Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: LOaAp3fHjNbrUH25dEahBZbGknKqH8TYOqZej+lYIgY=
Subject key identifier: 10:DD:3E:25:EA:B2:5A:17:26:5C:EF:AB:C1:2A:FB:43:94:7E:59:53
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019D38D34C2C5DF50346C9288C4DC8A6A2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 144C
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: QSgiyH11wyAURvatj9-ZAc4hYVY.roa (hash: clDL8JVxHAo7Ey2O322dbo1WNKZNfLWVEI2vSjSdkIA=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: Ukx7n7LsfGQHHkb5gLHjKCOmKrXLibqaaOekaJZiAbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:2c:5d:f5:03:46:c9:28:8c:4d:c8:a6:a2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=10dd3e25eab25a17265cefabc12afb43947e5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:7a:8a:19:ee:26:ff:12:de:0d:58:83:76:
47:5e:d2:c5:d7:53:72:05:3c:f5:e3:3a:35:c7:c4:
14:ec:a6:7a:25:63:76:dd:48:53:08:3b:d2:c3:7d:
1d:13:4e:d3:2d:87:11:76:e9:10:a3:c3:49:53:c1:
a5:a8:c6:82:29:d9:70:4c:e5:e7:13:6e:21:56:bd:
93:15:a1:88:33:62:02:99:08:8f:30:03:e0:0d:9b:
b5:c8:a1:9e:52:e7:43:03:fa:d7:50:93:df:60:73:
bf:ef:61:c6:d0:f1:fa:df:a2:46:40:16:f8:3e:13:
70:72:51:44:f0:ef:c6:ab:f3:62:ba:32:ae:84:bb:
d1:00:f3:79:bd:43:32:c4:fd:24:9d:a1:42:39:65:
f7:7f:68:23:60:5b:e3:d1:86:74:51:d8:57:74:6d:
58:21:11:34:d6:bd:81:9a:1b:84:2a:3e:98:f7:9b:
23:d8:2a:d8:ad:07:50:97:de:2f:74:44:2c:42:a5:
f7:29:67:f0:f1:03:86:a2:90:7a:15:ad:26:88:3b:
38:e2:41:c1:e3:76:77:5b:8d:46:93:69:cf:ec:a8:
44:e6:09:5b:53:d1:82:f7:c3:22:5b:3e:98:4e:29:
12:1c:2c:af:ef:8c:b4:9a:a9:d1:55:2a:ce:35:67:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:3E:25:EA:B2:5A:17:26:5C:EF:AB:C1:2A:FB:43:94:7E:59:53
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:54:48:2d:c8:19:31:35:a5:5e:7e:1f:0b:34:b7:1e:85:41:
29:81:24:40:14:1e:86:38:81:cf:b9:b2:eb:56:12:8e:b5:aa:
c5:a3:24:01:cd:0b:68:b7:5f:29:13:84:63:eb:69:fc:d7:e2:
fe:17:9d:88:43:dc:b6:81:e1:9f:23:48:32:88:87:a3:2b:ad:
88:21:3d:91:74:68:df:1a:4c:a3:55:c7:c7:be:74:80:35:08:
b9:f7:d2:e4:9f:3d:88:dd:35:2d:58:c6:cc:7e:7c:4d:3f:58:
1d:41:95:20:49:0f:28:8c:74:1b:89:9e:58:1b:84:f4:1d:37:
7c:f0:4a:62:4d:dd:f4:21:b0:a9:18:3e:a8:99:ac:7c:c4:2c:
34:9f:01:4b:32:6a:0c:36:c7:97:37:73:02:ec:48:67:e2:f0:
7b:95:23:7f:7f:6b:e4:c0:5e:91:54:69:d5:d2:ba:cd:5a:92:
30:35:a0:42:c7:cb:f4:f6:03:d5:11:d9:a7:7d:9c:33:8c:7a:
fd:db:14:28:39:91:2f:4f:ab:a5:39:a3:c8:39:fe:fb:5c:2b:
cd:b7:e2:f9:e8:4c:85:36:7d:9e:e6:b6:9c:b8:49:57:0e:89:
6b:2a:27:c0:2c:2c:ee:cd:6b:67:b0:56:5d:10:23:2d:9a:5b:
5b:30:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:05 2026 by rpki-client