Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: PeDJR9rh323h6JNloa/HH95nBhsSlVHXz/GT/FajMAQ=
Subject key identifier: 17:89:6D:D9:B1:EB:D8:21:F1:65:E7:98:B2:7D:4A:25:19:6F:B7:86
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 019D37F75B0EB98A62C18BDA72DFFFEB791F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 0D41
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: HXQ8U3jDAt0r6PwxjrTdz6f9IqS1awCYoEe6iWLqojA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5b:0e:b9:8a:62:c1:8b:da:72:df:ff:eb:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=17896dd9b1ebd821f165e798b27d4a25196fb786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:36:da:b1:54:3d:bc:e1:3d:7b:71:b6:f7:
48:c1:5a:17:83:b8:49:04:64:60:e5:8d:67:22:de:
7c:27:a1:69:2d:65:ea:33:54:dd:83:d7:82:06:2a:
e2:d5:ab:4a:b7:79:ae:67:8c:e2:0a:72:7e:a6:ef:
1e:d5:d5:d4:7e:75:aa:fa:6d:e9:5a:b0:fc:2c:38:
f2:c6:41:d7:63:71:13:96:78:3c:11:97:e1:a0:d7:
d6:48:10:ec:30:49:c3:c8:ed:a3:ae:97:4a:de:0f:
cc:1c:1c:ed:e9:00:75:ab:d1:d9:1c:94:15:4e:c0:
0b:b6:13:19:83:56:52:75:1c:56:99:2c:4f:63:57:
26:04:cd:40:94:4e:51:c0:1a:6a:2c:7f:5c:1e:62:
21:4a:33:2b:da:0a:97:a7:03:9a:66:0b:5b:d1:a6:
cf:69:26:60:58:7d:81:58:49:a0:ee:db:b0:63:19:
bb:bd:5c:e1:b6:e6:65:c9:49:c6:06:50:7e:30:90:
88:4f:2a:bf:d7:c2:bc:e4:5f:ef:18:83:71:c1:b2:
46:fb:1c:dc:5d:4a:08:13:3f:47:96:0b:37:25:95:
dd:1c:ba:2b:3a:e3:3a:ba:ed:a6:b7:17:c0:98:12:
0a:e5:d5:74:a6:5d:b8:e0:2f:09:52:ec:b6:d6:bc:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:6D:D9:B1:EB:D8:21:F1:65:E7:98:B2:7D:4A:25:19:6F:B7:86
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:89:b4:c0:ab:a0:c9:42:d1:3e:fe:39:d6:e0:1c:5b:ae:72:
22:2e:97:11:9a:a3:01:67:c0:31:0a:c7:57:7f:02:18:ab:7d:
7c:ed:e8:66:11:3c:41:c8:eb:cc:79:c8:e7:92:20:27:6d:aa:
cd:54:6e:c4:f0:36:92:e6:35:06:52:a7:47:8a:ba:a2:5f:76:
49:0f:9c:bb:2d:86:eb:36:43:b6:2f:cf:8e:f2:ce:fb:29:f9:
af:1e:e8:66:8e:75:76:04:1b:ba:95:e9:8d:2c:90:37:04:27:
00:8b:c6:e8:67:90:56:29:96:cb:76:53:e8:70:a6:a5:de:56:
83:ab:9c:25:7c:ed:0a:a2:aa:b5:9f:8d:d0:59:58:18:83:e2:
14:60:16:05:bd:50:a2:2a:f4:66:f7:47:7a:26:1d:9d:bc:4c:
0d:98:79:74:87:bd:53:f0:c8:ed:de:a6:bc:c2:f8:d5:3f:92:
45:e7:5a:53:e0:a7:0a:58:d9:93:a8:b7:f0:ba:24:4e:e7:90:
01:6e:92:a3:81:35:07:51:5b:58:8d:e6:36:96:7a:b8:17:58:
99:2c:70:ca:23:f4:5f:d4:27:20:11:e6:45:75:e2:26:c4:5c:
53:f3:32:28:d8:f8:cd:8a:dc:ac:b3:eb:3c:bb:a3:0f:5a:2f:
ce:65:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:09 2026 by rpki-client