3XesieX9sJRMdH8hFgxsav1/rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:47:28:ba:bb:88:94:0f:4f:39:dc:ad:91:df:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=1e8d616b086a8ea945b71dc1aa1c7a092425ad0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:36:e1:17:c4:c5:72:38:90:05:de:6d:4f:
cc:32:18:70:b8:e6:d6:a0:2b:7f:2f:eb:e6:76:0e:
74:27:11:42:58:6e:64:c1:59:10:75:3e:ff:0e:44:
03:16:07:ea:d0:44:7a:d7:af:a0:96:9e:bd:3e:43:
23:1f:03:6e:e3:ad:23:6b:9a:ac:92:f4:c8:bd:9e:
0f:ae:12:d2:28:3b:aa:d3:8e:0a:77:43:8e:02:f3:
39:20:50:9b:31:3c:03:ed:72:e9:4a:51:e4:a5:87:
38:3d:e1:67:49:bd:7b:ec:0a:ed:17:f8:ab:f7:75:
24:a4:1d:d0:2b:6b:3c:2a:3f:40:3a:80:9d:18:3d:
cd:d4:0d:07:82:e2:85:c7:cc:d4:07:09:d2:1e:1d:
bc:97:bf:92:11:68:c2:64:f1:6b:7c:58:15:73:f8:
ce:74:f6:50:f6:c3:32:a4:22:da:b8:2e:5d:3f:c0:
53:83:09:41:0e:97:24:7f:f2:83:e4:c6:1e:1c:53:
92:b1:42:e3:0e:12:f7:43:9f:a8:28:7b:9f:4e:f0:
08:26:7d:c4:1d:c1:62:0c:a0:15:a8:a7:5c:20:c7:
0c:d9:e7:80:95:92:aa:79:5c:2e:7b:fc:f6:e4:1a:
58:10:62:e6:f9:03:75:4f:5d:4e:39:61:c7:38:56:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:61:6B:08:6A:8E:A9:45:B7:1D:C1:AA:1C:7A:09:24:25:AD:0F
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:c1:a3:43:ee:02:e5:15:f8:69:2f:a6:5c:de:11:3d:c5:
e7:b6:f9:2b:dd:59:f6:e4:f1:39:bb:e7:6d:cf:0b:85:23:61:
b3:e4:55:21:75:e0:12:bd:1a:84:5c:c5:df:0b:ad:20:5e:a5:
c1:42:2c:86:31:73:26:ac:03:3d:43:2d:02:8a:f4:77:e3:e7:
f9:40:7e:df:df:51:0c:c3:f7:75:a6:75:10:69:50:b1:d5:c9:
e1:02:25:80:9c:35:34:58:04:42:6e:55:50:3a:15:c8:bb:e5:
24:34:c2:75:c4:2e:b6:71:fc:c1:20:2d:b2:29:5e:e2:e3:02:
a8:53:e7:bf:e7:84:b8:e0:bd:87:da:e0:58:09:26:2d:1c:b8:
5e:ba:a0:a8:bc:53:08:09:d3:5f:01:50:fb:40:00:15:81:90:
2d:9c:c8:10:f4:cb:c5:c6:81:4c:90:f9:ee:79:88:c5:21:6e:
1d:8e:e5:2b:75:14:f5:d0:df:4e:41:75:0c:4e:5a:6a:b8:19:
c7:98:13:56:42:b8:ef:ba:df:11:18:a4:39:48:3e:ad:7c:23:
5f:7b:56:60:eb:fd:b7:9d:4e:de:38:be:58:7b:60:16:de:ef:
e9:0e:34:03:45:8e:21:48:4e:43:3b:5c:26:4a:ec:b4:44:c3:
b1:eb:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:14:55 2026 by rpki-client