Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
File: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft (raw, json)
Hash identifier: bOJvZud9ITxssOE6C8kzEN1i3OyaqmKa03ISsAvw3Ak=
Subject key identifier: E3:24:27:B8:43:19:76:43:BD:11:09:89:ED:F8:5A:13:65:8E:CE:6F
Authority key identifier: 62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
Certificate issuer: /CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Certificate serial: 019CA90EC5DC00652F21990AD2FD80D5ACFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
Manifest number: 24
Signing time: Sun 01 Mar 2026 11:00:43 +0000
Manifest this update: Sun 01 Mar 2026 11:00:43 +0000
Manifest next update: Mon 02 Mar 2026 11:00:43 +0000
Files and hashes: 1: YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl (hash: 2hQER/FZ0phvFLmpgFKNLgDE1SAnBDn4vZVR+1fgEwY=)
2: qLtdjMaYYUHUKpxEyfvu-Lg0bgk.asa (hash: J2X18n3waDdkd9hEMyPEI6UzN5Mlccq2mc0wjMIT8Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:c5:dc:00:65:2f:21:99:0a:d2:fd:80:d5:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623c52ccdae5629fcf70c191dbfea3ab6d549744
Validity
Not Before: Mar 1 11:00:43 2026 GMT
Not After : Mar 2 11:00:43 2026 GMT
Subject: CN=e32427b843197643bd110989edf85a13658ece6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:11:d0:70:c2:67:de:c4:bd:50:85:31:7a:
b5:00:30:0c:a0:64:12:c6:14:7d:06:95:67:8e:8f:
7e:18:9a:05:4f:1a:34:25:14:d9:1f:6b:36:09:a7:
d0:a5:87:85:b0:0d:e7:30:ac:6e:c6:22:55:03:a5:
cd:d8:f7:5d:1b:21:7b:6a:85:a5:0e:55:71:1b:43:
3a:9a:49:02:b0:c3:98:4d:cd:4b:3e:91:ae:e3:39:
73:73:a3:a8:08:1f:6d:3e:4a:c5:35:72:87:0b:5f:
37:e1:6b:a8:80:ad:3b:5b:fa:92:48:2c:75:38:66:
90:fb:a0:69:bb:00:2f:b5:ec:cf:48:ee:19:ca:a0:
54:f2:e8:59:f2:73:40:f7:69:05:3a:bc:18:1d:8b:
4c:d0:86:b3:77:73:2d:30:42:5c:28:f2:49:72:98:
19:dd:67:f8:92:b1:19:4c:0c:0d:93:e1:95:f6:b4:
0b:58:1f:94:da:c1:fb:1c:08:fb:6c:96:b4:fe:57:
a1:e6:78:c9:78:c0:71:5b:03:00:74:d5:d7:4b:85:
b6:57:4f:d6:da:73:9c:37:dc:9d:17:32:5c:67:bb:
fb:2c:9c:a4:b0:ee:39:0e:9d:4b:d7:14:dd:d1:98:
13:f4:48:2a:6d:ed:54:fe:aa:07:16:44:87:8f:2e:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:27:B8:43:19:76:43:BD:11:09:89:ED:F8:5A:13:65:8E:CE:6F
X509v3 Authority Key Identifier:
keyid:62:3C:52:CC:DA:E5:62:9F:CF:70:C1:91:DB:FE:A3:AB:6D:54:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/036abd-ecde-4e3e-a764-3b2c07c4a3a9/1/YjxSzNrlYp_PcMGR2_6jq21Ul0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4d:6c:f9:8b:f9:cd:67:16:5b:6f:3a:43:6c:76:a9:75:8c:
ba:f1:82:ed:dd:ab:af:dc:2e:51:a0:94:cd:16:68:a4:aa:23:
12:5c:3f:d7:4b:72:22:2b:d0:c3:64:80:08:cc:47:7a:9f:ad:
af:3e:4b:44:b8:e9:58:fa:19:f3:ce:7a:23:7e:5d:8b:c8:a2:
04:48:11:f0:fa:68:b1:b0:6d:22:8c:55:97:a2:ff:df:80:59:
86:ff:2c:9a:00:35:c5:0a:e3:7c:bf:90:79:53:ce:92:13:88:
f7:4e:c1:92:d9:55:40:9a:ea:76:96:4c:7c:7a:dd:d4:16:f5:
87:2b:ed:c4:62:74:2b:ab:1c:56:f9:dc:af:b5:cc:dc:43:aa:
4f:f2:f1:04:14:d0:8f:c0:7e:ec:ef:e3:71:d0:d4:14:8e:b8:
79:41:e6:ec:b9:34:a4:ee:41:6e:57:da:f0:b8:c4:b4:6a:f5:
80:3a:5f:fe:5e:e9:dc:4f:5f:5a:28:fe:91:97:a8:17:21:5d:
25:14:1a:9b:7d:c9:61:01:06:99:17:88:d3:6e:02:a8:2a:15:
4e:1f:78:57:7d:4f:95:8f:96:a4:72:ec:56:43:0e:aa:86:ef:
da:d6:92:44:e1:00:a2:88:21:e8:32:c5:cd:22:41:60:ea:04:
a9:28:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:10 2026 by rpki-client