Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: 8naXVEEm9+tP/1yVjJdCZqMRvoqiEuB/8QoM8KyTuCQ=
Subject key identifier: F3:44:FF:BE:9B:8F:E9:41:BA:7A:CD:3F:93:4A:02:8B:3B:E4:2D:14
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019CADC84CB021EB57E7718FD003C85509E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 09:01:51 +0000
Manifest this update: Mon 02 Mar 2026 09:01:51 +0000
Manifest next update: Tue 03 Mar 2026 09:01:51 +0000
Files and hashes: 1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: fRpUTRX99g6FijW0Ydy5FPDr2d6B3iH8pB1O1S+Y+s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:4c:b0:21:eb:57:e7:71:8f:d0:03:c8:55:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Mar 2 09:01:51 2026 GMT
Not After : Mar 3 09:01:51 2026 GMT
Subject: CN=f344ffbe9b8fe941ba7acd3f934a028b3be42d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:f4:7f:9b:41:f5:dc:a6:da:17:1c:1a:b1:
8c:aa:85:28:43:33:15:aa:71:9d:97:e8:46:a1:00:
f7:bb:db:7b:12:fd:4f:3b:60:fa:fb:36:ec:67:96:
fc:7e:49:c8:8e:79:d0:22:9b:89:25:8d:ec:2c:77:
7f:0d:1f:51:ff:44:3e:5d:1f:de:c3:c9:60:2e:cb:
7e:90:72:8f:40:32:38:e9:6d:3b:67:0b:57:1a:31:
23:73:88:0f:74:3a:56:2a:d0:0e:eb:7e:2d:b5:b0:
e0:d0:e0:ad:bc:ac:3f:0b:94:df:d8:4a:81:6c:fa:
9c:39:e4:87:40:ab:e4:77:53:4d:86:14:4e:9b:9b:
12:48:b7:cf:0a:1e:cb:0e:76:c3:ce:92:9d:f9:ec:
82:d8:57:ce:27:45:55:fd:13:71:b5:fb:57:d8:d9:
0c:ce:dc:90:6a:59:21:8d:35:06:92:7b:8c:46:32:
a7:da:51:eb:12:52:82:a7:65:bd:31:a9:cb:3b:00:
13:22:34:1a:25:39:a5:bc:ac:0d:36:65:bf:ab:ea:
e3:9f:32:10:30:e0:8c:54:98:62:68:08:fc:9d:60:
26:68:14:bb:9e:22:6f:94:9f:07:f8:a8:51:62:13:
ab:22:0b:57:0b:74:77:8c:c9:b6:af:1f:b9:0a:e8:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:FF:BE:9B:8F:E9:41:BA:7A:CD:3F:93:4A:02:8B:3B:E4:2D:14
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:d8:71:c8:2e:d3:1b:3b:de:83:b8:b8:82:2a:4f:21:57:
cf:8f:d4:5f:ce:ea:1d:f8:ed:0c:a7:95:fc:40:ba:e2:9e:27:
e8:c4:21:e8:17:67:51:9d:39:a0:8b:f7:e4:80:ca:b9:f9:2f:
0e:cd:a0:e5:36:cb:91:44:e3:4e:cb:a5:2c:9e:ac:9f:af:89:
1d:f8:c7:3c:18:83:e6:92:0c:fb:e0:e8:6b:2a:75:66:53:8f:
7e:3c:9c:6e:1c:9e:b4:b4:9a:ca:67:9e:6e:9e:26:7a:bc:ee:
20:66:bc:e1:4c:b0:86:60:d5:8b:40:c1:51:ac:f4:4c:d3:e0:
f6:27:f1:14:7c:5c:b7:43:93:0a:57:62:18:7f:c6:82:68:1d:
55:70:9f:21:3d:3a:c2:f3:30:a9:4d:db:76:0b:1f:b3:2a:42:
82:6e:53:a5:0f:ab:32:b3:1f:00:c0:3c:16:a6:51:0d:88:a1:
53:a6:3b:c9:65:37:aa:f6:4e:15:4d:37:42:54:b9:e4:dc:4b:
93:49:46:43:26:f6:f7:5a:45:69:e0:ec:a9:01:53:be:25:be:
27:3c:11:1d:62:0b:29:d5:4c:0e:25:e6:86:d2:b4:22:50:ca:
c6:06:31:b0:14:c4:70:5d:ab:e4:23:4a:f1:f7:df:1c:1e:69:
c2:6c:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:12 2026 by rpki-client