Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: yP4Dnulilme6pgrXahHg1mIJBtVI7TV/dL7H/JcaVNk=
Subject key identifier: 51:93:43:53:08:A4:7A:74:82:B1:38:D9:00:9F:13:43:73:0A:63:7D
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 019D39E5DBFC8C2E417DC9158A2F4C6D87A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 14:00:58 +0000
Manifest this update: Sun 29 Mar 2026 14:00:58 +0000
Manifest next update: Mon 30 Mar 2026 14:00:58 +0000
Files and hashes: 1: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: gUpCijRpwM9HLYfTBDvmWhSIPjSdShEXRLSqRbaC+6o=)
2: ovYaAbe26D-xe8lCheafK_LrtWY.roa (hash: 6eO0/Dtd7168WHT10a4JQBuUdq1q7SgJYtnU/qwqLfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:db:fc:8c:2e:41:7d:c9:15:8a:2f:4c:6d:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Mar 29 14:00:58 2026 GMT
Not After : Mar 30 14:00:58 2026 GMT
Subject: CN=5193435308a47a7482b138d9009f1343730a637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:34:b3:91:eb:e9:3d:69:4c:71:f1:ff:21:
57:89:df:2c:78:a7:8d:e8:c8:70:9c:7a:f4:06:03:
7a:af:e9:c6:3c:0d:c1:91:c3:7a:1f:67:82:64:6d:
f2:c3:8b:84:ab:94:25:da:43:39:09:22:49:5c:97:
62:8c:0a:e1:6a:20:e8:2f:c6:65:ab:dc:fb:65:4f:
f7:31:4a:dd:bb:b8:21:fb:96:23:e5:d3:1f:4d:f8:
89:1e:9e:51:89:06:8f:fc:c3:e2:db:32:7a:f4:37:
25:1e:2e:0f:63:f2:63:f4:8d:39:79:14:ba:db:ae:
67:51:96:47:b0:fe:15:53:ed:29:23:04:99:7f:28:
e4:b7:2b:8e:03:b7:63:b7:b9:3d:59:0c:9e:2f:07:
e9:a2:bf:b5:7c:5d:e6:cb:47:98:9b:35:44:03:15:
6b:13:f2:fe:3c:13:a7:e5:2e:c0:45:5f:9d:58:01:
ea:3b:64:b8:7c:42:5a:28:cf:30:c2:9c:bd:da:27:
31:44:a5:76:fb:c5:05:80:4f:bf:08:f7:b5:71:b1:
b9:fc:10:e8:31:56:0a:ef:f0:77:6e:3e:b2:32:0f:
52:1a:dd:12:ea:36:71:6b:c4:68:69:2b:45:f3:6a:
fe:aa:00:9e:d9:e2:43:a2:c4:6b:90:95:5c:76:58:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:43:53:08:A4:7A:74:82:B1:38:D9:00:9F:13:43:73:0A:63:7D
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:db:b1:39:49:cf:62:12:b8:d3:dd:c4:24:ec:f3:cc:fd:
f1:9d:80:0c:ee:d1:98:0b:73:74:6a:13:7a:d3:2e:92:d8:b9:
94:71:58:ce:6d:11:d2:83:9e:77:22:04:9d:e5:6f:93:9e:26:
21:3d:92:f9:ad:ee:f6:d1:58:19:7a:38:a4:41:3f:60:7b:e7:
b3:56:e5:e4:06:48:8a:62:f3:f6:4c:af:f5:07:48:8f:74:09:
c9:1c:39:eb:9e:57:af:78:53:e6:92:76:7c:a6:9f:24:37:87:
a9:cc:a2:39:30:21:ba:2c:6a:04:23:79:e9:d0:32:60:2e:15:
1b:57:43:d8:f4:c1:3c:ee:98:16:7f:cf:30:b7:c3:08:87:c9:
d5:44:90:1c:ab:a6:bd:0c:64:7f:e4:0f:5c:04:98:7d:d6:41:
42:3a:4a:08:cf:51:42:24:23:d1:6c:29:63:28:74:07:3f:5d:
9a:c8:3d:48:d9:63:d1:4b:e5:8a:bf:a8:82:29:de:61:90:4d:
12:aa:e6:2f:5a:ef:86:63:2b:6c:99:32:c5:fa:e6:34:1b:ab:
2c:7d:a9:41:d0:d5:08:ae:17:6b:bc:3f:f1:b2:b6:7b:15:c5:
6e:bd:ba:2d:3a:b9:51:e5:98:55:6a:e9:8e:cf:97:c6:0c:ca:
41:87:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:16:58 2026 by rpki-client