Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File: yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier: KrS0FciDh/PCKNPXtJzWLcIu4miS2P8u0+55ICcf1Yg=
Subject key identifier: A9:0C:B7:51:DD:D2:B9:62:BB:31:DA:AC:DD:07:37:8F:5D:F1:A5:9E
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 019D394165659747169D8BF024A2A4A1B9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 3vVZXpDUCirehXY4MO0zGH2vBO4.roa (hash: qpzysLhmvuGRqt7jkyatEEtyL/ESSTNsTcF+6pkg6kI=)
2: CjTHzz_pedQNs9Wy-ktvieMeLZU.roa (hash: GewhMZdSVK/eP+WdUo1TepjK8vxWB2eP26Uvtne0FXk=)
3: TQW4zD8K0vBl16MI3IxT8Xtlivw.roa (hash: 8QTOlJVZ39Tpkv2V9vgaCs5dPhtyiGWy37iuwYkyjaM=)
4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: U6nRjCAo+RF36HermsW7MzddOnBoICGBZASAfQvBK/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:65:65:97:47:16:9d:8b:f0:24:a2:a4:a1:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=a90cb751ddd2b962bb31daacdd07378f5df1a59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:d1:63:9b:e9:21:1f:cf:96:28:eb:54:87:
2a:d8:77:92:81:23:4d:cc:24:68:6d:a4:74:18:fc:
82:1e:ad:ee:39:54:13:cd:16:2f:42:f2:2c:78:c8:
db:4c:d0:71:60:8d:33:b9:18:63:e2:c7:bc:3b:75:
17:93:1f:2c:ae:f8:d8:97:c2:14:2a:96:65:41:e8:
8f:34:a4:73:4c:dc:65:fa:34:4e:b3:59:8d:b9:f4:
93:0a:fd:54:cb:ae:d1:bd:d8:ea:be:43:e8:4b:b6:
d5:4a:04:d8:21:6d:af:b0:fe:e8:71:92:a6:85:64:
b2:52:d2:34:9b:b4:f5:18:d9:fc:dc:c6:7f:f7:f6:
be:21:ce:5c:6e:77:94:8f:f3:4b:5d:dd:b5:5c:e9:
64:cd:ab:52:be:be:db:9c:d3:f1:8d:40:63:6d:a1:
fd:40:33:ec:11:76:ec:83:54:b9:09:ba:2a:8d:30:
41:14:f9:6d:19:22:c8:a6:b2:ae:4d:00:cb:7f:e1:
6b:05:55:3e:bb:3a:d2:dd:c1:a4:a4:0e:15:65:fe:
82:05:8f:80:d5:93:6e:02:60:63:07:51:df:24:eb:
11:3b:52:7f:0a:69:91:32:82:70:9f:c8:7e:a8:42:
aa:dc:21:99:84:97:14:cc:f4:7b:b8:64:7c:7f:fc:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:B7:51:DD:D2:B9:62:BB:31:DA:AC:DD:07:37:8F:5D:F1:A5:9E
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:c4:fa:39:1f:8c:69:03:c9:2e:e9:02:97:e7:a7:73:a6:
7e:73:fc:7e:ba:df:be:88:73:c2:d8:0b:08:d3:a4:e9:4d:2c:
82:86:3b:cc:ae:e4:f3:8b:8d:6c:5b:74:bc:a9:18:5a:33:2b:
e3:e1:c8:0d:7f:00:82:77:02:11:ee:c5:a1:be:e5:39:71:85:
4e:57:29:62:ab:48:49:71:96:b7:a3:ff:8d:39:16:05:ee:44:
60:fd:39:a7:59:99:30:86:6d:19:3d:a7:59:87:98:7a:6e:0b:
80:7c:ec:48:b9:73:06:d0:4e:2d:d1:e7:76:5b:79:8c:ba:be:
51:8e:55:47:f3:13:74:85:8b:10:b6:41:4c:93:3e:2c:2f:ad:
ed:5c:43:ac:2b:cd:3e:35:4c:76:21:1e:50:f6:ec:a6:c4:04:
2c:79:59:23:8a:df:33:e1:12:c1:56:a1:64:2e:51:a0:ad:ba:
fb:da:31:54:92:24:83:6c:8f:46:a1:71:85:ad:2a:d6:cb:b3:
17:0b:bb:d9:b6:26:e0:2e:48:25:55:a9:d5:80:2e:a1:f7:1f:
f7:49:49:ba:10:20:96:c1:ea:f5:82:46:bd:a9:65:14:0c:4b:
43:7a:c8:66:8d:3f:42:7b:18:c3:36:ae:59:c1:e0:12:6a:60:
f8:51:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:29:18 2026 by rpki-client