Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File: YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier: GSdyZ98/j5d6aVICG4MEIRKv6Z9Mz884oddVG75QkK0=
Subject key identifier: 25:A6:95:9A:07:01:DE:62:A7:70:C3:17:A5:4D:10:E3:F2:34:9E:5D
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial: 019CADC856475F986477209C0BE1C61F04F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: WinsYSv7lvXHmHSC7YQ0267ZglY.roa (hash: OvB0n9pCf/mjeiCd2Er0y4UitnwwLmsZ3xFJsXerVIY=)
2: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: 7sQdlAc6sAiqD+RRaiWBqEUuYvNHmdtiodpq+2gcIxA=)
3: flYk0fPODsZgJ_kgt0t_p5e4Jek.roa (hash: TPZ3Huyf7AyjT68mqQjBhrlPDV/pxjrdXJyjIrSWQ0M=)
4: yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa (hash: vW0Vmr1vq9bGJ6Ym4MtyGJzRrkBpl9YpkjvvSpfLLRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:56:47:5f:98:64:77:20:9c:0b:e1:c6:1f:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=25a6959a0701de62a770c317a54d10e3f2349e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:81:e5:33:3c:43:ce:a0:80:c3:38:af:04:
09:44:c6:34:b9:49:b3:94:1e:84:09:a8:d5:0b:e4:
48:f5:f4:33:8d:db:0a:90:4a:a2:2c:42:d1:81:b6:
00:05:b9:90:56:72:89:50:21:74:71:92:73:54:22:
54:72:c5:13:35:f0:48:00:dd:91:7d:05:70:b5:3a:
82:7d:08:4a:81:3a:b9:8e:80:5b:78:3d:87:b2:a2:
bd:b1:ee:df:12:4f:b1:33:3d:94:d6:07:af:82:80:
96:73:87:57:b0:54:2f:35:ba:fa:21:f4:2a:0d:fe:
f3:8d:2e:b4:c8:8b:ca:65:89:c1:45:e2:d3:80:bd:
85:b8:f8:4a:b8:46:16:7d:8d:9c:17:aa:32:02:69:
2c:bc:9d:d1:59:ca:83:7b:f6:40:0f:13:9a:55:14:
f8:42:f5:c3:aa:65:88:d7:33:79:85:4a:75:fe:0b:
7b:9d:ff:2d:b3:36:7a:4a:0b:f9:85:80:77:57:01:
a9:9b:fa:b7:14:c3:0b:79:cc:11:40:65:b9:33:21:
ee:50:91:72:62:e2:f5:bd:dc:30:9b:f1:31:94:8f:
4b:68:31:b4:a8:e8:30:e9:86:07:6c:fe:7e:f1:99:
6a:d4:93:47:5b:8d:a3:7a:53:ef:10:38:3f:c4:61:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:95:9A:07:01:DE:62:A7:70:C3:17:A5:4D:10:E3:F2:34:9E:5D
X509v3 Authority Key Identifier:
keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d5:e7:06:9a:81:74:ef:df:0c:35:15:e3:ee:ba:9c:79:66:
db:26:61:23:e2:50:e5:63:4c:d9:39:a8:d4:b0:0e:37:4e:3c:
f5:2b:1a:42:dd:c8:5f:d3:ae:09:78:5e:ca:ff:b0:46:cb:32:
52:1f:5b:b4:9a:b2:9b:10:06:ed:7a:93:48:8c:3b:18:2b:35:
22:95:c7:32:de:bc:c9:dd:06:1d:8d:01:fc:fa:c9:25:3c:28:
5e:da:f6:67:5f:5f:6c:28:48:0d:fd:13:f6:0c:80:60:59:63:
ba:74:38:a9:be:95:23:9f:b6:c2:9b:cd:8c:8a:13:1b:7e:8f:
3e:80:17:b9:21:7c:b5:94:17:82:da:83:0d:46:1a:4b:21:a8:
82:9b:a5:be:c9:8a:e0:da:ee:3f:cc:7f:e9:0d:6b:0f:74:ed:
d1:eb:22:4a:3d:69:73:42:4d:c9:0e:10:06:1b:74:99:90:6d:
51:84:88:df:f0:09:5e:14:5b:b3:74:3f:01:04:d2:31:8a:0c:
44:86:74:5c:2e:f7:bd:70:55:dc:f7:21:60:81:ae:de:66:a9:
24:db:0b:bb:36:a8:14:45:f8:8e:d6:28:9a:d5:4d:2e:be:cc:
1c:48:d8:ec:38:05:33:65:da:af:06:09:ed:39:88:28:2a:c6:
38:8a:90:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:35 2026 by rpki-client