Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: 6Wi78I3cOgR6M2bwJ+CFMAtYMY3vSriorslAflK9BJ8=
Subject key identifier: 25:72:C6:AB:7D:CA:B8:C4:A6:A4:79:75:0E:80:4C:9B:8A:20:7E:C4
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019CAB3429450AFFD2C51115E62768A6CD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0E43
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: mX09jpHU9a7Tdj80Xd7ov4xV+i9PIizzUQa/RDnKkQk=)
2: kN8hpyULYXpGgg0l4UycfzoLM_8.roa (hash: p1hs9U044hjwHEauuvzM9PUu0iEmpC7Sk80cjjzAgHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:29:45:0a:ff:d2:c5:11:15:e6:27:68:a6:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=2572c6ab7dcab8c4a6a479750e804c9b8a207ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:e6:4b:13:cd:db:86:bb:42:d2:c2:a5:58:
63:09:d8:c0:a3:7c:aa:45:b2:51:2a:ae:21:9b:4f:
f4:e1:eb:88:44:1e:f0:22:c5:9c:6d:95:82:6d:11:
78:e1:70:76:a3:eb:fa:ad:e6:d2:61:40:b8:04:67:
37:c4:9a:5d:de:a7:b9:1d:06:f2:9a:39:ba:42:f9:
72:e6:53:4f:10:ef:e2:b1:23:f8:e5:2b:bf:ba:03:
b1:2f:f0:c2:ce:54:83:9b:fe:b3:97:05:21:6e:24:
aa:a3:ac:fd:27:3e:63:12:96:e0:e0:dc:1d:23:7c:
ac:3c:ef:cb:e7:4a:f3:cc:6c:ad:3e:c5:0c:6a:50:
58:3e:84:f2:1d:2d:b2:d7:5b:ed:fe:9e:65:ae:c3:
ec:fc:d9:c0:4a:ca:4e:52:13:33:d8:f9:50:b3:d6:
b1:b4:c7:df:b8:a6:13:ba:2f:f8:8d:ce:5b:90:28:
a1:11:d3:bc:1d:ab:d7:43:f4:6f:17:77:66:47:40:
86:76:f0:96:9f:2c:a3:ef:cc:46:ba:ac:92:70:23:
c3:2b:87:4b:d1:71:7a:2a:63:9b:e1:94:f9:8e:27:
66:d3:6a:11:43:36:6c:25:8c:e3:e1:24:5a:12:31:
52:88:b5:f2:2b:42:d9:8a:1d:3e:08:e2:cb:91:6d:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:C6:AB:7D:CA:B8:C4:A6:A4:79:75:0E:80:4C:9B:8A:20:7E:C4
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:b2:a3:0c:6e:7b:d0:66:b9:61:29:08:86:d3:3d:81:40:
8f:69:f3:73:50:b9:53:c6:2b:6e:ba:4b:62:02:36:ba:13:0c:
4c:99:ad:fb:e4:7e:a8:c6:3d:94:2d:5e:e8:1c:ad:6a:1c:d5:
af:78:a8:c4:1f:d1:d1:74:74:03:4e:80:64:72:91:ed:dd:78:
53:11:63:08:09:5f:8b:35:e7:0e:8a:8b:c8:a3:57:02:78:7c:
a0:1a:97:6a:e9:37:fc:b6:ad:73:c0:6b:2c:81:62:e2:6d:06:
57:1b:96:ab:75:c4:48:41:1e:7a:94:d4:54:85:5f:d8:c7:02:
62:67:4d:b7:25:b3:dd:76:1b:2e:89:c9:c0:c5:29:99:63:67:
47:45:d2:57:6e:be:42:74:8d:2f:30:cb:41:88:dd:47:a2:e3:
35:a2:cd:9c:68:d9:33:7e:b4:34:5e:c5:b6:7f:c8:fb:bb:be:
65:4e:f4:90:df:7e:35:21:00:3a:9f:ce:71:0d:c5:06:d8:a3:
16:d5:06:58:da:1e:b9:65:3d:bb:ea:de:16:88:e9:2a:03:ed:
41:37:99:32:6b:45:ff:5a:a1:0b:49:b0:77:8e:4e:c3:6e:f2:
92:a0:24:f7:9f:26:14:37:7c:46:13:e5:31:cb:76:4d:51:bb:
25:cc:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:06 2026 by rpki-client