Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: Ur4MCJj3i1DorhL9ATTeN/FBVx/mbM3Ck6Yp3lhO8ZM=
Subject key identifier: 0E:2A:D2:BF:1E:2C:9E:16:27:53:77:CF:24:A3:79:8A:9D:62:23:7D
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019D3752289C2FFC1C41C33433C29BB2D13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: lp/gY3fy4oVevXrJqPegADgJMTXEYZUHjE28+O5BdB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:28:9c:2f:fc:1c:41:c3:34:33:c2:9b:b2:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=0e2ad2bf1e2c9e16275377cf24a3798a9d62237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:46:5c:46:48:5a:1d:a4:be:21:1e:80:1c:
0a:45:8a:e4:67:69:e8:24:06:83:2e:26:be:aa:7f:
d3:79:bd:b2:73:7c:f1:dc:e3:5b:a8:7c:bb:1f:ce:
02:8c:30:9c:c3:0f:e1:b6:43:2e:f1:65:89:3f:41:
8d:84:5b:10:cf:b0:23:19:ab:22:47:cf:39:2a:32:
28:c7:a4:8b:a2:70:cc:25:06:7a:0d:26:4b:40:a6:
e3:ba:67:d3:af:67:d0:55:3f:c4:28:6b:3d:c9:43:
7b:41:33:9c:65:c8:f7:c9:6b:2c:2d:87:02:21:f0:
4e:b9:ed:21:db:10:f9:26:af:d2:d2:74:5d:ea:b1:
53:c6:04:4f:20:2b:61:5c:86:56:4d:55:84:5a:c8:
bc:65:0b:f3:8c:6e:5c:31:85:df:45:75:d3:5a:d7:
c8:b9:95:d1:73:68:01:91:35:b1:da:81:45:de:dc:
46:01:73:e5:97:10:ba:b6:5d:28:e9:1b:a3:b3:18:
7a:d9:61:a5:1b:0f:96:d3:3e:ba:6d:25:a3:b9:33:
5c:2a:63:57:7a:f5:7a:7a:6f:1d:4f:ed:aa:94:3a:
27:70:40:cc:f6:8f:b7:61:e5:fe:96:a5:91:c5:53:
a0:3f:e2:c1:15:da:89:52:0a:0d:5f:c1:7b:fd:83:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:D2:BF:1E:2C:9E:16:27:53:77:CF:24:A3:79:8A:9D:62:23:7D
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:53:41:e6:dc:0d:af:3a:f8:dd:61:05:6d:3a:e9:d7:81:ee:
57:9f:27:e2:fd:5e:02:9f:fd:a8:f1:4b:ea:d5:17:6f:74:b1:
51:f2:1f:24:50:41:70:73:f5:ef:7c:f4:ef:87:15:86:c5:7a:
70:eb:1e:9a:d5:de:7f:05:de:f2:62:ee:b9:d2:76:ef:00:34:
b9:d8:b9:de:f6:a2:37:6a:64:71:70:e5:27:2e:55:24:51:a8:
29:f0:68:e8:62:51:e4:4d:ab:f2:5d:dd:0a:e5:55:1a:f3:dc:
50:2e:2f:35:e2:57:b0:91:b5:44:34:c5:2f:19:56:d5:dd:59:
fd:a0:34:3a:11:1f:99:d1:18:7e:f0:88:bf:d3:7b:fe:93:8b:
df:57:0c:16:a0:cb:a7:89:3b:98:53:15:5b:a1:9f:97:74:d0:
d8:f4:be:f0:6d:d6:21:eb:05:21:be:b1:42:77:ef:8b:78:a3:
9d:2e:4c:53:2a:d6:1e:7b:d6:bd:5f:5e:5e:c2:b0:9f:da:73:
31:b9:dc:e1:20:c8:04:0c:83:bf:4a:9c:28:cb:65:50:62:42:
6a:c5:c7:47:13:7f:ed:e4:4a:f3:c1:f5:4a:ec:33:4d:85:0a:
35:cc:b6:bc:62:e3:93:94:31:e7:cd:04:2d:81:66:9c:2c:db:
a6:b5:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:38 2026 by rpki-client