Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
File: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft (raw, json)
Hash identifier: 0tzQ3HZ5azZK9NYB1rh5/Y6B37uKFkWzZG8Cd9Jk1CE=
Subject key identifier: 48:36:B1:07:F9:70:BE:34:0C:3C:44:32:F8:80:DE:6A:D4:E3:32:51
Authority key identifier: FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
Certificate issuer: /CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Certificate serial: 019D3909CC403DA962B1839446E791314E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: XObKO3ltJwjAm9or7k6NYiYPt_c.roa (hash: 7lZy4Wbsa7zNjERhyll32LTZE7YzAMI3aWuq/di2LaU=)
2: _ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl (hash: jsO0ddqUZYdthBc5JQUJk5z+Xz9tp35pwzJiPUVVVrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cc:40:3d:a9:62:b1:83:94:46:e7:91:31:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a50eedfe78040209d6c0ab95f83b5460398dd
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=4836b107f970be340c3c4432f880de6ad4e33251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1a:ee:9d:46:2a:7b:cd:d2:23:15:ca:cd:13:
e6:77:86:f1:28:3e:46:8f:52:0c:d8:6f:60:c4:a5:
e8:1c:e2:e1:8c:b7:44:d3:79:02:d3:30:58:d0:2b:
1c:6a:82:8c:3f:52:72:af:14:c7:40:db:ed:e1:9b:
d4:78:66:4d:1b:27:e3:22:ac:8f:df:c4:12:a2:61:
80:7e:95:0e:ec:da:49:d6:b5:2c:10:75:72:d4:7b:
99:ff:48:7c:4f:97:8c:6f:70:75:d2:ed:8e:2c:fa:
ec:34:30:fc:fa:96:49:d9:7f:67:73:c6:02:e7:2e:
5f:8b:36:c5:a4:26:dd:df:e6:f0:a3:c3:f4:45:0d:
97:c1:32:90:10:43:ee:8c:25:2a:96:f5:b3:ce:55:
24:1b:2c:88:69:5e:bc:f3:59:85:94:35:0f:95:9a:
7f:7d:66:92:88:31:11:03:13:15:79:b7:01:a2:2c:
6e:12:80:45:0d:72:f2:a9:07:1c:76:06:c8:9e:ad:
09:c8:f9:a9:53:62:35:82:54:6f:70:fb:4a:d2:50:
86:12:23:63:3c:09:2a:f7:6e:b4:e2:f5:82:6c:e0:
30:ca:7b:88:91:08:e7:73:5d:c7:8e:25:07:1c:36:
bd:62:69:6a:b2:1c:f8:31:66:fa:c5:5e:0d:49:2d:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:B1:07:F9:70:BE:34:0C:3C:44:32:F8:80:DE:6A:D4:E3:32:51
X509v3 Authority Key Identifier:
keyid:FF:2A:50:EE:DF:E7:80:40:20:9D:6C:0A:B9:5F:83:B5:46:03:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/017f89-9130-4a4e-8547-f3b9741d1d4f/1/_ypQ7t_ngEAgnWwKuV-DtUYDmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:dc:21:24:21:16:d8:e1:17:db:d4:19:2c:9b:c6:44:82:
69:38:2a:06:db:81:73:ac:d7:5d:17:ca:ff:c6:ff:bc:e3:91:
a7:c9:75:72:ee:95:89:5a:df:f9:dc:f6:df:45:18:2a:ec:8c:
d5:09:06:d7:d1:20:6a:97:14:0d:0a:9c:9e:7d:5e:af:2a:71:
c1:3a:9a:67:75:67:01:69:88:fb:3e:93:b1:7f:d8:82:bc:f8:
80:b5:04:9b:4d:6e:70:3a:2c:bd:1c:a0:d5:bc:34:cb:b1:17:
59:c7:95:a6:f2:23:f9:84:34:49:ea:e4:be:16:2d:38:a5:56:
6b:bc:ec:91:32:49:05:3d:f5:ce:b2:10:ee:bf:ac:0e:a8:fd:
56:bd:7e:7f:20:d7:05:41:d9:8e:ee:d7:34:9c:58:15:31:74:
16:9c:56:ac:50:40:e5:b5:f8:8d:73:69:5b:08:27:1d:37:04:
1b:9d:d7:7a:0d:6f:fa:a6:d8:97:7f:84:ed:dc:4f:6d:a0:3f:
7f:f3:97:be:94:a6:4f:a4:30:f8:b0:e3:fd:71:37:04:88:a2:
18:e3:67:36:1f:ee:7c:cd:63:1c:dc:20:36:d4:9e:2d:f2:ca:
63:9a:17:a2:7f:20:26:21:fe:4b:71:5f:ae:cc:2c:05:af:77:
ba:73:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:38 2026 by rpki-client