Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: 6+2XdRp8aONHaU98N6lJ8UoZS0mMTh6Dxaujzx9nkhw=
Subject key identifier: 34:FD:B7:91:0F:15:46:7A:7C:A3:19:89:EF:72:19:9E:C7:4F:41:82
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019D3940AFD0FB9DC6060B903604A3F6C300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: aCtZC5762oco+0SfOoYHkmFpOULDJcWWJNzxWuO9g8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:af:d0:fb:9d:c6:06:0b:90:36:04:a3:f6:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=34fdb7910f15467a7ca31989ef72199ec74f4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:70:8e:9b:8d:6b:28:7c:72:e6:a2:df:6c:
47:0d:0e:82:c1:4d:26:0e:85:13:85:f8:43:55:a4:
11:2e:65:37:97:90:2a:a3:ad:d1:1e:8e:64:d4:0f:
ec:1e:6b:d0:06:28:2e:8d:5b:e0:b1:1c:17:b9:9e:
7e:55:0e:a3:01:82:85:6c:d5:71:54:be:db:f8:4f:
41:23:ea:40:0b:21:e9:5e:6c:98:5f:80:0b:27:f6:
a1:98:7e:46:e0:50:64:76:d0:b8:be:d5:b8:6f:0f:
46:41:94:60:8c:4a:5b:91:52:59:5e:07:7f:c1:01:
6a:bf:0d:1b:f7:5c:02:21:98:f4:af:30:a1:16:a2:
65:cd:c8:22:5f:18:64:00:31:50:ff:4e:b8:b4:0b:
45:0f:57:8f:3b:01:d3:ba:15:e6:90:d7:0a:a5:fa:
ee:df:b7:8d:e4:08:91:f4:ef:8d:f5:47:bd:db:35:
c3:61:e1:74:1f:41:4a:e5:06:1b:a1:33:81:62:fd:
4d:84:39:f7:ea:de:e5:76:47:27:d7:e5:de:49:9c:
b5:17:b8:14:d7:cb:8d:6a:10:2a:be:64:b9:ee:cb:
c3:fc:c2:5a:8b:3e:f2:f0:ef:95:15:43:c5:c3:c1:
be:ab:2c:3d:e3:e7:84:61:40:49:29:a2:cd:98:9c:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:B7:91:0F:15:46:7A:7C:A3:19:89:EF:72:19:9E:C7:4F:41:82
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0f:bf:36:4c:69:68:dd:c9:3f:5e:55:ab:81:76:50:d7:8a:
69:12:cf:02:07:d9:ae:25:94:05:a7:0f:74:17:c3:4c:d3:6c:
27:5a:a7:b7:91:29:2d:24:69:25:9f:cc:b8:54:3a:ba:c8:b0:
c8:1f:1c:44:d5:5b:23:74:63:6d:70:82:40:a6:ee:73:1b:3d:
2e:24:28:f1:f5:7c:fb:88:5e:56:3a:06:3d:e3:fe:c2:a9:c7:
65:cb:be:e7:60:03:8c:d5:0c:e2:6c:43:ae:43:94:00:d3:02:
7f:36:9d:f2:e5:9e:38:96:ce:54:62:6e:d5:f6:24:00:37:50:
14:20:19:02:7a:8c:28:3a:59:e2:9d:11:af:98:c5:2c:35:4b:
38:82:d0:ab:96:ee:0d:39:f6:d2:d8:ed:fc:96:be:c4:25:c4:
85:63:2f:a9:31:e3:59:36:ac:e5:bb:d5:b5:5f:2e:5f:de:e4:
7d:ae:ec:9d:04:ff:5e:26:bc:f7:7b:6d:6b:1a:fe:bb:74:7d:
62:64:95:ba:ba:3f:26:76:e9:6b:a1:44:b9:5f:fb:d4:12:07:
e8:81:a4:4d:c5:78:7f:d2:7a:02:55:5c:32:cd:61:8b:99:ed:
8e:47:1d:ba:70:96:38:c1:6f:79:8e:3f:39:27:0a:26:32:0b:
ff:a6:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:13 2026 by rpki-client