Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier: b2pMGhoiCqjeeqUdv8O7sqyo4RwB7x9fVqUpNC7k7s0=
Subject key identifier: 0D:1D:49:96:43:7F:C7:3F:83:7C:91:BC:C8:ED:54:DF:93:A2:59:9C
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial: 019D38D36287845FBD6A62ADA58F05DD82C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: P3GL0lEPXHxX6ReXD2EE-N5BOPY.roa (hash: K1gHtEMD2Pdz0kCStDLaFagZHw3HfNCxhWsobTthfNg=)
2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: 2hJ8a60xaLH26ekgMeFJNvsExVw2Jr+zCNqv4hfMKoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:87:84:5f:bd:6a:62:ad:a5:8f:05:dd:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=0d1d4996437fc73f837c91bcc8ed54df93a2599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:0f:d7:be:b8:54:ed:3f:ff:2c:a9:4f:1b:
f1:07:36:d7:f2:c1:42:b7:5b:f0:56:d0:2b:9c:07:
f7:f2:95:56:86:70:5c:95:f2:f8:1b:45:fc:d5:3e:
c1:ea:58:f8:75:77:32:36:3c:ca:f3:65:10:3d:d0:
0a:cb:3e:6a:12:70:9d:82:1a:11:88:0f:6a:e8:4d:
bc:df:79:61:27:05:f1:c2:9d:e8:28:89:72:8d:1c:
ab:e0:12:69:c5:c2:64:81:b9:d5:16:a5:b6:95:0a:
7c:58:64:a4:90:32:28:ea:9c:7e:c2:c0:84:38:d5:
72:93:53:05:6a:cf:d7:4e:36:4e:18:77:ba:12:19:
3d:58:f5:ae:53:da:b3:88:16:88:90:49:b6:f4:e7:
1b:f1:3b:67:5c:f8:6f:b8:c2:93:05:8c:42:38:d6:
bb:0d:88:03:c7:84:74:aa:fa:ce:bd:4c:40:66:6e:
9b:1e:92:fb:a1:f7:27:55:30:4d:56:f5:af:69:28:
92:1a:b8:45:4e:d6:a2:f0:0d:b2:ec:db:d5:be:a8:
9b:db:33:45:45:95:73:74:f1:29:bf:18:6f:61:90:
d9:02:89:3c:b1:21:b4:e8:8f:b2:4d:7b:67:d6:f5:
5d:e3:c6:82:e2:09:60:0a:b5:14:a3:09:36:1a:ba:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:49:96:43:7F:C7:3F:83:7C:91:BC:C8:ED:54:DF:93:A2:59:9C
X509v3 Authority Key Identifier:
keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:89:94:5a:66:da:db:c5:c9:9e:bb:11:46:b3:fe:56:8c:97:
08:54:2f:ea:21:48:48:4f:3c:ad:1f:8b:e6:73:48:fa:e9:ee:
c6:1f:6c:65:86:7c:4a:ca:85:fd:8f:7a:f6:b5:f2:0d:99:b3:
c7:a2:e1:ef:7e:58:99:c6:eb:9e:a3:b5:16:46:23:bd:d1:d8:
39:90:da:6f:91:4b:7e:53:3c:fb:93:86:37:24:28:60:8f:42:
05:37:c6:a5:85:f4:4a:f0:d8:d5:9a:80:22:7c:30:26:fb:d5:
28:43:c3:f7:1f:a8:ea:16:d0:16:49:73:7b:cc:77:3c:65:9e:
59:e4:2a:ca:4c:01:48:3a:83:ad:10:73:ee:84:69:b9:83:b6:
a5:d2:36:0c:1a:36:7e:59:ef:ed:ec:a3:76:60:38:d7:5d:fd:
67:76:aa:44:b8:af:c5:81:68:65:15:19:f2:a4:9d:af:a3:a0:
ab:1b:5e:3c:3f:75:a0:e1:90:31:da:f8:5f:c9:82:a9:92:f2:
4b:1f:11:0e:32:c2:67:0c:76:8b:2d:90:bf:4e:27:f1:dd:57:
1d:f5:6a:52:bc:21:21:b8:58:b5:76:b2:6a:d8:e0:d6:c6:33:
f3:9a:94:56:dc:5f:fb:26:10:f9:d0:2d:47:86:c0:5e:08:1c:
23:d5:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:25 2026 by rpki-client