Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: 3tsP6jNp5T3tMlwHcKyHcbFVK7bGkHiMluagVWx+Ifo=
Subject key identifier: DB:0F:EB:A4:49:AA:7B:B5:4A:CE:68:34:70:51:35:87:85:23:7D:FE
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 019D3977ACC4950128B7A1B30B5D9FCA68C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: XpT5bToAk2yVkGsD2H8QH-1k_10.roa (hash: JI3NSWFN+FxQXfayrhjb6MsXxtHXX0TFrMIY+QodmCw=)
2: k8WrCsZkBwLRgKzoNGa116-cnGM.roa (hash: m45ffB5vKpiDauwl+X5WHu+pBj6uWofTDtumkdwbyDA=)
3: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: e7oMSBl8M/G3Qhjqzb/O2/96k7M9dGw6XJKdj5DkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ac:c4:95:01:28:b7:a1:b3:0b:5d:9f:ca:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=db0feba449aa7bb54ace68347051358785237dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:ba:c4:19:31:fd:68:f0:e5:9f:fe:2e:24:
c4:13:35:35:26:f6:80:c2:86:a5:41:c6:1a:8a:74:
92:8d:22:84:31:51:81:9a:c7:ae:54:38:80:b2:14:
c7:ed:82:52:f1:b5:2c:31:20:fa:db:90:03:32:e2:
36:a5:d4:39:f1:31:32:a0:04:8b:90:c7:d9:4a:93:
b5:18:49:d3:d4:d5:b1:80:16:65:7e:b7:2e:76:68:
96:b4:b4:e6:75:0b:1f:ff:44:3d:cf:74:6a:d1:cd:
03:07:5a:63:04:de:e3:32:90:a8:b4:6f:02:70:28:
7c:dd:1e:e8:a7:51:34:87:a9:8d:c4:04:ba:de:5c:
b0:13:9b:c5:24:af:3f:c9:96:f0:97:87:5f:35:8b:
93:49:10:b4:da:5a:d1:b8:b4:4c:8a:78:95:1c:ef:
38:d1:03:bf:d4:68:4d:de:cc:eb:10:02:81:6a:c3:
7e:cd:46:0b:f6:d1:ed:7d:32:26:93:b2:5a:90:16:
4f:15:e5:93:33:38:a9:40:56:db:ad:6c:22:b1:af:
b4:d3:f3:08:ae:41:41:92:e8:ce:9b:76:97:3a:70:
84:96:ce:79:52:12:71:09:29:80:4b:e5:8d:98:e7:
98:16:cd:c1:78:36:b2:65:20:b7:53:dc:56:79:01:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:EB:A4:49:AA:7B:B5:4A:CE:68:34:70:51:35:87:85:23:7D:FE
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:e2:2d:83:06:aa:b1:96:9b:05:91:98:fc:7d:26:bf:ff:
85:4d:ee:0f:17:9c:cc:20:f0:43:d3:78:ac:1c:32:75:95:70:
2e:0e:c2:56:9c:ab:c2:91:4e:8d:c4:39:03:a3:6b:45:9b:0e:
a8:ee:ca:f0:64:9d:78:83:1a:02:4c:7c:44:d6:db:2c:23:9b:
2e:a7:b8:a1:7c:a2:f4:d0:d4:fc:1d:94:5b:79:3d:9d:e0:7b:
8f:fb:7e:6a:8a:a7:70:eb:06:18:71:5b:14:eb:5c:95:f5:bb:
c9:30:7a:d4:db:b3:b5:8c:c7:3f:44:7e:0d:9c:59:34:c6:30:
4a:e1:c3:3a:21:69:30:dd:02:96:f5:1b:e9:48:ac:b0:e5:f1:
7f:a8:2a:73:16:54:36:8c:b4:16:98:d4:03:6f:98:ed:f7:37:
55:40:32:50:ea:df:3e:58:f0:69:cf:8b:6a:02:34:52:b0:0d:
a7:ab:fd:56:16:3a:c0:7a:f7:fd:8a:0f:33:20:d3:0e:0a:39:
ef:e5:dc:58:04:3d:36:77:cc:19:20:96:d3:59:71:9f:d7:ef:
33:9b:af:cb:29:68:0a:19:14:d1:22:52:63:7c:c1:87:a1:e1:
ee:32:df:41:37:29:74:62:47:02:63:b9:97:48:cd:41:e9:96:
db:99:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:01 2026 by rpki-client