Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
File: YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft (raw, json)
Hash identifier: WP9NLDdWoL2O/S6omhZeUEhTbUkRD+igGynJGAn9Sok=
Subject key identifier: 3F:7B:81:6C:55:C6:FC:69:50:9C:A6:86:BD:7C:9C:08:53:C5:2D:B8
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Certificate issuer: /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial: 019D3A1CD6081B0B9D4D1701B9FCAC48488C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
Manifest number: C3
Signing time: Sun 29 Mar 2026 15:01:01 +0000
Manifest this update: Sun 29 Mar 2026 15:01:01 +0000
Manifest next update: Mon 30 Mar 2026 15:01:01 +0000
Files and hashes: 1: Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (hash: w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=)
2: YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl (hash: ocjYWrhM4a92o5Wzqu1lNjlYE6qoQPULw/CukjMVwqM=)
3: jyKuE2XBeuJrzXa_q0tmSaVEGSw.roa (hash: /T26sfmgIuFdLLHz0t8HyV2eonc//D9WC+03dI2ySjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d6:08:1b:0b:9d:4d:17:01:b9:fc:ac:48:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
Validity
Not Before: Mar 29 15:01:01 2026 GMT
Not After : Mar 30 15:01:01 2026 GMT
Subject: CN=3f7b816c55c6fc69509ca686bd7c9c0853c52db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:fd:e8:4f:05:c1:dd:cb:7f:07:70:fc:a0:
58:c3:b7:87:ab:cb:5c:ea:1c:83:68:48:e0:1f:e4:
66:f3:0b:77:57:9a:05:0b:55:0b:fa:b4:a0:47:83:
1f:43:ef:58:f9:7d:99:c3:06:7d:5d:35:1e:2b:04:
4d:99:2d:8b:38:2e:a7:07:b3:89:e0:e6:c5:34:28:
2e:da:34:6c:c2:02:e0:aa:54:39:8d:57:48:f8:c5:
a9:78:04:9d:1f:ab:2b:4d:63:bb:7e:09:75:82:61:
cb:88:fc:14:1c:db:2e:67:2c:b9:14:3c:b3:d8:32:
d4:03:f5:00:de:ed:b7:6d:1f:f3:cf:a2:9d:13:0b:
a9:46:dc:6f:02:4a:db:f4:04:2f:fe:90:7e:1b:eb:
8c:b9:88:1e:26:01:11:3f:db:ad:93:c7:49:14:9c:
d5:86:41:7b:31:bd:ae:29:73:08:c5:67:2f:04:54:
1c:80:c1:c6:47:3b:e2:48:90:bd:ec:00:55:68:86:
1f:fb:1e:4f:bf:e1:be:d2:c4:33:c3:06:21:a5:7e:
e0:9a:e1:c9:aa:a9:5c:d4:f3:d9:ee:1a:46:9b:4f:
20:81:ed:e8:15:e3:05:2e:80:8a:5e:3d:15:e8:46:
a3:13:b7:2b:4f:dd:da:6f:9f:b3:c4:ce:dc:f0:62:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:81:6C:55:C6:FC:69:50:9C:A6:86:BD:7C:9C:08:53:C5:2D:B8
X509v3 Authority Key Identifier:
keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:73:42:01:06:a3:65:d7:c7:40:41:9d:cb:04:9f:d6:4b:
7d:42:94:72:d9:b6:1f:cf:94:cb:c2:85:0a:5f:5a:8f:5f:ad:
f6:e4:12:85:0c:91:80:20:7d:c6:fe:1a:8b:b1:62:d3:df:db:
84:fd:55:a4:69:04:9e:63:db:dd:22:35:a0:84:77:98:bd:e2:
a3:c1:88:85:de:d6:f5:34:f0:64:7b:8b:15:48:d9:f6:63:d8:
7a:5d:99:5c:7d:a1:1b:e7:49:57:1e:ba:e9:9d:23:26:64:4f:
2a:e3:42:e4:29:66:1e:7d:fe:90:34:65:73:e2:3d:2d:0f:5d:
0a:41:b6:06:3a:37:6e:07:4c:9d:9c:23:c2:f4:c8:83:a3:f8:
4d:58:0f:6c:77:c8:d1:ee:32:15:18:c6:28:71:2a:c4:7f:cf:
21:8e:b7:93:ef:fd:80:7c:66:86:75:b4:66:5a:78:bd:dc:77:
f0:ec:f4:43:df:1b:75:d0:0b:72:c4:0b:2b:48:19:7c:e9:37:
3d:1a:7b:0f:e8:ec:51:b2:d8:5d:c8:29:76:05:ee:a5:51:4f:
f3:be:5d:35:be:8f:d6:2f:0e:bb:9b:7c:6f:d6:b0:e8:1e:bd:
3d:8a:2f:8f:d3:d9:a3:a8:1d:72:46:73:f4:89:03:87:09:b6:
fd:e6:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:38 2026 by rpki-client