Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: ly2MXmekCL1HySVFxCyuUI2K0WqqqicZtRTS4EhzqC0=
Subject key identifier: 48:2A:0C:A3:9E:97:85:F5:D0:1A:89:81:13:9F:54:D3:E9:2D:12:A3
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019D382E9642BC390017271E858B015A48A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: mtk79T9gDZTveFgjRZvGT8NL9oyzN4I7V+442WOD4Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:96:42:bc:39:00:17:27:1e:85:8b:01:5a:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=482a0ca39e9785f5d01a8981139f54d3e92d12a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:03:36:f2:88:5e:a9:db:6f:f0:bf:60:91:
c2:ae:0a:ff:c1:85:e5:97:0b:9b:a6:2a:c5:eb:f9:
5f:6b:56:ea:53:25:b3:61:02:fe:cd:6d:7b:e9:12:
06:d6:b4:97:a2:e7:05:d6:99:39:39:82:6c:ca:d4:
93:4f:8c:04:68:e1:c3:a5:2d:76:16:36:99:60:77:
17:4a:bc:f1:dd:b7:7b:87:fd:8f:2d:a0:fb:21:9f:
c0:44:e6:15:2e:78:e5:7a:6e:8a:97:18:4f:98:88:
48:b5:cc:5e:cb:20:fa:8a:2c:3f:80:28:aa:ab:2b:
19:b1:15:7e:93:36:c2:a5:8d:e0:72:f5:a1:29:8c:
f2:63:7e:5d:b0:01:7a:97:24:af:a1:05:fb:f5:32:
a3:8b:7e:1a:8b:ad:81:5e:60:17:93:c1:03:9c:ca:
52:c8:ec:f3:c2:67:13:64:57:52:6f:f1:4e:f1:2a:
86:99:bd:32:f6:01:0e:39:b2:ae:83:c1:c1:56:9f:
1c:ad:e5:e0:93:a6:5a:48:3b:2f:ca:0b:12:03:3f:
54:ae:f0:88:9c:a4:fc:5c:75:fc:00:50:83:14:3d:
69:eb:f8:d5:c6:b5:40:37:1d:8b:07:ec:c7:6a:de:
ea:27:db:7f:ca:be:3f:9a:92:42:6e:34:68:df:65:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:0C:A3:9E:97:85:F5:D0:1A:89:81:13:9F:54:D3:E9:2D:12:A3
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:64:65:ba:3a:65:94:c3:99:dc:07:ea:cd:cb:e8:c5:ad:
6d:07:7a:0b:fa:7c:64:a8:c3:c9:29:42:c2:08:bc:30:21:5b:
12:a6:f2:e9:e1:ae:dd:01:96:4e:42:4e:ad:04:fb:68:a7:3f:
19:de:b8:57:ba:2e:61:3b:76:f3:08:e3:ce:36:f9:9c:46:48:
9e:a8:37:dd:68:ff:01:53:cf:38:f1:ab:23:b4:1a:9f:fe:47:
dd:33:30:dc:c6:96:2c:38:8f:d0:6c:a5:66:bd:66:67:34:2d:
89:a4:5d:37:96:2b:24:96:b0:ca:89:46:c4:50:5b:78:04:44:
0a:01:e1:4f:bd:ec:02:e7:82:71:e0:d9:ac:36:0f:9c:f4:82:
c2:24:c4:81:9c:63:52:8c:ea:7a:b0:a9:b7:ef:27:27:64:aa:
69:c9:3e:f5:42:4e:76:37:4d:6f:d5:41:f8:fe:85:28:95:ab:
5d:d6:ee:3e:25:f4:da:bc:3d:78:b2:d1:99:30:68:60:c6:cb:
c1:f2:89:ea:0e:08:24:ac:67:68:5d:48:70:ab:4d:83:cc:73:
e4:d3:12:3d:f9:2f:7c:c7:5d:96:5a:95:99:ff:2c:4f:05:5c:
73:04:55:06:2e:05:6c:f9:68:e8:a1:20:c3:8c:ff:c3:4b:4e:
9a:f8:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:53 2026 by rpki-client