Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier: wMCiBlUb/27msLG+RgYMw2sa4+zeugWS9+6yYS2YpgE=
Subject key identifier: 49:E5:95:52:55:49:B0:56:67:A8:7B:71:38:EE:B2:D9:25:A0:9B:B7
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer: /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial: 019D9E520550C9AACBCBC63E03A47EA1765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number: A3
Signing time: Sat 18 Apr 2026 02:01:08 +0000
Manifest this update: Sat 18 Apr 2026 02:01:08 +0000
Manifest next update: Sun 19 Apr 2026 02:01:08 +0000
Files and hashes: 1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: bH4h2z48G3RWtUkU7WJ9KLe1iKw80E1CbsOAk63oWYo=)
2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:52:05:50:c9:aa:cb:cb:c6:3e:03:a4:7e:a1:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Validity
Not Before: Apr 18 02:01:08 2026 GMT
Not After : Apr 19 02:01:08 2026 GMT
Subject: CN=49e595525549b05667a87b7138eeb2d925a09bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:76:44:0e:a7:a2:76:49:c6:b0:71:31:81:
79:62:9e:5b:49:c5:87:be:69:87:34:cb:43:cd:90:
cc:fa:45:f5:db:b7:04:dc:92:4f:d1:a1:c4:e9:2c:
9a:9a:14:86:30:16:64:78:e9:60:5c:c8:6e:14:8c:
94:86:68:b3:78:c5:9c:5a:82:de:38:bb:de:a9:32:
80:dd:d7:fa:91:21:28:b8:58:0a:b6:9a:cb:12:0c:
cd:e8:46:bf:bc:bf:89:a2:d9:08:94:11:49:a0:93:
69:b5:27:4c:e5:a3:51:0e:6e:20:7a:53:63:8b:e3:
30:3e:d2:b2:6e:88:47:78:f6:0f:2e:1e:3d:bd:c0:
78:3f:bc:94:a6:f3:be:cb:d4:6c:c1:2d:4e:4b:39:
32:fc:0e:76:e0:17:87:54:d4:e9:67:ad:45:68:fb:
72:be:29:24:ab:2b:60:a9:17:34:d9:2a:a2:e3:0b:
db:69:ec:9e:19:38:41:64:e3:7f:4e:f9:93:f7:d8:
c7:f7:b0:54:b3:28:54:c0:85:e3:e1:4d:80:47:39:
be:77:2d:a7:3d:9f:8d:d1:f1:03:49:c2:fa:19:71:
54:1f:c7:d3:05:d2:37:a0:70:9c:88:1f:76:34:3e:
28:12:ce:7d:e8:18:09:77:ad:b3:02:36:3c:2a:ab:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:95:52:55:49:B0:56:67:A8:7B:71:38:EE:B2:D9:25:A0:9B:B7
X509v3 Authority Key Identifier:
keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:0d:4e:ce:02:c7:b5:eb:e6:32:30:27:45:04:36:da:b1:
ce:47:eb:13:2c:a1:36:d6:0b:39:b3:15:53:d8:a3:d6:e2:2c:
33:a3:b8:18:08:22:c7:85:f5:fa:97:f3:e3:02:a9:be:7f:33:
51:e5:0c:84:f1:6d:f6:05:32:78:18:11:ee:b1:8f:08:07:c4:
e0:4b:8b:cb:6c:a9:8a:fa:9e:50:85:ec:cd:2e:d9:41:57:34:
f4:ce:ad:67:44:0c:4d:af:d2:be:89:26:19:d8:78:37:51:3c:
32:44:f6:0d:17:8c:83:c3:1c:54:b7:f3:ac:5f:b3:98:e1:30:
71:87:d3:4b:80:07:4d:f2:ae:08:13:25:d7:3c:40:b2:8a:3b:
70:7e:67:64:9f:b2:35:87:43:9c:f8:65:15:5b:11:bb:9c:fe:
45:b7:eb:2d:5c:cd:b2:75:55:f9:b7:90:af:b2:c4:fa:32:ef:
39:e7:24:7e:05:97:d6:fb:1d:10:80:f8:80:df:dc:b5:af:4a:
22:2a:56:46:48:ff:08:29:0d:14:c5:1a:b5:95:b5:09:81:5c:
27:ee:61:cb:34:79:c9:e1:f6:53:25:13:d3:1d:99:a9:03:ac:
22:3f:b1:ed:f7:1f:5a:e1:a4:ba:95:2d:63:45:27:4e:49:bc:
c1:8a:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:10 2026 by rpki-client