Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: piQDNnpkbnUGrZUaiREC4Qb++/h3nudDZaqT807NIEo=
Subject key identifier: 41:27:BA:04:2E:74:95:99:FF:0D:82:EC:22:9A:32:64:87:8F:64:0E
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019D382E2F423D1A211AB6B76133C4B1678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: tl+kBNYeoMKiKmwdTUuO1dAhd62mXCR3uXrLrP4fagk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2f:42:3d:1a:21:1a:b6:b7:61:33:c4:b1:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=4127ba042e749599ff0d82ec229a3264878f640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:dd:64:49:c0:c2:ca:ad:cb:8b:fc:bb:a0:
0f:86:ea:1f:c9:6e:77:0b:e8:a3:c7:f2:48:ae:3a:
37:4e:af:35:7c:17:e6:4b:f6:23:21:c3:52:e6:e0:
08:23:f7:8a:44:9a:70:02:5b:b0:85:e7:47:d8:a3:
f6:08:3e:db:07:42:d6:12:65:c7:45:6c:43:08:7e:
2b:3d:8a:24:06:bf:cc:99:34:ac:16:dc:1d:9a:49:
02:78:02:5a:94:ad:cc:51:15:30:87:1d:f9:ec:73:
2f:e5:6e:93:b8:bc:08:be:b7:0e:6c:06:e9:3d:d3:
91:f1:9e:6d:69:d4:99:7d:12:ee:d5:4b:76:75:bb:
08:ce:5d:d1:8d:1b:33:8e:12:49:0f:3b:ad:c2:83:
4a:37:17:45:56:76:cb:51:d9:01:67:c3:b7:5e:0a:
6b:05:b5:7f:36:46:f5:77:3f:38:a1:6a:d0:53:56:
7d:27:14:88:5b:b4:c0:44:3f:d7:1d:a2:fd:9f:5b:
49:2e:62:ba:1e:90:91:d8:21:f5:03:82:dd:68:1b:
bd:0d:9b:71:73:3e:69:4d:96:6d:a7:ea:99:a5:93:
9d:e8:f4:8e:d8:9a:5e:35:7e:d9:ae:8c:b1:b6:ea:
7e:33:9c:38:dc:8d:71:95:07:ff:21:ae:b7:99:55:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:BA:04:2E:74:95:99:FF:0D:82:EC:22:9A:32:64:87:8F:64:0E
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ba:bb:30:d9:ec:55:aa:b6:04:12:28:38:b7:7b:1e:86:96:
62:9c:b9:94:f4:43:82:49:86:02:39:41:51:0a:25:7b:bf:8c:
4b:50:0a:01:44:32:7d:53:91:56:68:29:a3:e3:f1:38:d5:a7:
50:8a:88:da:22:4f:03:48:79:06:5b:6a:96:24:f5:e5:d3:23:
d5:10:d8:bf:de:77:52:f5:b9:7e:d1:4b:21:e8:c1:29:e5:1b:
66:d7:08:c4:b8:9f:f3:99:95:29:20:4d:f9:3d:65:c7:b1:57:
a2:7a:4d:08:dc:dc:49:b7:f9:55:7c:d9:8b:6f:fa:f5:14:1b:
be:28:14:13:aa:1b:3d:36:f0:fa:ed:3d:38:83:eb:57:8e:75:
3c:a2:6f:97:c8:ec:6f:23:12:02:28:c5:07:dd:79:01:26:70:
77:47:9d:86:e9:da:a4:03:13:61:d9:fe:47:49:53:3b:f1:7e:
b5:f1:be:36:06:8a:5a:11:61:f2:cd:ac:44:65:66:14:fa:0a:
bf:f7:b2:96:15:5c:eb:b6:2a:36:9a:b9:24:45:f3:1e:bc:de:
55:62:2f:96:bb:01:0b:24:1e:51:ff:d4:7c:c7:49:87:94:5d:
f7:b3:0c:c6:57:e1:e4:02:0c:13:fa:05:1e:79:0e:ea:1e:15:
d2:8d:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:05 2026 by rpki-client