Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: 9xJOGyMDtHqCc9OakbFlqrdYe54XXvEzkdsOn06CuSo=
Subject key identifier: 95:EA:62:95:90:36:A9:83:A6:FB:56:51:A0:17:8C:B0:E5:1A:BF:D2
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019CABA2647CAE3A5C83A00642294A586F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 03EA
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: ZzDGY+GKubGglbQVjeoidvZzPvliCH6+nXt2/Z62z6U=)
2: qTChY0Kq_uA6L6Hi5pDRavsPyQk.roa (hash: UhoY5Jxel6+XTofYPqKQ5kLj+eG01D/abRAxNfVn9cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:64:7c:ae:3a:5c:83:a0:06:42:29:4a:58:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=95ea62959036a983a6fb5651a0178cb0e51abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:32:ba:76:04:b9:7b:ec:1b:1f:95:12:c4:
f4:77:c7:86:12:a0:fd:f7:97:46:42:45:52:ea:31:
1a:ba:67:09:91:21:6b:54:d2:08:64:54:c9:88:41:
85:69:b2:f5:7f:5c:ff:c9:f6:97:84:6f:aa:fe:c3:
58:01:f2:1f:a6:8b:b3:f8:95:b4:8a:10:96:10:ab:
26:8f:ef:cf:97:0d:1f:ca:b9:56:69:62:5e:f1:57:
36:1a:bd:d4:31:bf:38:2f:7d:d2:7e:bd:3a:c2:0d:
6f:26:76:de:c9:75:7a:00:b8:71:49:79:25:97:ab:
cf:c9:86:75:03:02:e1:f6:67:06:34:59:fa:72:b3:
49:35:09:8f:25:2c:b0:7e:2b:1e:7f:f9:ce:a6:3d:
0c:e8:eb:97:d9:1f:e6:e5:82:60:f3:4f:3d:01:29:
2e:95:cf:bc:e8:60:6a:eb:fa:74:28:65:cc:54:5f:
65:7d:95:f3:fd:f3:6b:b8:86:b9:af:de:2c:43:4d:
d9:a5:c9:43:50:8b:dd:4c:ab:36:4e:d7:37:ba:19:
e6:14:a5:af:d9:18:9b:f3:f7:f6:62:02:d0:96:6c:
c8:eb:df:e9:78:cb:ee:38:20:67:df:e3:eb:bd:3e:
7c:1a:ca:08:e0:7c:30:1d:57:45:da:8e:60:10:63:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:62:95:90:36:A9:83:A6:FB:56:51:A0:17:8C:B0:E5:1A:BF:D2
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:4c:10:90:73:b4:d9:d3:1e:a1:cf:77:dd:2e:b8:ce:40:
bf:18:bd:9f:35:01:61:05:07:92:09:3f:a9:6b:16:91:ab:e9:
7d:87:f0:63:9e:57:a8:6f:e6:08:09:a7:b9:d8:0a:b4:e1:0c:
49:ab:83:98:a3:0e:82:96:97:66:38:d9:83:9c:7b:8d:2e:56:
dd:24:7e:d9:3a:97:2f:b9:1c:73:bb:87:ce:1e:22:65:05:d3:
00:09:98:cc:e6:c9:77:c1:46:cc:3c:7c:01:6a:62:99:97:4a:
3a:31:f5:2b:81:eb:42:4b:22:09:a2:07:c1:a7:38:4c:4e:ba:
be:60:ca:ba:6d:c2:2d:30:d7:1c:f3:a5:c3:1b:09:84:21:7e:
f0:02:74:e3:e0:c5:95:33:97:f0:4d:45:31:c5:1d:6b:9e:6c:
76:8e:17:d2:8f:8d:e7:30:8d:db:65:fd:4b:58:e1:b6:ce:13:
39:d1:5f:28:45:eb:c5:23:48:cf:5f:55:b1:e1:c1:96:1e:28:
bf:63:5e:68:c7:a9:87:0e:1b:82:bc:44:17:74:96:de:25:87:
7d:33:f9:90:e7:4e:2c:b7:25:85:a1:d9:36:56:0b:43:96:81:
ca:21:ad:a3:47:ef:30:f8:38:ce:e3:26:fa:14:32:ea:93:38:
63:08:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:35 2026 by rpki-client