Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: poJhNb3X3h/J97fVGdFUawnU1zXee8tf/SrQd0r4yvM=
Subject key identifier: 38:DB:0C:B7:70:C5:61:C7:6F:A1:76:30:CB:F4:08:82:45:76:CC:BB
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019CABA268A8B95C5EF2C28411C5A68ED1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 23:01:13 +0000
Manifest this update: Sun 01 Mar 2026 23:01:13 +0000
Manifest next update: Mon 02 Mar 2026 23:01:13 +0000
Files and hashes: 1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: lF/Gucsehw/KguM3MxGh3kPahwMU6ENnbV/ZRQxxRaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:68:a8:b9:5c:5e:f2:c2:84:11:c5:a6:8e:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Mar 1 23:01:13 2026 GMT
Not After : Mar 2 23:01:13 2026 GMT
Subject: CN=38db0cb770c561c76fa17630cbf408824576ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:97:c7:f3:75:83:89:ca:89:98:2c:74:56:
50:7f:06:cd:b2:63:af:08:b8:bc:f5:7c:87:5d:82:
dc:53:0d:31:4e:c8:eb:db:04:5f:c8:de:a0:d4:6e:
43:eb:86:7c:75:24:54:94:c9:85:09:e7:77:ad:83:
c4:ee:35:53:96:72:a5:a2:ab:f4:e3:51:b0:c4:c1:
84:b2:ce:a7:30:3b:ee:4a:b9:61:02:6b:72:67:15:
5a:e7:08:20:97:28:0e:69:93:b0:c0:0e:ea:67:79:
5c:c2:7e:8d:b2:95:42:fa:aa:48:76:af:ac:34:4f:
8f:26:e9:70:eb:7d:3e:9d:75:00:e1:7e:96:3c:84:
3c:32:7d:fa:f9:15:85:3b:90:25:6f:96:80:03:73:
c3:7e:c7:5d:59:ac:ef:a6:74:d8:79:8a:b5:b8:4f:
40:f3:2b:e2:79:8f:b5:05:52:d1:ed:3e:74:df:af:
53:d3:23:3e:93:93:0e:1b:b2:b4:5b:78:b0:06:d5:
0f:a9:41:6c:36:5e:1b:d6:18:90:5e:e0:1e:5d:79:
3f:a5:2e:01:e9:b4:4b:b6:53:6d:6b:85:5f:4e:a4:
a8:35:66:98:41:44:7d:1a:b0:35:de:93:b9:a4:62:
a6:ee:42:c0:ed:ba:78:c8:91:34:2f:61:ca:ce:b9:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:0C:B7:70:C5:61:C7:6F:A1:76:30:CB:F4:08:82:45:76:CC:BB
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:b7:6d:df:c7:cc:c9:bd:d0:88:7b:93:f3:f3:d3:9e:35:
6c:9f:ff:10:ed:00:55:24:f8:8f:4c:a4:0d:01:6f:98:38:b7:
4f:a9:f6:0b:5e:65:73:63:96:34:6c:c2:ad:fe:92:87:9f:40:
3a:b7:01:ee:09:c0:cb:ba:a7:7e:a4:d8:38:62:a2:86:a3:f8:
d6:e7:a2:24:e5:55:4b:75:af:fc:b8:3b:10:7c:63:d8:37:fa:
41:0d:13:54:f0:48:b1:11:bf:6c:ac:c7:20:d9:23:ca:e7:b0:
94:f6:93:b5:1f:78:2a:4e:52:d8:37:9a:fa:27:28:63:66:45:
e7:16:a9:b6:2a:29:f4:25:d9:a8:0e:29:0b:99:10:f1:10:b2:
e6:f0:9a:8d:14:f5:5d:53:ec:43:73:a3:2c:3d:be:09:84:34:
5f:8a:9c:22:c7:c6:65:ea:33:be:fa:6a:53:ba:74:70:57:11:
89:77:07:99:b2:5f:b8:b9:b2:45:6a:b1:70:76:81:8d:3d:53:
4e:83:25:e0:85:ce:ec:a4:b8:fb:02:88:ea:3b:97:12:ec:e1:
0c:c9:ad:79:12:f5:5c:c6:fd:18:5d:f7:77:d4:59:d9:26:fb:
58:11:1a:e7:b1:a3:e9:c8:62:3d:12:55:c4:98:21:a7:a0:c9:
e3:19:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:50 2026 by rpki-client