Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: /kIey7IwiD4jbYqkfJUSA0UpqrKjhwi48ks/NGLIM2U=
Subject key identifier: 22:C9:6F:26:20:F3:1A:6A:B0:E1:D2:79:E5:09:1D:8E:D6:87:B5:B4
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019CAE35C5246418843E46B76BB2B5A3BC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:25 +0000
Manifest this update: Mon 02 Mar 2026 11:01:25 +0000
Manifest next update: Tue 03 Mar 2026 11:01:25 +0000
Files and hashes: 1: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: lzg51lxSBDj2FVsyFkh8mNTOM7iVk9o4pRI9xIOrqeA=)
2: dbEVVOSGmAB9BVhX1SxdhAa54XM.roa (hash: PzFQiBYckhIajBueW8NDRUzWLgElYVTtb1/iAMzZ3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c5:24:64:18:84:3e:46:b7:6b:b2:b5:a3:bc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Mar 2 11:01:25 2026 GMT
Not After : Mar 3 11:01:25 2026 GMT
Subject: CN=22c96f2620f31a6ab0e1d279e5091d8ed687b5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:ba:09:26:93:90:1c:ca:de:ff:1a:61:b7:
31:73:b7:5b:62:25:55:e3:37:3b:b2:13:e1:8c:e4:
60:88:90:e1:58:b6:e2:18:f8:d3:75:5e:8c:b7:1c:
0f:13:ee:c2:ad:96:3c:70:6a:00:23:c7:23:44:7b:
e0:a3:1b:f9:a6:83:fb:37:7e:55:7a:f2:58:e2:12:
d8:d5:f9:4f:0a:2f:3e:fc:9e:43:85:87:d5:96:d3:
5a:48:3a:82:c2:1c:fb:3c:00:61:b8:4b:b1:b0:7d:
d0:84:88:ec:3d:67:5f:e6:65:ef:92:f6:2f:71:40:
cb:8a:63:e5:80:94:e3:0b:36:2b:06:7e:1c:94:6d:
aa:3d:f3:fd:61:1e:7a:f8:25:14:28:c7:82:05:b1:
b8:79:ad:b3:70:68:48:ca:c3:0f:21:1b:54:5f:a6:
65:73:ed:1a:18:cf:b4:47:d9:35:b2:8b:9f:5b:0c:
cb:12:14:db:6a:37:32:d5:c6:d7:cf:d5:f6:99:84:
19:45:b8:b7:8c:ef:77:f0:aa:d0:ab:ea:d1:6d:e0:
81:39:5a:85:c8:fa:cf:86:bd:8b:b1:a7:72:50:be:
c3:1b:de:ec:7d:c9:17:79:b6:fc:12:bb:05:f7:99:
87:8f:94:98:55:67:c6:04:ab:46:c9:a9:5f:a9:43:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:6F:26:20:F3:1A:6A:B0:E1:D2:79:E5:09:1D:8E:D6:87:B5:B4
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:32:7b:8b:7f:7e:ae:c7:00:2c:49:a7:78:4f:7d:7b:d2:
c8:31:d7:e4:60:4b:b2:56:0c:5e:6c:f4:ce:55:03:ad:3c:3e:
17:c5:f2:38:d8:df:de:85:b7:d3:c9:bd:4a:b3:b9:46:e0:d5:
13:47:89:d9:ee:3f:49:ac:46:b3:c4:af:3d:7a:f9:24:c9:01:
81:ab:0c:41:c3:10:aa:ae:5e:18:af:5a:ff:aa:52:9d:bf:52:
67:28:6f:07:14:95:ad:3a:8d:91:40:d5:ae:bc:f6:1c:3d:7f:
e0:63:9a:1c:79:2c:ec:82:a1:04:38:35:44:be:3d:6a:4e:15:
08:38:97:5b:fa:91:80:5f:8c:06:26:2a:27:04:20:61:61:50:
44:9e:0e:bd:a9:e2:c1:90:1c:8a:f7:7d:e7:82:8e:93:aa:f1:
e4:5c:d2:05:89:72:f3:8c:9e:a8:4b:94:87:11:b4:cd:92:0b:
0d:62:e6:20:0e:2e:38:5f:a9:f2:d8:05:e1:c8:ca:59:8b:54:
0d:d3:27:16:d5:f0:f6:4f:b6:80:c2:95:81:a8:14:d9:b4:42:
41:71:8f:a4:8f:71:11:e9:e8:3d:f0:1c:e4:84:32:54:3f:cc:
75:75:55:7d:9e:04:f0:68:ae:25:37:5d:47:4a:1a:1d:f4:6d:
ae:07:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:02 2026 by rpki-client