Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: saczgGvSz8OyrhDRCONavArHJ7MPKKwxhUyApnYaMP0=
Subject key identifier: 0D:BB:18:13:FB:FF:24:88:7F:6E:F7:7F:DD:51:2C:CA:1C:BF:98:AF
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019CEDEFC43B12C790C9EC7F124134D1C7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1874
Signing time: Sat 14 Mar 2026 20:00:39 +0000
Manifest this update: Sat 14 Mar 2026 20:00:39 +0000
Manifest next update: Sun 15 Mar 2026 20:00:39 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: osFaIXqpaBrsaTRMIJWZXSObQB9mwDJxPJMn2j1KalE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:ef:c4:3b:12:c7:90:c9:ec:7f:12:41:34:d1:c7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Mar 14 20:00:39 2026 GMT
Not After : Mar 15 20:00:39 2026 GMT
Subject: CN=0dbb1813fbff24887f6ef77fdd512cca1cbf98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:d5:ae:b5:43:87:76:b4:78:db:e5:e7:09:
60:ca:ff:98:13:1f:6a:0f:51:09:76:c3:30:d0:c7:
6c:d0:08:af:f5:be:00:5b:87:69:f5:93:9c:ef:18:
c8:08:b1:f2:53:f7:6c:f9:a8:f4:24:13:6a:7c:3d:
13:3c:ae:fe:f6:35:92:6c:38:01:a3:ea:c6:ec:4d:
99:31:97:97:9d:9d:13:8b:6f:91:2b:9b:72:eb:e0:
92:67:76:d1:4f:f0:91:6d:87:d5:41:55:1f:6c:71:
ec:5c:dd:cb:8b:ab:43:3d:4c:7c:40:1a:9d:a0:f9:
e0:6a:4a:fb:40:b2:4b:0a:1a:72:66:ea:80:52:c0:
0e:6d:fe:0c:4d:e6:1c:98:2e:c6:55:3b:3a:0b:6d:
1e:ae:0c:1f:46:68:65:81:8d:70:5d:3a:4a:01:38:
34:d8:52:87:f7:a2:21:ad:98:2f:f6:52:ea:c7:52:
09:9e:9c:6d:82:66:4c:33:08:91:62:75:b2:79:38:
f3:96:b5:a2:54:5d:d3:75:37:d8:6b:de:5d:cc:bf:
83:dd:0e:27:cb:1a:42:1c:9e:08:91:9a:b1:93:34:
6e:c3:65:5f:ea:cf:a6:bc:f6:24:88:76:ba:8a:5c:
5b:73:06:2d:d0:e1:37:8f:b8:5c:9b:1b:7f:8f:f6:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:18:13:FB:FF:24:88:7F:6E:F7:7F:DD:51:2C:CA:1C:BF:98:AF
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:f6:72:13:31:64:b4:6b:cb:e2:d4:b3:24:91:d6:03:ad:
6d:26:62:e0:9b:8a:fe:db:25:a8:c2:e8:18:cd:d8:de:64:af:
0a:82:09:e9:e1:f1:8c:be:cc:ab:06:36:c6:30:45:62:22:de:
92:6b:bd:11:67:6d:37:8d:40:3a:9f:3b:41:6e:e1:5b:80:c3:
46:63:89:7a:cf:f3:0d:09:90:b3:0c:cb:8f:d7:1e:82:f4:36:
14:87:69:2a:e9:eb:ee:a5:3b:54:31:3c:69:03:15:52:9f:2c:
4c:66:0c:8c:41:c4:c1:19:54:d4:75:74:09:a1:13:bb:96:2a:
c8:79:e9:1c:7f:fd:4f:73:62:1d:23:4d:f0:c1:ef:f6:fa:2c:
ed:c5:f0:03:72:62:b7:a9:63:8a:7f:f8:7b:84:f8:6f:f8:a3:
85:02:3e:57:03:b0:c6:06:a3:9e:db:73:a4:22:25:0c:26:87:
0a:c8:74:31:08:19:5d:62:a0:77:2e:3d:ee:90:bf:1d:dc:18:
43:5b:a8:4c:e6:e4:3b:86:75:03:86:f7:82:e2:b9:f9:84:57:
5f:23:8c:07:77:a0:d4:de:72:48:77:38:88:94:fb:49:ba:ac:
9e:73:cb:c3:97:1e:75:e7:ac:ba:bb:ee:f1:9e:f9:cd:1f:17:
dd:c9:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 03:04:50 2026 by rpki-client