Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: OcvH0qBfTkBdLsj1V1KBpuxIl2lpxsTiQus+vC/wHkQ=
Subject key identifier: 41:14:FC:C1:53:6A:F7:71:E2:44:C6:0D:43:80:3C:49:BF:FE:A1:97
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 019CAA21783D60B5739258D313F4F805EE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0F0F
Signing time: Sun 01 Mar 2026 16:00:45 +0000
Manifest this update: Sun 01 Mar 2026 16:00:45 +0000
Manifest next update: Mon 02 Mar 2026 16:00:45 +0000
Files and hashes: 1: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: u2UlnmK2pYGNDrQJ7Ajgr5kt/9q4mjK7dfmFhA5onHU=)
2: _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (hash: FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:78:3d:60:b5:73:92:58:d3:13:f4:f8:05:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Mar 1 16:00:45 2026 GMT
Not After : Mar 2 16:00:45 2026 GMT
Subject: CN=4114fcc1536af771e244c60d43803c49bffea197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:7e:52:a9:6f:18:a1:c7:a5:ff:91:e6:5f:
29:45:4a:97:b9:6c:41:0b:3f:43:cb:37:46:e3:06:
ca:27:5b:97:04:77:74:60:bb:dd:f2:2f:b6:fe:e9:
ed:82:1b:63:1e:b6:bb:7a:ba:a7:62:08:f9:e2:f4:
30:e1:8c:57:1c:57:8d:1b:0e:05:52:53:23:12:40:
4b:13:39:95:bc:84:64:36:3f:fe:3a:db:ce:41:bd:
79:75:9d:e1:2e:b3:0b:87:8d:ff:99:c5:ff:3b:e3:
d4:f0:27:92:0b:54:41:cc:2e:28:ee:ea:d0:0f:65:
52:1e:76:ed:71:2b:c8:83:6c:6e:79:73:5b:c9:d1:
33:b0:31:35:4b:23:e0:55:f3:e0:98:ef:80:71:79:
95:24:c3:b7:cf:4f:8c:f7:3c:d4:7e:07:37:90:c8:
e4:6b:2c:cb:50:a1:87:10:52:dc:03:eb:ca:a9:31:
f7:4b:c8:8c:9e:28:a5:33:3b:a7:9c:9b:02:82:c8:
19:36:23:db:0f:b1:ff:96:5d:31:8c:50:aa:89:74:
39:82:a4:f8:b7:1f:96:a1:99:97:b3:d9:0b:18:ff:
93:6b:93:06:02:6a:f1:ae:12:90:cb:93:c3:3d:7a:
2b:d1:9e:7d:bc:3e:42:26:ae:f1:94:b2:59:b2:fd:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:FC:C1:53:6A:F7:71:E2:44:C6:0D:43:80:3C:49:BF:FE:A1:97
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:d4:d5:b7:ce:64:ab:db:16:77:47:ac:39:13:f0:74:39:
e7:97:3e:68:e1:b3:b1:c5:bb:1d:e1:cc:9d:7e:ee:f6:81:b1:
d6:44:7b:82:a8:3e:07:1a:b3:b6:38:4c:9d:89:98:ee:43:d8:
62:7d:b1:3f:47:c0:98:30:ee:df:f0:b2:73:95:40:90:25:49:
6b:d7:72:d9:be:69:11:35:7a:55:f1:36:ef:4f:dd:19:b9:c2:
f0:7d:27:b8:b6:3c:a6:21:7c:1a:21:b3:28:4e:65:44:b7:2f:
e4:df:f6:17:69:96:9f:c7:a6:0f:72:d3:29:36:70:46:e5:f2:
fa:21:d8:63:8d:ea:4d:dc:af:fb:ed:46:2f:92:bf:bf:16:c2:
f6:74:89:b5:2e:69:7b:a8:c6:71:af:5a:66:ff:4f:1d:4e:36:
5e:ba:46:ca:c9:d2:f9:50:60:66:81:0c:8a:3c:52:01:1b:3b:
06:af:d3:96:b6:63:76:e3:14:29:b0:95:02:86:23:bb:ee:be:
4c:34:4f:d3:14:48:a7:2f:6d:ad:a5:90:29:01:09:9d:32:c1:
0b:53:ba:7a:8e:4f:e0:84:04:50:f0:2f:df:90:1b:32:ed:3d:
17:f0:bf:3d:55:5d:ca:61:a7:39:c4:3d:59:d4:13:01:2a:74:
1e:f0:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:40 2026 by rpki-client