Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: qxlAVKC8PvgLHAX9DQfWT3Yd5zW27qhP9fLFz+lrj3s=
Subject key identifier: 87:D0:12:70:87:A7:50:8F:A8:24:1D:60:E8:71:4F:B3:7B:9F:98:72
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 019D38660F5C6E95951D09533808F34030DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 040A
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa (hash: c6hadjikHVcvC+Q5pJmMMnFQCoRVJRf9GgAQl95ZwLY=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: 5SYr8N+rxI0HtfcTo2N08m0GkRt1TXLgKWkuDloGE7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0f:5c:6e:95:95:1d:09:53:38:08:f3:40:30:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=87d0127087a7508fa8241d60e8714fb37b9f9872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:74:c3:bc:39:81:02:47:cf:79:90:2b:55:
c3:40:ed:28:fc:e7:4d:78:d1:8d:bd:5c:2b:8a:9e:
32:25:17:2a:e4:fb:91:14:06:11:d0:70:54:18:57:
95:f4:1e:d9:a4:99:45:db:19:fe:32:3c:4e:36:ac:
7c:14:8d:82:08:07:0c:00:5c:90:59:a7:b1:84:cc:
b5:52:05:c2:64:d6:f0:6d:e9:c3:50:2e:d8:db:3d:
c1:55:f7:bb:a9:be:71:10:44:09:63:9f:1a:0b:18:
28:b4:9f:d2:e5:98:88:0e:b0:0c:2a:b6:c5:0b:52:
52:f7:3c:b3:95:4f:69:2d:b9:36:4f:d4:36:43:31:
c4:45:15:2a:ec:cd:bb:93:7a:f8:94:9d:58:ae:ed:
09:4d:7f:23:fd:df:7d:4d:ca:a6:d3:6f:a2:69:f7:
52:b4:e1:62:80:a7:e3:01:4b:4c:30:39:b2:ff:c0:
34:9b:9a:7e:b7:be:47:1f:2b:18:02:6c:8b:12:81:
ad:a7:f4:33:9f:3a:e1:2d:c2:f3:55:c9:10:cd:19:
03:c4:d1:c1:f4:7e:79:1c:ce:34:29:d4:56:d0:35:
0c:d8:b9:74:ac:b5:5f:3a:ba:54:9f:0d:d1:5e:d1:
9a:5f:59:d8:f3:bc:80:ef:e3:30:f8:1b:3c:2e:df:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:12:70:87:A7:50:8F:A8:24:1D:60:E8:71:4F:B3:7B:9F:98:72
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:d8:f6:0c:c9:d0:89:37:a3:84:e9:52:12:7d:1f:e7:b8:
c3:d5:b4:4e:2d:f7:65:fd:64:e9:50:90:e2:01:6a:84:b0:3e:
cc:c5:c1:3e:4c:a4:65:f5:7e:fa:9c:20:d0:dc:05:40:14:37:
37:33:08:20:b0:34:d7:86:37:9c:02:f8:1c:bc:88:3d:0c:88:
82:97:0e:a1:07:66:41:49:87:34:bb:3f:c2:7a:49:fb:58:ec:
e8:10:9f:af:25:11:d2:96:8e:b2:5f:26:ef:8e:0a:cc:14:52:
b7:77:88:4b:2b:a5:72:2c:4c:d1:47:9e:d8:e7:da:c0:22:7d:
22:2b:53:20:81:28:77:dd:71:5b:20:e4:fd:93:5e:b1:09:4c:
5b:f0:cf:d0:97:f2:77:1e:6c:87:32:3a:7a:df:72:5f:61:08:
c2:5b:f3:17:3f:85:aa:81:1b:53:d8:f2:54:10:d6:3b:fe:89:
a5:4e:24:93:89:d8:dc:20:24:b4:9b:47:67:49:08:25:e0:15:
49:95:8d:ba:a8:13:64:6e:9d:f8:40:65:96:a8:1e:11:a8:99:
4b:61:a7:c1:3b:af:73:68:03:1a:be:5b:4e:c7:ed:b5:8e:65:
70:62:9e:f0:50:73:10:19:35:81:60:14:3e:2f:30:27:34:4e:
3a:de:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:08 2026 by rpki-client