Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: UTs1Q4SgM1WsbClCkfHW8WNwsVpoxa5MtAox9WVtwb0=
Subject key identifier: 35:15:16:2B:A2:02:01:6E:13:63:33:B4:F0:D4:6A:E9:AB:43:5D:81
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019D3977787A75CF23C7BEA6EA1E29B114FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 102A
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 0EalOX44qspmegVtsk1N4TSFVRU.roa (hash: JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=)
2: HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (hash: z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=)
3: PdnPH6yi9ZnmicZhFfMsL9RyZYk.roa (hash: X/n23r26eZcatz6lbggQ+x24Y1SqygjdVMpGAvxLhes=)
4: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: FddV4OHm41DC475lsPRVG3s/k1GkNucCvYjtepLYYpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:78:7a:75:cf:23:c7:be:a6:ea:1e:29:b1:14:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=3515162ba202016e136333b4f0d46ae9ab435d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:23:aa:81:e3:c7:70:90:2b:0e:20:41:0b:
36:fb:0c:b2:3d:bf:f3:a1:7d:5b:eb:f8:6d:80:ac:
7c:4e:40:77:81:4d:ad:2d:67:9b:82:7d:de:80:b3:
58:49:8d:17:b1:92:f9:ce:25:fb:92:bf:d2:db:fe:
d0:a0:7c:3b:44:03:27:aa:43:d1:95:ab:19:ae:99:
44:ec:f7:42:fe:00:b0:fc:d7:dd:ec:81:3f:bf:08:
4e:d2:85:cc:a8:b1:ab:4e:08:bf:48:40:0b:f6:6d:
46:d1:58:f2:a9:86:ad:ed:28:a8:4b:d8:da:df:69:
e4:d8:f3:04:f8:d9:10:de:ce:94:d4:75:42:d6:28:
5e:29:91:1c:81:8c:c5:f3:2a:39:46:4a:0c:b4:8b:
89:d8:c6:8c:9c:f7:7d:65:1f:19:2b:72:a3:22:16:
5a:9e:a8:e5:b9:5f:30:b7:31:3e:c2:c7:19:91:74:
77:d3:ba:20:6b:ba:c7:8c:31:ea:18:06:a6:06:f3:
1f:68:0f:88:87:9d:12:37:ba:05:bc:64:5c:20:d7:
4c:94:61:ec:e7:96:16:25:33:43:80:4d:0c:21:47:
c7:18:56:8d:47:a3:e4:82:ce:59:0a:cd:48:6d:e8:
79:69:a6:bc:f7:95:53:40:f7:6c:9b:c6:f7:ce:84:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:15:16:2B:A2:02:01:6E:13:63:33:B4:F0:D4:6A:E9:AB:43:5D:81
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:26:ed:c0:e4:4a:3b:e1:8f:50:0b:52:00:c8:c0:2d:d2:df:
eb:07:19:59:4e:b2:78:52:26:a9:77:ff:a7:60:26:b5:96:cd:
63:87:65:95:6a:28:f6:61:2a:ac:47:02:f2:47:51:72:f3:04:
93:91:74:42:25:e7:5b:d9:dc:3d:03:17:ec:74:95:56:1e:e0:
0e:5e:9f:49:49:a1:d4:71:42:d5:72:33:f9:05:4f:9b:26:86:
0d:6a:d2:24:95:47:a8:f2:ae:55:fc:62:3e:ab:c3:3f:ea:17:
74:c5:d3:74:bb:1e:ed:d6:9e:82:c8:64:54:4e:54:38:05:f3:
83:4f:2a:7c:43:fa:9e:3e:75:13:5b:8f:cd:14:37:a2:3e:cb:
28:40:54:a6:58:80:6f:f0:e7:6c:e5:79:16:3d:47:96:27:16:
7f:fa:44:01:ba:ed:7c:85:1a:68:cf:53:cb:66:31:1a:da:b5:
d0:ba:a4:c9:12:00:63:e9:da:a4:e2:8f:61:3e:9f:85:aa:36:
f8:33:75:5e:6b:3e:10:11:bd:92:1e:a2:43:fb:78:ec:f3:84:
65:38:17:89:61:6e:8b:25:67:7f:87:15:23:05:11:49:3d:4b:
c2:2a:89:8a:d9:f5:7b:b2:af:1f:af:cd:82:88:3a:83:42:7c:
46:5d:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:01 2026 by rpki-client