Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: S4FUuda0lxxNj5Eux+xBVG2PNAWutPDvGtyYwVjglfk=
Subject key identifier: ED:5E:30:1D:5F:55:E4:E7:81:57:85:F8:E4:F1:19:FD:62:9C:66:55
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 019D389C30BD394C3AB7BFF5A329F91EF64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: OnAgwLdUpQzNJnA7pMJph6gOrUw.asa (hash: wsRn9NEKfnSW8oD5dKJ7unDfbcpkUk4I+SjLO5gwn9s=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: xxwwzGrjM0MRwEc2UeUREJ3zA8jSuwa2sphJ3KBhOoU=)
3: iWP4svoOPBmLWqsmXNureCvqWt0.roa (hash: NogACOntswbtzLCi1NQN4fIlpsGo2D3P9AqJg73o1QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:30:bd:39:4c:3a:b7:bf:f5:a3:29:f9:1e:f6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=ed5e301d5f55e4e7815785f8e4f119fd629c6655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:2f:8f:b5:31:1c:84:f9:b5:ae:38:f8:1a:
3d:59:15:81:38:9a:27:7e:21:2a:b1:fb:9e:31:6c:
a4:e0:1a:b1:5b:99:c3:eb:9d:0f:24:fa:bb:63:94:
e3:1f:5d:c7:56:09:9a:83:1a:7b:16:57:b5:84:9d:
63:eb:5c:b2:d3:b6:b8:4c:8d:c9:7b:d0:fa:6e:a4:
88:e5:dc:79:90:1c:f1:24:de:61:ce:c5:d8:66:68:
13:3d:ef:ce:ea:a7:44:c4:7d:94:b0:9d:c2:50:4d:
71:cd:f4:58:a9:df:46:8a:85:74:a0:6e:f6:50:44:
e6:39:b7:f9:1d:d6:f8:1f:7d:65:f3:f7:30:07:08:
4e:57:68:6c:f0:83:29:26:2b:ad:e5:35:0b:56:68:
e5:c4:bf:f3:bf:cf:59:70:1f:a6:90:56:d5:c2:86:
b2:c2:e8:c7:17:59:56:68:c6:f8:f3:2b:e4:af:f0:
8b:7a:27:28:ef:f2:85:30:a5:a0:cf:0c:fb:76:bc:
3f:c5:3e:87:fd:bc:e4:fa:52:8f:c8:84:e1:78:4c:
e8:34:4d:50:e0:42:44:a7:95:14:71:6a:00:ee:d1:
01:ec:9f:44:56:d2:71:8a:26:c1:25:03:ef:70:e7:
65:82:64:a0:c1:72:a2:0f:a4:9c:96:fc:b3:11:b6:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5E:30:1D:5F:55:E4:E7:81:57:85:F8:E4:F1:19:FD:62:9C:66:55
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:14:5b:4c:a0:17:5f:7a:ec:cb:11:62:ce:89:d8:7e:33:72:
54:42:ab:ea:93:0b:9e:60:8c:29:98:54:14:16:52:e1:d5:cd:
f3:84:26:72:be:af:94:19:e0:f0:11:ff:e6:7c:18:c5:5c:05:
2d:22:4c:35:bb:8b:05:4a:7b:44:82:46:1d:97:0c:58:48:19:
12:13:0a:fb:2b:7c:d2:0a:08:f9:9e:35:e2:c2:21:fe:7f:51:
82:0c:ba:ff:1b:fb:8c:bc:98:5e:64:79:77:73:a1:34:25:c9:
68:68:29:39:1d:a0:59:e8:36:d1:a7:c4:0d:b5:92:4c:8e:6e:
06:7f:de:23:6f:29:47:b1:45:de:54:01:be:ca:5f:60:2a:bc:
7f:80:de:d1:ff:d0:97:c4:c0:65:eb:23:c2:33:70:ea:b1:14:
23:4d:9e:d4:68:41:4e:dd:0f:7c:7a:e3:42:17:fd:09:e9:81:
79:58:0f:15:6b:db:f4:c9:81:ec:e0:e4:a2:27:f6:3d:48:88:
f3:c2:68:2f:e6:a1:c9:ff:45:5e:1e:7a:88:3a:ed:58:0b:9b:
33:9f:87:12:3b:ab:0c:11:55:27:cf:e8:24:76:3b:99:00:88:
9f:25:e9:ee:9d:b9:22:55:16:89:33:ab:e1:08:3a:bd:ec:d6:
13:58:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:54 2026 by rpki-client