Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: 3cc3rKt9d+8YPecGXf+8ft4T8vVgFe2tGTSxHteB6RU=
Subject key identifier: 15:C4:B8:8F:E7:43:EC:69:6F:79:BE:84:BA:47:A0:D1:E8:8B:2E:9F
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 019D9C99DD9F2DA89F5C07382453083763DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0FD6
Signing time: Fri 17 Apr 2026 18:00:22 +0000
Manifest this update: Fri 17 Apr 2026 18:00:22 +0000
Manifest next update: Sat 18 Apr 2026 18:00:22 +0000
Files and hashes: 1: PItnMttIkdeuTPXavmvPG7wEEmg.roa (hash: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk=)
2: Y5fNbXlu-919bEGmzzCTqLKe4UE.roa (hash: Xsn3mIF6IxJP4Pj8lk0nwBSrm5qnIHW3nv1qCBDI+Z4=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: mhRtIIdGOgb0BKuslTE+B1zdkFO2iltwAER73hO2M+I=)
4: iReKhZ_-E04pzg8ir_i-KAVJTug.roa (hash: JcLEmoPP4jSyDJ+Og5UHxUBX28l4cJMP5KxpG/1AnsE=)
5: nUQG3vVMD7WFpDWiG0W1IymBVlU.roa (hash: EHlmhx+RyBOq9teHa0Af8FNOADjMaSQN2EK+hlsZ4oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:dd:9f:2d:a8:9f:5c:07:38:24:53:08:37:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Apr 17 18:00:22 2026 GMT
Not After : Apr 18 18:00:22 2026 GMT
Subject: CN=15c4b88fe743ec696f79be84ba47a0d1e88b2e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:b7:d3:f3:81:fc:7c:ed:e9:30:02:6d:c7:
45:2c:58:7f:83:45:b8:75:5b:f2:ee:68:92:fe:2f:
dc:e3:2d:4b:bb:df:d3:6b:50:14:1d:92:15:be:f5:
7d:be:d9:09:ed:02:aa:d4:c7:3a:c5:ae:3a:24:4b:
26:23:a5:ff:fb:1a:e1:39:82:a4:58:55:1f:42:32:
18:7b:8a:42:d6:b7:e5:dc:bd:37:28:03:21:b3:55:
31:a6:86:ba:f6:35:34:4e:44:68:e3:89:bb:0c:f5:
b5:20:f3:c1:f1:14:ab:ba:da:84:30:bb:0b:81:5c:
8d:d0:54:59:7d:1a:de:d4:e4:3e:7d:25:ca:9a:9f:
fb:4b:b2:09:55:11:5e:d7:70:0c:cc:15:65:9e:84:
f5:11:4f:b4:8e:4d:f3:13:d3:ed:c7:52:f8:75:91:
e9:af:a9:95:83:2d:3d:4f:c5:e2:aa:1c:81:0c:0a:
b9:c9:f9:02:57:09:f3:9c:94:76:93:ac:e1:ea:61:
61:14:a9:e9:97:07:7f:ad:76:a1:37:62:96:80:9a:
e5:ed:15:59:b1:7a:f5:e9:03:ad:d9:03:65:a0:8c:
05:e4:f1:37:66:c9:04:cc:08:d2:c4:fd:c8:d4:8b:
52:7d:fb:08:a9:4d:b5:c4:d5:d9:7a:3b:75:7b:27:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:B8:8F:E7:43:EC:69:6F:79:BE:84:BA:47:A0:D1:E8:8B:2E:9F
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d2:c8:45:37:6c:9d:d0:e2:35:48:a2:3f:31:73:81:11:ba:
35:bd:40:e5:0d:ec:64:50:75:5b:21:a2:45:26:83:44:37:1b:
8a:63:c5:6e:b2:ae:6a:58:e1:fe:59:cb:5f:25:ea:d5:bd:f3:
41:e0:7a:1a:dd:88:16:ff:e9:b1:1a:83:1f:ee:cb:1d:40:84:
f2:f5:11:4d:ab:f2:d0:04:2c:c0:70:7e:9d:35:b4:94:14:94:
92:d3:77:7a:48:04:85:1a:34:81:f4:be:8c:d9:34:b6:67:04:
cb:72:89:23:df:41:22:88:7c:53:5b:77:09:ba:3e:cd:68:3e:
a9:88:d0:23:99:a9:65:02:c7:cf:b0:c6:a5:20:4f:6e:fa:d1:
34:36:9b:3d:27:4b:c6:2a:b5:39:fa:50:86:b4:ea:25:be:ee:
f8:ca:4a:70:22:e5:4a:03:76:47:ce:f6:f1:d8:3b:9b:1b:e9:
46:8d:2c:47:65:a4:76:ca:2b:60:63:9f:6a:f8:36:99:d4:d2:
6c:22:8b:2c:23:ca:13:28:f5:8e:21:43:78:9c:01:13:44:48:
f4:ba:0f:4c:08:13:c5:f1:67:5c:4a:6b:f3:cc:20:e5:3b:36:
fd:85:34:cb:21:a2:df:aa:f3:4c:88:ac:7c:a1:c7:87:b4:04:
c6:11:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:20 2026 by rpki-client