Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: oN7mguCOR+aYnpH/eVwQ+hNh4/ZNX8xI/T5VDuITPTw=
Subject key identifier: A3:72:8D:4D:41:CE:E2:81:FD:48:A3:45:3E:6E:E3:B6:E1:D2:29:4E
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019CAB33E4961601515B40F9D95ADF46481B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:30 +0000
Manifest this update: Sun 01 Mar 2026 21:00:30 +0000
Manifest next update: Mon 02 Mar 2026 21:00:30 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: wYbUTbJviWzOra2+0x6YvNgc7PAMuKYv9lIZQrqEIrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e4:96:16:01:51:5b:40:f9:d9:5a:df:46:48:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Mar 1 21:00:30 2026 GMT
Not After : Mar 2 21:00:30 2026 GMT
Subject: CN=a3728d4d41cee281fd48a3453e6ee3b6e1d2294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:94:3d:09:ac:0d:44:27:24:ab:f3:aa:2b:
47:89:4c:fd:a2:31:93:c1:69:5a:a1:14:a7:59:df:
c7:03:be:72:4d:ee:aa:16:12:cb:35:ad:12:86:aa:
30:66:00:90:ff:41:58:f3:07:62:42:c9:30:17:03:
da:96:86:35:69:e1:00:5f:45:0d:52:ab:0d:71:eb:
45:00:fe:6e:ec:39:bb:30:e1:e0:ab:35:d3:57:0e:
c6:9a:7e:68:b3:57:e7:ad:2a:bb:4c:af:73:fd:cf:
a3:88:a9:c8:70:b0:37:04:c9:01:9b:e8:41:e9:f4:
f8:d6:be:8f:e8:a7:2c:15:57:c8:30:ed:1e:ec:b5:
ca:65:94:f8:2e:99:19:22:b2:41:6e:f0:2e:fc:47:
6e:f0:8d:82:01:1f:ee:31:b3:74:17:d9:5c:05:93:
00:82:00:39:7f:bf:b1:83:42:e0:72:26:a6:0c:19:
25:72:b7:00:ba:c6:52:f5:20:81:9f:3c:02:89:31:
72:c7:1e:5f:52:c4:f9:93:d9:af:4a:db:57:26:b9:
ec:40:08:a0:e2:a4:40:bf:66:f2:95:b0:3f:95:7b:
2e:21:21:f1:fe:b8:63:df:e9:c5:79:8d:d9:2a:2f:
fa:15:5e:6e:7b:85:ad:41:28:a5:ca:a3:46:21:8d:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:72:8D:4D:41:CE:E2:81:FD:48:A3:45:3E:6E:E3:B6:E1:D2:29:4E
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:4d:8d:78:4c:bd:c7:c0:f5:e9:16:d9:22:a8:35:f9:80:
79:e0:ba:37:91:67:b7:10:59:a7:60:1c:71:9f:c7:8a:d0:55:
a0:93:5b:b7:46:4b:78:cd:ed:a2:03:7e:92:d5:fc:3b:32:dc:
c6:08:b9:cf:c9:05:32:78:4f:d0:45:2b:83:cb:8e:16:75:19:
a9:1b:95:9e:e5:d2:00:b7:6e:dc:ae:da:1e:5a:26:6d:41:7b:
96:66:dc:7f:71:0c:b3:f7:7a:21:f7:d5:c2:be:1a:16:b1:0d:
a5:c4:42:df:b5:7a:8a:89:fb:fd:30:f5:99:b2:67:ff:d4:6c:
dd:eb:9f:e0:c3:e8:79:74:39:17:8f:cc:de:dc:54:c1:70:e1:
57:21:03:83:9b:98:f9:cb:bc:2b:0b:b8:e0:7d:a4:1d:3d:85:
8e:8b:83:e7:60:b9:15:61:ac:e3:f8:de:c2:b3:e7:6d:fa:4d:
8c:ac:41:a5:40:79:28:43:f5:51:06:c9:76:df:6f:b0:00:0a:
27:76:b6:a1:39:59:8c:f4:ef:40:87:61:1d:04:dc:20:9b:42:
a9:2f:46:63:d4:91:e2:41:93:b7:d4:7a:80:b2:ff:50:38:e4:
72:bd:77:c8:ae:2c:4a:2b:5d:74:3a:4a:0d:0c:30:d5:c8:bb:
cd:97:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:18 2026 by rpki-client