Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: rN567nOnCX4HUne83Jvs8of2PnPRg44FKZyhe6qXes4=
Subject key identifier: 3B:15:11:0D:FF:8C:8D:1C:FA:AD:55:E4:EB:9A:66:B2:F8:9A:D9:EC
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019D39407B0FFFD12A6833BF862FFC2FC9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: mB5ubDB2GB+6D/GPr5F9p/rmk4xD6gr7q3gCA2kK5cw=)
4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7b:0f:ff:d1:2a:68:33:bf:86:2f:fc:2f:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=3b15110dff8c8d1cfaad55e4eb9a66b2f89ad9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:39:5e:da:a2:ea:06:56:1f:f3:c7:e9:45:
23:ff:7b:51:ed:c2:e1:ef:f8:88:2c:85:86:50:ac:
99:72:ad:03:fa:a9:93:55:c4:07:11:a2:87:ae:5d:
1e:7c:d0:ce:cf:22:f3:7a:08:85:43:64:8c:49:97:
93:a2:47:38:7b:8d:d7:a2:9b:01:de:3d:de:d6:ca:
19:6f:ab:f9:ab:aa:c4:d4:27:fe:19:44:ad:6d:9a:
dd:77:c1:52:39:40:af:b2:14:aa:ef:6c:5b:2d:f1:
4f:9f:cb:65:dc:0e:d8:9d:bf:9e:d4:d6:15:e8:d7:
ef:d3:da:03:30:f1:3c:7d:99:8a:dc:6c:47:fb:5e:
7c:74:08:be:a1:7d:c4:87:20:a5:13:d8:d9:3a:89:
28:ab:d7:9a:d0:ec:a9:ae:b2:40:58:0a:d5:88:c1:
68:e6:8b:55:5b:d1:57:d5:bc:87:d0:bf:eb:9e:33:
11:e5:0c:04:e4:97:c2:fa:56:25:9c:6f:98:b8:c5:
4f:7c:c4:d1:a1:f9:7b:65:10:13:10:9b:d2:d2:05:
fa:1d:44:1f:1d:e6:67:29:72:b7:e4:00:f5:62:ac:
17:86:d3:ce:00:7b:85:dc:02:b6:97:8a:5d:cd:68:
af:4d:c0:66:c1:7b:1c:cb:99:43:2d:87:bc:6d:94:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:11:0D:FF:8C:8D:1C:FA:AD:55:E4:EB:9A:66:B2:F8:9A:D9:EC
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:31:4d:76:fa:37:b9:65:8e:5b:00:9b:53:a4:ba:bd:04:89:
56:9d:30:97:6e:df:38:e4:b9:86:26:c6:00:4c:7c:71:25:59:
1d:ac:c8:89:ec:d7:a0:7b:d3:17:9b:6e:29:6b:db:0a:a4:da:
be:d7:5d:1d:51:4c:53:19:6e:8f:8c:de:fc:b4:f7:fa:8c:90:
82:54:19:48:ce:64:0a:f7:ca:e8:46:86:5e:65:f9:d3:f1:5a:
36:d3:07:b5:4a:d8:47:1c:30:57:cf:0b:4f:5f:7e:ea:50:e9:
70:15:a4:72:56:c0:78:cf:d7:62:ed:76:b1:c4:df:17:0b:ba:
00:3f:d6:74:e9:6e:bf:f9:c8:7f:be:9b:6a:c6:4a:e5:52:ad:
be:76:b1:b7:ce:32:1c:d7:b2:71:6f:8c:7b:55:c5:23:41:93:
58:8d:11:bd:62:59:07:e2:82:eb:49:2f:2b:3e:79:80:ab:01:
80:8e:d0:2f:e5:11:04:ed:d4:87:b4:8c:bc:f2:cd:1c:5f:9c:
fe:1b:8d:45:b9:84:44:ed:a2:01:5f:80:21:b9:ec:14:0d:51:
ef:30:f7:b8:72:dd:c9:88:43:8c:1e:54:87:a2:92:d6:b3:05:
73:de:52:0f:44:e2:88:92:d7:64:76:15:07:57:7e:5a:fa:80:
81:52:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:52 2026 by rpki-client