Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: JEylGwn+Omq0ncr/uU4e6+hUp03tBXwImWnE185neUo=
Subject key identifier: 32:52:B4:C4:66:02:CD:4B:43:A0:2F:99:81:77:74:D9:2E:DB:4D:AA
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019D3A1C36E9FD6279D45197F8DE49A59A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0E8D
Signing time: Sun 29 Mar 2026 15:00:20 +0000
Manifest this update: Sun 29 Mar 2026 15:00:20 +0000
Manifest next update: Mon 30 Mar 2026 15:00:20 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: mg9cuPXvjUu6m7PpOpm8PvQ2kEjuI2WskNt9KzP3xrU=)
2: kN8hpyULYXpGgg0l4UycfzoLM_8.roa (hash: p1hs9U044hjwHEauuvzM9PUu0iEmpC7Sk80cjjzAgHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:36:e9:fd:62:79:d4:51:97:f8:de:49:a5:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Mar 29 15:00:20 2026 GMT
Not After : Mar 30 15:00:20 2026 GMT
Subject: CN=3252b4c46602cd4b43a02f99817774d92edb4daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:99:2a:31:d8:91:a8:60:25:11:9f:8c:ab:
b0:e1:b8:bc:e5:76:2e:d9:a5:6c:c0:e3:12:80:e5:
fa:d4:9d:e9:14:e8:a6:4e:07:86:68:bb:df:9e:e8:
a0:96:86:4e:cc:a0:b0:69:e2:98:5e:53:da:e2:18:
b2:e9:da:06:b1:79:7b:f9:89:7f:3e:e1:6a:5d:1b:
ff:52:7e:23:c4:f3:7e:53:bd:82:6a:37:78:53:5b:
3b:63:01:64:db:67:dd:bb:e2:92:b6:b4:02:57:b5:
c1:bb:b9:17:72:04:90:6a:41:34:cb:58:b6:44:2c:
56:c0:60:fb:22:13:53:d0:ce:9e:c4:a0:ed:ca:0d:
45:b9:2a:c8:c1:9d:a1:be:20:c4:f0:85:ce:4e:f9:
e0:0b:40:5e:57:d4:11:1b:b4:2c:9e:6d:37:46:e3:
10:90:ad:79:4d:03:f4:5e:0b:55:96:e1:27:59:32:
a9:05:09:c1:e7:68:e4:28:a1:a2:8a:c4:f7:65:c8:
7e:94:e5:c0:11:ff:e9:df:72:02:37:e1:8a:a1:ef:
96:3f:d6:0c:b8:1c:c5:d8:ee:a0:64:2c:34:3d:36:
b7:0d:e1:fe:b5:00:11:1a:23:01:66:40:52:0c:42:
8c:97:8b:04:7a:5a:bb:58:83:d0:99:2e:c6:12:3c:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:B4:C4:66:02:CD:4B:43:A0:2F:99:81:77:74:D9:2E:DB:4D:AA
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:f9:09:e8:2f:f5:66:ec:c8:f5:ce:f9:4e:69:3e:e7:93:
c8:82:87:30:1a:0a:c8:a8:db:1d:77:86:4d:0d:c5:5a:b7:be:
d1:2d:ee:ad:37:ee:fc:34:bf:56:ec:4b:7d:e0:0e:f4:ef:03:
06:99:98:c6:eb:e6:a3:05:7d:e9:fa:14:7e:f5:c2:db:40:b3:
3b:a9:f9:a1:8f:60:a4:1a:8b:7f:b1:58:aa:1d:04:7c:79:35:
96:2c:f3:b2:5d:d0:63:27:3d:42:18:c6:d4:29:54:98:80:7a:
e5:f5:74:68:3c:f9:19:46:13:b2:3f:e3:67:2b:d4:d9:68:fa:
63:1a:e5:a7:e4:6b:17:cb:bd:5f:60:9e:81:c3:12:43:70:ba:
f8:88:f2:8e:26:4a:ef:ee:60:f6:5b:14:86:fd:ba:50:51:a0:
f8:49:ef:8d:6f:b7:4a:8b:a1:36:d8:34:2d:81:65:86:b1:36:
92:9b:f3:02:6e:59:85:bd:8a:d1:23:97:ba:17:be:1b:7a:f9:
2a:11:26:a7:a7:70:c2:63:e5:d2:69:3a:58:26:d4:c8:06:af:
c1:1d:67:bb:2f:01:86:df:57:da:80:36:89:f5:56:0b:7b:9c:
36:64:34:1f:ab:98:c1:eb:ee:c5:7e:56:8d:00:2c:42:79:dd:
d9:4f:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:16 2026 by rpki-client