Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json)
Hash identifier: xLe1ea4fOOlOmx5JFcHyx5hTCCwi16Z+9zhNQZsj4PY=
Subject key identifier: 98:2A:D5:D3:F1:8D:D5:A6:25:79:00:58:75:CC:3F:94:90:78:8C:85
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 019D39AF1CF00ADABDDEEFD432E5FC046A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
Manifest number: 0234
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: nSN_TxFmfcT8L5gLifH_p7D8Uow.roa (hash: f+VYcizYIR9tVcbLfUBSMkoEKluNmLVYbPCJ6VRSkPU=)
2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: 48F7zU+aSiovpC6rJjhk4mVqCwQ3f2BdEcWcBM2d3dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1c:f0:0a:da:bd:de:ef:d4:32:e5:fc:04:6a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=982ad5d3f18dd5a62579005875cc3f9490788c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:7b:41:48:6a:12:b3:b2:cb:e4:ec:a7:8b:
04:69:0d:7d:04:f6:05:76:4e:d6:7d:a4:58:20:c6:
dc:09:d7:5a:54:dc:9d:83:d4:3f:4f:0e:a5:8c:43:
55:f2:f0:e1:c9:d8:67:4b:4f:95:3c:4e:10:24:44:
f6:24:4e:85:c5:87:df:70:80:09:ba:7b:18:ae:94:
37:a2:97:d2:29:a4:58:fc:bb:cc:0c:7c:d0:ec:ed:
78:4c:a4:46:8e:f8:54:d4:59:70:00:5b:69:e4:16:
4c:71:68:a6:12:38:37:ba:c1:db:bc:4c:44:38:0d:
27:f6:a8:16:ac:4e:a6:5c:4a:62:7b:9e:6f:ed:8e:
97:b3:d4:90:c3:16:ca:99:e8:5b:2a:80:13:77:28:
bd:be:93:fa:b4:a0:5b:4b:b8:7e:66:d7:90:65:5c:
09:8c:78:6d:c9:1b:b6:96:ed:9d:fc:6b:35:1e:25:
ce:b5:44:99:a1:59:ea:a2:ee:a7:ba:35:9b:ea:bf:
98:24:39:e3:a2:d7:26:f5:1c:2e:27:24:55:1a:1a:
f9:82:02:62:21:f0:75:95:8a:97:37:1a:70:d9:8a:
25:9c:89:a4:d5:f3:19:e4:e9:c4:1d:39:06:ce:58:
76:cd:ae:cd:df:a2:24:b3:4c:c7:96:a5:35:d8:0f:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:D5:D3:F1:8D:D5:A6:25:79:00:58:75:CC:3F:94:90:78:8C:85
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a7:13:e2:4c:90:12:c1:d6:03:4f:34:24:80:3b:31:43:ec:
57:7c:92:5e:b5:2b:9e:7d:25:4b:dc:dd:75:c2:56:7b:8e:e7:
a4:4d:a7:a7:c4:b5:93:d2:ff:c7:3e:2b:27:f6:b8:e5:df:10:
b7:52:41:1b:cf:be:a0:60:a9:29:38:81:92:8d:3f:78:3a:60:
6b:e5:60:bb:82:e4:b1:45:d6:05:cd:36:2d:cc:20:0a:bc:e5:
8b:5d:26:36:28:a4:77:37:cd:96:cd:25:5f:76:eb:26:b4:61:
eb:a0:8a:fa:75:e2:fc:8e:93:67:42:96:0b:1e:aa:19:78:4c:
34:34:ce:21:a9:22:6c:e4:48:e5:06:b7:83:83:f2:be:86:34:
ee:37:b8:07:05:3b:85:8e:90:df:9e:a0:4c:6d:31:8e:95:83:
74:eb:73:13:86:12:4c:61:ff:d9:83:cf:c8:8b:57:d6:99:cb:
3d:6f:ea:ed:76:07:98:f0:a0:d5:15:49:ee:a3:20:1a:21:29:
58:ff:63:a0:e1:a9:1b:90:b4:a5:9e:bd:22:77:bb:cc:17:f4:
18:2d:4c:9c:12:0b:b1:d8:72:9f:07:68:66:fd:67:0e:bb:b9:
ac:9b:2d:9d:8e:30:90:e9:53:92:ef:74:db:5d:6a:5f:5a:2c:
19:0c:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:00 2026 by rpki-client