Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: nJ2BXzANPiuhTfMKUEebQ99i8RvExJXEQvkWXkdis7I=
Subject key identifier: 75:73:EB:46:AE:09:C3:B4:0B:FD:64:E2:E0:E7:92:F2:D6:4A:FD:03
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019CBB82C6772E3BABFD45BBF426AD98F813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: C4
Signing time: Thu 05 Mar 2026 01:00:35 +0000
Manifest this update: Thu 05 Mar 2026 01:00:35 +0000
Manifest next update: Fri 06 Mar 2026 01:00:35 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: z2+LHwSAIKiT9rcqtUpEUn7FSNY/o/3TrFxA2F2Ppbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bb:82:c6:77:2e:3b:ab:fd:45:bb:f4:26:ad:98:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Mar 5 01:00:35 2026 GMT
Not After : Mar 6 01:00:35 2026 GMT
Subject: CN=7573eb46ae09c3b40bfd64e2e0e792f2d64afd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:13:97:ec:af:d4:b0:83:da:02:64:6e:c0:
44:c3:10:a7:f7:0a:d7:b4:85:15:1f:ab:d4:9a:10:
11:17:c2:d2:02:c1:d6:cb:e2:4e:d3:54:3a:04:e9:
04:e0:a2:87:bf:70:d6:5a:e3:01:82:94:36:80:7e:
e0:a7:00:33:f2:48:6e:87:16:af:b1:f0:c4:d7:db:
ae:18:0e:ac:d9:8a:49:19:3c:00:12:8c:56:64:39:
eb:50:02:93:ed:4b:7c:06:60:90:78:bc:a1:3d:73:
ea:8a:37:60:6e:fd:ac:11:9e:d0:0b:8f:52:67:a2:
a8:4b:6a:a4:9d:4a:dc:8c:05:a8:04:08:4f:d1:b7:
e4:21:ab:bd:a8:0f:04:d6:a0:7d:c2:0b:70:61:a3:
05:d3:5b:90:79:8d:6a:98:31:32:f2:77:a6:c7:6f:
33:99:27:37:24:65:cb:84:c6:d4:14:65:d8:9a:f4:
66:8d:e5:c5:54:2c:7e:8c:6f:f9:40:00:f4:a7:0f:
08:e3:9e:11:4b:df:34:53:7e:9d:58:6c:24:01:2c:
05:c2:22:c6:84:c7:36:95:68:ec:92:11:6e:7d:d8:
b5:d4:91:3c:cd:aa:da:e3:64:a9:1c:6d:83:49:42:
4e:7a:d6:e6:ca:3b:64:f7:bb:16:cf:6f:4e:7b:ee:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:EB:46:AE:09:C3:B4:0B:FD:64:E2:E0:E7:92:F2:D6:4A:FD:03
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:e2:0a:69:af:dd:00:d9:36:6b:89:e2:14:90:c1:4d:71:
c5:e2:d4:25:e4:c9:2d:42:ab:5d:8e:2b:70:c6:04:a7:84:ef:
19:0f:8d:62:3d:e9:28:b8:62:c2:7e:bc:71:55:be:12:8c:51:
1c:c3:9b:78:e2:42:68:2b:fc:ac:de:d4:2a:c2:9e:0e:3e:8d:
40:3e:9d:da:42:bb:26:8d:1c:0b:50:b5:ca:0b:45:cc:0c:3a:
fb:d9:9f:7b:9a:01:bc:60:45:24:39:02:16:2e:f9:64:55:4a:
9b:8b:4c:c2:77:b4:69:43:6e:e6:de:3d:e5:a2:c4:3f:41:9e:
bd:5e:b9:29:7f:fd:3c:5e:c1:85:75:62:02:66:29:e2:a8:06:
f4:df:43:fb:49:13:3d:20:e9:0d:0e:28:db:18:d8:88:35:21:
3d:9d:6b:f9:66:63:f9:d4:dc:96:5b:b9:8e:8f:37:b6:2b:ae:
35:9a:66:08:ab:db:3e:c4:cf:28:b5:14:0c:82:90:a0:97:ec:
2d:48:9f:d7:8c:61:e5:6f:f6:a7:3e:0e:90:a2:df:0c:82:23:
90:98:7b:33:96:c9:ad:13:e7:3a:49:33:f5:32:60:3e:39:e4:
17:0a:dc:74:8f:5c:cd:79:8f:53:c1:77:38:b9:b3:49:f6:b4:
09:fe:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 09:37:12 2026 by rpki-client