Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: KqrAkTAiHClQRmIhl1/1kuoj8DZ725EqG357m+wtIWI=
Subject key identifier: 94:6A:32:FF:25:15:FF:2A:68:CE:4F:45:A9:7F:F8:95:09:FC:25:3A
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019CAF1168EE1A90D5C911BECC290992CE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0CD3
Signing time: Mon 02 Mar 2026 15:01:19 +0000
Manifest this update: Mon 02 Mar 2026 15:01:19 +0000
Manifest next update: Tue 03 Mar 2026 15:01:19 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: gZdalGnho5HDA5EbSVZNJ4Xg3jybshXVBled2txTrt8=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:68:ee:1a:90:d5:c9:11:be:cc:29:09:92:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Mar 2 15:01:19 2026 GMT
Not After : Mar 3 15:01:19 2026 GMT
Subject: CN=946a32ff2515ff2a68ce4f45a97ff89509fc253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:14:e0:35:82:fb:ff:65:ed:80:5d:68:e3:
8a:7b:7f:4f:3a:14:7c:e8:fd:2c:58:0d:e7:87:e9:
00:06:c4:38:24:bd:36:93:0f:ce:3e:23:d5:98:01:
3d:e2:4a:3c:6d:7d:14:84:db:64:4e:82:7d:67:5b:
32:86:e2:d7:ca:40:79:7e:ca:02:6a:fc:d0:e3:ec:
dc:0e:35:48:db:c4:76:c5:26:b8:29:f3:1d:41:07:
7b:53:08:8c:2d:c8:1b:1e:e1:ff:bd:72:aa:09:be:
89:fe:58:9d:53:c6:10:47:e5:b2:1b:a9:dc:35:1b:
01:cd:ab:cb:88:c7:25:2c:06:b7:04:3c:78:d9:45:
15:de:2b:52:cc:77:4e:02:2d:81:fc:17:d0:7d:75:
ad:ee:ef:b2:02:d6:2c:8c:a5:13:1e:7c:b5:46:51:
9a:d1:48:83:f1:01:e8:78:77:8f:13:9f:04:b5:0e:
89:9b:10:06:a6:e5:72:e3:2b:75:fc:8d:72:33:24:
99:6c:53:2c:4a:73:d9:95:04:4c:a9:51:58:33:4a:
eb:f2:5f:37:e6:d5:2c:fa:86:72:73:c4:48:60:1f:
05:83:89:53:56:a5:c4:43:2c:93:25:f2:44:d7:e2:
50:48:92:36:44:f1:36:14:d2:bf:47:48:06:78:3c:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:32:FF:25:15:FF:2A:68:CE:4F:45:A9:7F:F8:95:09:FC:25:3A
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:ce:c0:f5:4b:ad:da:88:6b:f2:d9:87:7c:d2:47:c0:38:
a3:98:4d:34:62:2b:c6:38:85:17:02:7f:21:88:c0:01:9a:bb:
90:65:54:b2:0c:d6:f8:1a:b4:a4:95:7e:d4:10:a0:30:0b:df:
a4:f7:77:6c:bc:45:a7:fc:c0:6b:3d:98:80:e8:e4:f2:79:2e:
df:01:c5:54:dc:88:07:8e:af:d0:11:00:cc:5f:d2:d3:7e:d7:
75:67:ac:81:d1:a5:d1:56:a3:26:9c:53:de:11:89:b6:37:f9:
49:8d:38:ab:7e:58:2d:00:dd:5b:7f:fc:ec:7f:b7:f8:c1:5e:
09:73:73:2c:62:28:38:93:26:96:8b:2a:ab:19:fa:d0:ed:70:
c8:cd:cb:64:6a:54:2c:4d:69:b0:87:f8:6d:67:d0:ca:1e:05:
56:9f:aa:e7:22:0c:12:ea:ee:d4:79:b4:34:75:9b:5a:52:d0:
7d:3b:c1:4a:b2:34:dc:4f:d1:e7:ca:c6:bd:aa:db:70:aa:68:
a1:20:21:9c:ae:e7:29:dc:37:10:e7:52:3d:65:d3:02:4a:4b:
be:a2:e8:a7:bb:b9:bf:74:48:0c:72:f1:f8:74:80:cc:eb:c7:
a3:b0:af:5e:6d:c6:ef:98:9d:35:4f:3e:66:48:d3:bd:86:6f:
e5:07:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:45 2026 by rpki-client