Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: 3S7lBVcoEl35M6VJ4OYjTuReA0DJBqH4cmAchz162rg=
Subject key identifier: 80:F2:A5:13:17:78:0A:2F:41:D6:08:43:9C:7A:C1:0D:A1:08:01:2B
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 019D37C031E61DD571EC7170757B9D1209F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: ELDWn2W4Fw5anwW7wbDn2+jGT39Q2fPemiDURKen7aY=)
2: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (hash: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:31:e6:1d:d5:71:ec:71:70:75:7b:9d:12:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=80f2a51317780a2f41d608439c7ac10da108012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:53:96:a4:7f:99:bd:ed:1e:de:80:74:c7:0d:
c3:31:08:f0:1f:e8:4f:ed:28:45:c6:d0:62:2d:cd:
65:74:92:d9:83:5b:3b:30:28:fe:d8:70:44:b9:38:
88:18:ae:fa:8d:80:d4:b9:84:03:d7:a7:2a:40:97:
6c:ff:f0:e1:ac:fa:f6:f9:fd:e4:5f:d1:1a:31:08:
0e:14:29:be:bb:24:42:99:2e:67:7b:06:c5:ac:0a:
e1:40:e9:ec:40:09:5e:94:ae:27:0d:c9:5c:51:8f:
aa:1f:c6:0a:51:5d:00:d8:9f:ea:02:f2:11:a7:1a:
08:d4:0c:9a:27:7c:7a:9c:22:d0:01:e1:8d:b5:24:
46:49:96:f5:b1:9f:56:4a:2a:87:b2:b9:2e:93:ee:
a1:e3:89:f0:a2:9c:89:59:97:97:f1:5c:92:c4:d0:
aa:52:cd:19:6c:f8:70:b1:8a:52:c6:24:61:9b:53:
a7:7a:99:06:57:4d:33:fc:ad:93:f1:d1:2f:fa:6c:
88:5f:66:17:3f:ac:4d:a0:3f:08:81:2a:32:af:e0:
2d:01:06:16:47:b4:b2:c0:67:d2:39:d3:48:73:89:
48:30:3b:38:ad:62:e2:f9:9b:ea:15:ff:0e:99:2b:
f0:2d:be:16:db:31:8d:37:e3:cf:d5:35:22:3d:d2:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:A5:13:17:78:0A:2F:41:D6:08:43:9C:7A:C1:0D:A1:08:01:2B
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:36:98:8b:a8:2a:1b:c3:7a:2e:2e:83:93:11:ad:22:67:cb:
19:5a:5a:72:9f:c8:30:08:aa:22:67:76:82:d0:6a:f6:bc:ff:
b8:23:c5:df:06:33:c2:4e:8f:6c:81:65:11:4b:aa:b7:56:cb:
d8:1c:85:8d:38:e0:ab:24:8d:99:86:df:7e:49:48:98:e3:a8:
98:69:c8:cc:be:57:85:e8:2c:4a:e6:2b:00:0a:5f:c2:0e:20:
6a:9c:19:0f:f4:28:40:cb:e8:c7:b1:08:09:85:4e:74:9c:9b:
fc:f2:be:01:aa:84:14:5b:7e:38:cb:b6:79:17:75:4d:02:cc:
5a:c5:48:2b:95:a8:d7:d9:97:02:34:d7:a0:69:eb:3a:89:58:
c2:ca:de:3f:33:b5:9c:83:27:02:25:62:c5:a6:44:f7:f3:73:
72:a5:b6:bb:49:7c:ef:36:44:3a:b9:d7:cd:ef:05:b0:4e:9b:
e7:59:b4:fa:e3:9e:62:35:c8:ca:49:75:c6:69:89:ef:53:b9:
45:2e:54:4f:80:47:db:e2:eb:32:9d:81:95:bc:9b:28:17:80:
23:c2:e9:fb:5b:7b:c1:a8:e1:fe:21:df:b1:65:47:59:e7:1d:
a1:40:64:dd:ee:50:37:e5:6f:25:7a:33:8c:6f:f8:f1:fd:62:
aa:d9:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:48 2026 by rpki-client