Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: aW1IXhMbr+kliYcebbjLXVx50hK6/D9ULlF6NBE9BYs=
Subject key identifier: 3C:F6:F8:83:49:98:7F:64:82:79:7B:AC:6D:71:72:68:B4:59:F5:AC
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019D3909DAF59CC74FFBB1583EA38D8FAE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: aROMX3nhLZqryNRJXwP1ZsS073k.roa (hash: g+wD5MW4jZTbZvYAo4VBlWyrm2dqeMZiBJUsm2vjVD8=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: ANRHUQAX7vTsgCloTyQr8R1E5+4EVrFWR4EqH/YzsiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:da:f5:9c:c7:4f:fb:b1:58:3e:a3:8d:8f:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=3cf6f88349987f6482797bac6d717268b459f5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:cd:55:28:76:50:d5:14:71:43:11:01:95:
e6:97:b5:e7:24:e7:5c:27:73:4c:11:36:7a:f1:48:
71:40:b1:6d:70:64:79:23:df:c8:15:18:ec:d7:28:
6d:61:c9:35:de:e2:5b:ec:cf:b4:3b:8b:62:d7:95:
28:6f:7f:06:62:a1:25:ae:8c:f2:54:a5:87:8e:cd:
fe:a7:88:24:e9:6b:13:69:3f:42:b4:dc:7b:45:0d:
e3:d1:f5:fc:ee:08:42:a7:40:ee:79:d1:dd:1f:02:
da:49:b3:23:00:30:f7:f0:69:22:bb:cf:5e:24:1c:
11:19:31:21:9b:5b:b8:03:cd:a7:01:f7:9a:9d:79:
37:c5:20:43:c8:a5:37:99:f4:4a:5a:33:d0:ae:aa:
4b:1c:09:86:17:06:fd:51:0f:50:37:ec:62:32:f6:
19:43:aa:b0:23:41:2a:3d:0c:a1:93:03:51:02:2a:
9c:36:2b:52:ef:82:25:b3:9c:6a:1b:34:33:da:77:
ec:6e:40:53:32:b6:9a:6c:a1:22:cc:8e:39:56:45:
bc:f4:15:13:00:b0:75:e6:9d:53:f7:49:96:5f:67:
9f:2d:73:47:56:7d:f9:0d:b4:6d:61:bb:f7:ef:23:
0e:d9:47:c1:1b:bb:8e:f7:bd:7d:1d:c1:aa:96:9b:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:F8:83:49:98:7F:64:82:79:7B:AC:6D:71:72:68:B4:59:F5:AC
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:7c:5d:2e:b6:12:80:d1:25:d3:92:22:48:5a:4e:47:08:
11:b7:7f:f6:58:cb:b8:47:80:31:0f:fd:58:d7:4b:20:b4:0f:
92:9a:93:c0:2e:41:fd:25:3f:72:45:d4:3f:6f:a8:21:0c:6b:
39:9d:29:49:82:bc:0f:14:b2:42:3c:ef:db:95:d5:08:aa:e3:
26:22:4a:9e:62:0d:fa:f8:76:c1:6c:d8:94:9c:4f:8f:96:1b:
31:8a:98:ec:48:bb:c6:f3:29:5c:62:ed:83:d8:2b:0d:7f:ea:
a5:9a:29:d3:21:5f:7c:26:4b:d3:6b:e4:68:df:8f:4d:30:7f:
12:ba:ce:1f:19:fd:da:ca:ac:62:f7:fd:60:a2:f4:64:19:b4:
e7:54:15:d8:b7:72:58:20:89:c4:52:a8:d7:26:7e:4a:70:d2:
7f:c1:b9:56:c8:9c:58:d8:da:06:22:15:6d:23:42:49:c8:4e:
58:42:cf:98:c6:29:2b:a4:bd:5e:d5:61:87:eb:4d:7d:e4:12:
a9:ce:a4:4f:2b:f1:48:af:3f:d3:97:12:e6:15:97:72:db:35:
e4:f3:8a:a1:50:6f:27:41:06:25:7e:fb:b6:12:47:10:a4:f2:
f0:f7:0f:88:65:bd:7b:fc:41:08:e8:52:0f:de:f7:26:fc:41:
13:90:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:08 2026 by rpki-client