Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: Rmhlo76IfxjbXNIjJyFzrkwD/vusOWbVao9y4ZPhapg=
Subject key identifier: 44:49:F3:CA:B3:FB:09:EF:74:58:3D:E9:C5:4B:BD:A0:F4:87:2D:36
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019D6763935B93E89DEA362279937720981C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 149C
Signing time: Tue 07 Apr 2026 10:01:12 +0000
Manifest this update: Tue 07 Apr 2026 10:01:12 +0000
Manifest next update: Wed 08 Apr 2026 10:01:12 +0000
Files and hashes: 1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: BntzQuKbOTdejQ6uZ1AtbTHZL8tEoVFw4gZUqBoO7so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:63:93:5b:93:e8:9d:ea:36:22:79:93:77:20:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Apr 7 10:01:12 2026 GMT
Not After : Apr 8 10:01:12 2026 GMT
Subject: CN=4449f3cab3fb09ef74583de9c54bbda0f4872d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:e3:41:f7:a3:76:70:66:92:2f:c9:91:d9:
b7:17:4f:6d:98:80:46:0d:36:6e:1c:d4:00:45:17:
d6:07:30:e8:45:f3:fc:e3:a8:b6:cc:e6:95:ec:97:
6c:53:5e:24:58:8f:6f:56:1e:bd:6f:b9:b3:56:98:
d5:ab:d0:f4:5c:58:a9:12:63:28:5a:6c:b6:8e:74:
ac:24:e6:ce:9c:03:08:24:7c:80:32:8d:6d:82:59:
7c:33:cc:4d:c1:85:e8:9d:e7:62:64:85:17:08:94:
a7:ba:c6:0e:cb:19:68:a9:9e:e1:29:8d:9a:c7:b3:
3d:6d:0b:f3:d5:a4:4f:ef:fb:c7:3d:7b:fd:a3:0f:
68:8b:4c:57:5d:23:95:f4:99:90:4c:3b:72:bc:22:
c5:c4:93:ff:76:ab:c0:ea:e7:b2:dc:fd:c2:97:c6:
ae:ce:57:7b:ef:45:54:8d:36:1f:bd:f7:5e:ee:a2:
6c:87:b4:31:7d:72:13:b0:62:54:97:cc:ce:9b:4e:
72:d5:80:44:a2:2e:d4:ba:7a:5d:8c:9d:2a:d1:8b:
1e:17:9b:30:3d:b1:59:5c:b7:68:db:d2:17:cc:5a:
fa:6e:4f:b9:02:1c:7b:96:fb:e2:43:77:e5:be:95:
fb:09:7a:43:d7:d5:03:4d:79:be:c8:8a:bf:eb:8b:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:F3:CA:B3:FB:09:EF:74:58:3D:E9:C5:4B:BD:A0:F4:87:2D:36
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:ce:e2:14:f8:54:be:ee:f0:ab:29:aa:14:7d:a2:f9:80:
ec:e6:cb:fd:d5:85:c6:72:6b:ba:25:8b:ea:9b:42:3d:d6:8a:
fc:6c:68:f2:ae:aa:bc:c7:2e:ae:c6:02:25:bd:cf:27:04:d6:
7b:5c:f5:9b:e2:3c:25:78:8f:dd:a8:21:06:82:02:f0:49:b2:
e7:8b:f6:95:be:4b:b5:73:ed:a2:44:ad:d4:c6:7a:0b:7b:9b:
aa:5b:47:a5:d4:56:87:99:69:ab:37:03:56:95:3f:3b:4d:4d:
49:5a:b6:31:66:74:8c:2c:e3:d4:fb:9f:9b:ac:aa:7d:6c:97:
da:d8:9c:21:b9:d1:90:79:48:65:18:0a:e7:20:4f:d8:98:f7:
7d:fa:e4:11:ec:fe:cd:b6:12:8f:c5:07:4b:5b:12:9e:3c:6a:
76:eb:39:3c:65:40:52:69:5c:c0:41:10:0d:5a:37:b2:be:e9:
96:16:d9:f6:a1:ef:d5:e3:1a:61:07:34:62:fb:3a:7f:39:f8:
0c:87:ab:6c:38:06:b5:0a:ac:d1:c3:72:68:4f:d5:96:31:4e:
0a:3f:d9:65:f5:0b:1e:41:5e:5c:f7:d8:81:e2:b2:35:1e:b4:
10:ea:19:40:90:a5:c9:35:29:ad:9d:8f:7b:f7:18:ea:ae:b6:
67:a9:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:32:28 2026 by rpki-client