Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: g9uUIN6s7W8Wi0xptV3ZMSjWXAw4b5okBdHRZgsDdSs=
Subject key identifier: 20:AA:39:4E:33:8E:F3:82:12:9D:9F:BD:F6:54:17:0D:B4:EC:24:60
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 019CAC7E415F4F72348FE29381048E6E40F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0940
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: Enjry43HldKOccIAc+x/rlvxZd+8GWFRc+IZXpUe2XI=)
2: zIBznsYExuvGAYxMF0vlek62MTA.roa (hash: HZnWy7k6mRkdORmyH/fBqEuQQJtdSt6XxYg73qEplO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:41:5f:4f:72:34:8f:e2:93:81:04:8e:6e:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=20aa394e338ef382129d9fbdf654170db4ec2460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:b6:2f:85:66:04:a4:26:c8:58:f2:14:e6:
92:c6:22:ed:91:16:91:ad:5f:55:f1:39:ea:4c:72:
00:d0:c2:26:81:70:30:39:d1:80:2d:eb:f8:f1:06:
bf:96:f7:42:c9:8f:1f:5d:37:8d:58:3b:f1:16:33:
5e:c2:34:e6:be:26:72:37:12:3e:19:33:5f:ea:ec:
64:aa:a9:b9:bc:c0:86:d8:63:c0:83:f9:b1:25:f3:
39:4e:67:96:67:01:0a:14:e9:ea:0b:d6:67:a1:3d:
4a:2f:03:6e:90:32:d8:35:c3:a3:e8:a9:ce:21:05:
ed:71:b4:18:0d:a3:9e:77:73:1c:f7:1d:81:59:1f:
a3:64:cc:15:83:7e:21:04:3e:e9:e2:77:70:f5:00:
d3:63:bd:76:05:b1:62:47:aa:a8:05:a3:4b:36:38:
3a:6d:e4:20:c0:75:7d:1a:fc:10:f6:36:71:9d:9e:
ae:8f:d3:71:4b:41:d8:2c:b0:33:fa:1a:b8:d3:5c:
49:50:a2:62:58:e4:09:83:47:b3:a6:24:cf:5d:f1:
9e:f0:c5:e8:8c:da:bd:cc:61:91:fa:90:48:ff:b7:
86:b4:c5:d7:84:10:15:77:78:0e:4e:4d:ba:7b:be:
82:f1:6a:60:a6:c9:99:5c:8d:ab:60:8d:a3:89:a4:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:39:4E:33:8E:F3:82:12:9D:9F:BD:F6:54:17:0D:B4:EC:24:60
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4a:01:2d:a2:65:d8:29:67:d8:92:82:7f:b2:45:44:cc:2c:
ac:a9:9c:f0:77:b5:02:d0:22:70:93:6b:df:9c:8f:e8:95:f2:
de:95:9d:e1:5d:ac:51:d2:62:61:a6:f1:15:27:a3:36:4f:03:
2c:dc:05:ed:44:48:c3:75:c9:3a:3f:2d:04:c5:5a:97:54:b4:
bb:ee:a0:0f:8a:f2:53:34:f8:d4:22:c1:5f:60:39:19:74:f7:
cf:05:a1:db:aa:99:25:cf:03:df:ba:7c:09:c8:db:39:de:11:
00:73:70:48:74:49:35:6c:4a:7a:f8:45:7c:01:40:58:29:31:
b9:65:55:a9:0f:14:2c:94:d9:08:26:8f:c4:3d:8a:1d:37:73:
ab:08:27:b2:35:ae:53:3a:32:0e:6f:e0:92:3c:76:d5:dd:c2:
e0:f8:c0:ed:68:1c:cd:9a:e4:0e:17:c7:84:8f:68:9e:7d:46:
58:31:74:f6:98:c8:33:6a:09:d4:c6:ce:b2:ca:4d:32:89:4c:
c6:cc:ef:41:fe:b6:04:bc:8c:b0:0d:4c:14:c8:c4:88:20:99:
2c:1b:b0:e9:40:13:60:67:cc:40:fb:d2:80:6c:f0:c0:14:83:
4f:a1:ad:2f:9b:dd:32:09:2c:a7:50:ca:3a:2f:8b:1b:23:ad:
80:e7:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:56 2026 by rpki-client