Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: 6kWGGmRsu6v0GkygI3aYeuxuH051fVgU2oK+H4PgWvg=
Subject key identifier: 3C:7A:C8:6E:79:ED:5A:C7:C3:CF:7E:88:46:E2:5A:DA:B7:45:7F:3A
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019CAAFD6E21374E43EA36CCF00D9A2BB482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: AYUwImHjtxjRsLvL3PriAzenLDw.roa (hash: iOp+EiRAhWRuEGynv0qnZuyUCR3ll137ZqRUZPzXwm4=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: WYFO96kVeLKNyiMnDzIyAmaILQin9UOShsDG9+aT8Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6e:21:37:4e:43:ea:36:cc:f0:0d:9a:2b:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=3c7ac86e79ed5ac7c3cf7e8846e25adab7457f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:9a:dc:f0:9c:1b:00:fa:44:eb:00:cd:46:
7d:d1:0c:08:ff:bc:ca:84:87:70:14:30:b5:2f:dc:
86:d5:9d:ac:5e:00:c1:d8:68:b0:29:c5:b8:80:ca:
95:ed:98:66:a5:c5:c5:7d:61:a4:e0:30:c1:aa:01:
2a:13:8c:f0:56:69:0f:5c:f3:7d:39:8e:70:d2:42:
1d:70:15:f4:67:d4:0d:e5:9e:b8:dc:e4:ac:06:03:
4a:83:6b:73:e4:0e:4f:df:eb:ab:06:17:be:99:92:
d8:a7:cf:28:e5:41:76:77:b0:cf:30:cf:34:76:36:
6a:77:96:75:29:0c:29:41:a5:58:41:85:d9:95:57:
39:2a:9a:2e:04:0f:28:52:d2:2d:12:f1:fe:7b:24:
28:c9:0b:a4:2c:85:d2:8d:bd:3c:b3:04:bf:97:bc:
fc:28:f1:ef:8a:67:2b:fc:ef:5c:b2:55:79:bf:9d:
29:b9:82:e9:4d:7e:67:08:4b:60:ea:e8:50:bd:68:
2b:3e:29:c0:9c:c8:aa:2b:65:16:de:12:28:84:bc:
d3:62:b0:d9:19:af:1e:c5:55:89:aa:31:01:54:85:
bc:bd:ac:b8:ee:1c:a2:e7:5d:78:44:1d:3d:39:81:
b2:5c:38:ce:d0:02:f9:c4:0d:f2:db:bf:36:bd:57:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:C8:6E:79:ED:5A:C7:C3:CF:7E:88:46:E2:5A:DA:B7:45:7F:3A
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:41:1c:3f:ce:b3:bb:36:be:ef:39:ff:c4:eb:ab:39:9e:
bd:b2:de:c5:2e:e5:7e:1b:e3:51:a0:9e:23:6d:55:3e:95:bc:
2b:96:a2:83:d2:ea:fa:1a:b3:1c:89:f5:1e:dd:e3:c7:87:cc:
78:9f:3a:31:ff:5c:a3:e7:18:33:e4:c7:e5:61:2c:68:69:fb:
b7:05:12:37:4e:77:f7:14:82:41:44:8f:eb:5b:ff:78:7b:92:
6d:2f:96:28:22:74:4b:2b:09:0f:a3:94:39:ee:5c:5a:57:ab:
9c:5d:e0:e7:cb:0b:b3:80:aa:f5:ad:11:05:17:e7:a1:20:fa:
ab:4f:46:b9:eb:28:0b:62:2d:f6:b7:db:15:2a:9c:f6:f8:72:
21:45:f5:6f:48:ba:99:31:be:f2:67:88:02:da:0a:cf:4c:81:
d0:75:81:77:28:cd:e6:39:8e:3d:01:74:84:77:25:41:05:77:
d6:b8:71:e6:31:cb:cf:ee:1e:8b:1b:a4:ca:5e:f0:56:24:4a:
34:82:03:c4:3a:a1:d1:0b:06:f3:27:41:51:2e:1e:53:8f:78:
06:89:9c:50:3a:3e:4c:59:95:97:5f:6a:c1:cd:82:8e:58:6d:
4c:bf:1a:d9:10:69:6e:4a:cc:b2:10:dd:c4:e3:1f:f6:63:ca:
30:30:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:39 2026 by rpki-client