Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: oWWsh4Zx9qHKwcdyZsyND2PD3mi7H2NcngAiJwSI4SY=
Subject key identifier: EA:7E:D9:DF:7B:29:5A:15:95:E9:C8:92:BF:F4:EB:35:AB:D4:21:5E
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019DDD9F618B9F8996F13A8E326D04C2ED35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 08A3
Signing time: Thu 30 Apr 2026 09:01:43 +0000
Manifest this update: Thu 30 Apr 2026 09:01:43 +0000
Manifest next update: Fri 01 May 2026 09:01:43 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: HzyhcF4xmKeFF5TIj8GsAOvoH6IWbRve4uDzGRuiW9I=)
2: eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa (hash: IitlgjD1A9ywmqlI7KTae7u+H+3I3h+Rr83XGfruLVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:61:8b:9f:89:96:f1:3a:8e:32:6d:04:c2:ed:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Apr 30 09:01:43 2026 GMT
Not After : May 1 09:01:43 2026 GMT
Subject: CN=ea7ed9df7b295a1595e9c892bff4eb35abd4215e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:43:c1:7c:64:2d:d1:c0:6e:87:1c:05:74:45:
d1:90:4d:9c:9e:f7:20:68:b8:0b:00:f3:75:16:3e:
92:2d:61:79:ef:7d:1f:c8:fd:e8:af:f1:ff:4c:4d:
cd:c1:5a:98:3c:31:65:e5:f5:9f:e8:6c:2a:4c:98:
50:95:09:33:6f:94:1d:9a:c2:cd:e5:8e:ba:1f:e9:
fe:31:4b:f1:bf:77:67:e7:51:89:80:69:96:65:d8:
54:3b:3f:45:9f:58:9d:a3:5a:74:ed:e9:64:0f:94:
5e:bb:e9:bf:4d:b4:fb:4d:b7:46:14:31:9a:4c:fb:
8f:56:67:3b:e3:dc:4b:5f:15:b2:5e:ce:f6:9f:d0:
cd:72:73:e2:1a:37:85:26:d1:8c:74:62:ad:a2:c0:
e7:91:56:e6:81:34:3d:1f:12:42:01:ae:29:02:37:
3f:97:40:4c:fb:08:78:da:f8:f2:95:47:48:6e:33:
78:66:a7:3a:2a:2c:66:a3:9b:e3:45:f4:a0:d4:6b:
6b:5e:dc:91:99:51:c5:b0:3f:c0:b3:a5:95:86:1e:
87:d3:a4:9b:ab:90:13:1c:a4:df:66:a1:92:a2:b3:
52:8d:03:64:59:3a:88:d2:16:7b:66:4e:97:55:71:
8d:b7:a7:1c:eb:eb:ea:21:7b:43:43:4a:2e:2b:16:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:D9:DF:7B:29:5A:15:95:E9:C8:92:BF:F4:EB:35:AB:D4:21:5E
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f9:ae:01:30:01:32:07:41:53:d6:d9:bb:5f:6d:58:f1:8c:
e6:e6:84:c7:b8:c3:26:e9:5c:fe:97:8c:0f:ac:3d:3d:ff:56:
cc:fe:33:82:7e:9f:ef:8c:f7:2b:e4:bd:eb:64:e7:8d:5b:50:
e7:f0:c2:cc:02:69:b0:15:b1:05:ec:a6:e8:b8:e2:47:1e:24:
6a:ec:c3:47:40:78:97:da:14:a9:86:1f:1a:63:d9:fc:ab:c8:
a6:95:3f:f8:f1:25:c7:dc:3e:fd:de:d0:48:9d:fa:b3:06:97:
31:62:07:56:1a:0e:c5:4d:ed:e1:d8:68:a0:34:18:3c:54:a8:
d9:0a:38:ba:e6:0f:a1:86:3e:15:36:4b:16:c5:32:e3:ca:c8:
86:55:05:7f:8c:d2:8b:a4:a4:c0:72:67:28:e4:2b:47:95:09:
4c:20:f4:e0:75:99:61:b4:68:47:5c:5c:1e:bc:5a:83:f9:1e:
16:46:7f:f2:1f:a3:c9:9d:31:d8:59:f9:82:16:01:9c:b5:6c:
9e:45:71:8a:b8:d8:f5:f1:3b:5b:2c:d6:17:71:52:65:dd:ea:
da:e0:04:77:f5:23:c4:ce:55:b7:6b:72:19:6b:18:5a:0f:ec:
bf:1a:d4:82:a7:49:de:d8:cc:9d:a8:cb:7e:8a:be:5d:5f:ba:
94:8b:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:32 2026 by rpki-client