Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: iuegZ+bCG8D8KxqavYZobGcLOdSAjCe/eoolsodBmTA=
Subject key identifier: BA:36:6B:F5:27:90:ED:69:83:C4:EF:BE:DD:FD:E5:58:4E:1D:BF:24
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 019D382DD054C3C6BF0A2E353764D5E76DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 0435
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: 1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa (hash: /nAeBMYlXnQjZhhvuAHNLWLzGOzbbDnBysJXkWN1VRY=)
2: fhE6sPigjHqQymOx_07DpW-kE1A.roa (hash: nhb6C1pl90rN5e/RFq9dkJcLPr8IuI/iDY7Kr68b/2U=)
3: q4uZxE3KkC0inDgHTmM59wbNnqY.roa (hash: w6RhV4LCKX7pRPd2Vmf4e6OYIboTowPiLjjbc9D8/Z4=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: YiVegySKQ3SyDJhZUFFE1jsJX2o6e6srFJOdljJ5C84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d0:54:c3:c6:bf:0a:2e:35:37:64:d5:e7:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=ba366bf52790ed6983c4efbeddfde5584e1dbf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:da:2c:79:9b:02:4e:b9:fb:e3:9c:06:64:
df:b3:41:08:e3:06:6b:2b:6d:f9:0d:ae:b9:90:4b:
90:d3:da:30:22:f5:9a:c4:34:61:2b:1c:33:9d:d3:
60:fd:81:1e:93:e2:fa:70:ee:07:fe:5c:d9:07:74:
61:fb:6d:fc:3b:e0:cd:39:73:06:db:80:db:0e:03:
c2:3a:2e:06:96:e3:8b:04:b1:7c:f9:f1:ff:4f:37:
ea:67:a7:8a:c6:94:8a:14:f6:43:72:8b:99:57:45:
93:47:d5:9e:3d:fa:94:f4:2f:ef:f8:9c:bd:57:1b:
84:a1:78:34:ce:42:52:db:fd:9f:18:b6:17:28:66:
05:96:00:e9:5d:f4:9c:9a:ac:6f:be:a7:d3:e3:d2:
cb:57:b3:d8:8c:1e:3f:1d:3d:09:e0:32:3d:59:f0:
bf:28:87:34:c6:d0:38:0b:97:4e:11:e1:66:d1:0c:
46:9d:a8:28:0d:45:41:5e:c2:46:30:5f:81:bf:bf:
71:88:90:e0:ad:d2:13:52:ab:9a:b1:01:cd:24:05:
ba:d4:ff:a4:f0:0e:37:e3:78:70:df:1f:5c:5c:4b:
e3:0c:7f:ae:fc:5a:19:3b:df:76:e4:b2:fc:4f:84:
52:d5:d6:41:37:30:1b:9b:96:f9:84:bf:a3:77:86:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:6B:F5:27:90:ED:69:83:C4:EF:BE:DD:FD:E5:58:4E:1D:BF:24
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:48:a3:23:8c:1a:f3:57:30:2d:4b:46:7e:33:51:83:b5:
af:8a:cc:78:37:f5:f8:16:06:69:9a:61:a0:a1:62:79:90:46:
b0:c8:27:35:8f:d0:43:ad:ef:ed:f2:e3:48:3c:0f:07:7e:52:
74:0b:0a:43:e5:12:0f:f5:43:77:ae:75:d3:fd:4b:0d:2d:b9:
b5:01:91:5e:15:d7:3f:f9:f9:88:1c:bd:1b:9d:4e:91:4f:b0:
7f:bb:29:76:c9:55:63:bd:ae:61:d3:3b:9a:29:07:45:0a:33:
0d:00:1c:c2:61:b7:7f:45:4d:ca:37:8d:72:99:5a:96:f7:c2:
d6:0d:7c:9d:a4:8b:1c:4c:48:ca:0e:39:9e:9d:55:b0:99:f5:
81:5e:23:c9:06:38:37:56:9b:1a:7a:9b:92:58:b1:a2:a7:0e:
11:aa:99:b7:32:db:29:e1:1c:c6:52:33:1b:17:52:e5:f4:89:
4d:12:eb:9c:42:61:13:c6:ad:07:cf:bf:c3:3c:19:72:58:83:
03:9d:bd:16:d6:e5:d2:db:90:d1:b3:95:a8:76:b0:83:9b:6c:
41:92:12:36:f9:c0:7f:bc:12:28:45:de:da:30:85:9a:f0:44:
9d:2f:1a:c2:fb:b2:40:02:e4:d1:b1:37:00:f6:29:6c:cb:35:
6c:dc:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client