Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: 4jsnN//CAFBFeBTgMAmiI9OJvxKAX2l+OrnvAK/IH+A=
Subject key identifier: A8:77:3C:2B:78:B7:E9:FA:EC:47:06:19:95:71:CE:09:77:9C:6C:0B
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019CE55AEB75611E2C3B5209FAF9AF9F8F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 04:01:06 +0000
Manifest this update: Fri 13 Mar 2026 04:01:06 +0000
Manifest next update: Sat 14 Mar 2026 04:01:06 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: i477Ode+F6+w0i90rbqJYfMT0kGrAh6mKoeF3xI0Y+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:eb:75:61:1e:2c:3b:52:09:fa:f9:af:9f:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Mar 13 04:01:06 2026 GMT
Not After : Mar 14 04:01:06 2026 GMT
Subject: CN=a8773c2b78b7e9faec4706199571ce09779c6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:98:3e:27:bc:00:85:52:06:76:60:3d:ab:
90:b5:5b:fa:a5:11:e7:f2:56:18:f7:14:3b:aa:e9:
01:6c:02:93:00:e4:b3:88:01:e7:5d:53:59:c4:61:
73:a2:65:65:63:a8:34:d0:55:3b:15:7e:d2:c2:83:
79:c5:b0:e0:b3:e1:36:a3:74:f0:90:14:34:3d:98:
fa:fe:5a:96:ea:15:50:87:30:78:ef:ff:63:c0:4b:
b2:7f:4f:b8:4a:a1:b6:88:79:39:ce:d4:33:03:27:
b1:0f:af:c1:72:71:55:e1:31:9a:2f:4f:d4:40:b3:
95:e9:ef:f9:ac:ca:0a:a5:c9:d7:f5:5b:20:af:37:
80:cb:63:c9:7c:97:b2:d5:a7:8d:2c:51:59:4e:69:
df:dc:d0:2e:c0:54:0a:96:48:81:10:07:b1:d3:eb:
f1:16:75:8e:eb:28:ef:e0:4d:db:3f:a4:fd:74:5e:
1e:e4:83:df:73:07:46:cb:0f:1e:33:c7:1b:b8:b5:
e1:13:b9:14:a3:84:3c:ec:6a:7d:2f:d1:f8:15:99:
72:dc:7c:0c:71:9d:ac:10:44:aa:1b:c4:ff:58:d9:
04:c8:0b:a7:1b:58:77:1c:76:7a:56:ad:b2:22:ec:
95:bb:65:9a:32:c2:ef:da:8d:e4:93:03:4d:e5:91:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:3C:2B:78:B7:E9:FA:EC:47:06:19:95:71:CE:09:77:9C:6C:0B
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:c6:05:2b:d7:23:76:bf:9c:9e:cd:f0:82:b6:0b:61:9f:
b0:e1:57:b2:38:a8:be:6f:be:46:5f:e8:04:e6:07:1c:28:22:
b3:70:91:a1:cc:fa:04:b2:18:14:38:d6:68:37:40:0a:79:71:
9d:8f:ac:45:10:9b:05:99:b1:9a:0a:d4:d7:fd:ab:96:ad:7b:
88:07:ef:a9:1e:c4:b0:2d:0e:4d:41:5f:c7:a4:8c:76:46:37:
01:e7:8a:73:2b:74:16:4a:fe:d4:2d:bd:08:26:ee:25:8e:52:
b6:41:79:b1:9c:29:da:8a:91:34:99:09:4e:d6:de:51:35:1d:
ee:a3:d3:c6:86:5f:7a:6b:7b:1b:94:2a:46:af:09:26:ab:ec:
67:e5:64:57:92:e5:71:92:36:69:16:57:e8:37:f0:e2:03:30:
1c:23:45:75:17:3a:ec:00:1d:8a:a8:67:dd:4c:ef:13:fe:a7:
bd:e9:d7:7c:f4:e9:36:52:f0:d8:83:f5:94:d0:18:3a:9f:db:
43:6a:66:96:9f:a2:6f:60:f6:25:54:94:95:d8:ac:e3:56:f3:
d2:23:46:3b:0b:98:53:27:a7:90:4d:14:87:e3:9d:3e:b6:d6:
27:79:36:8f:5e:d9:ae:29:99:4a:17:b5:cb:16:73:f9:8a:1c:
43:a3:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:54 2026 by rpki-client