Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: 9RvKdZ8mcoor1vXI1zcv/dDSkMyqyfsqhxIhuFqVneQ=
Subject key identifier: 5E:13:B9:14:F8:88:88:21:E3:47:54:43:E6:C2:8A:1C:CA:71:57:62
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019D37C04F8D232636516577C50349152E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0D38
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: mxdBTmGWUGLsnjVS+xWfpdb2I3lGVKZAcZQhur8s8qY=)
2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4f:8d:23:26:36:51:65:77:c5:03:49:15:2e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=5e13b914f8888821e3475443e6c28a1cca715762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:9d:6f:8e:21:c6:fd:74:bd:8b:7f:67:4f:
f9:72:1d:14:08:ae:a3:40:80:d7:9d:19:7e:a3:e8:
76:9f:55:5b:29:86:da:86:d9:25:91:4e:4c:47:52:
a7:95:a3:f7:54:62:a0:a3:c5:8f:fa:80:d8:0d:b3:
0f:70:f7:98:32:16:17:c1:43:1d:59:b7:b1:ad:c3:
78:bc:d1:74:c2:2c:4e:cd:4b:3a:19:13:00:fe:46:
9f:f5:36:e1:ad:32:1a:e1:66:44:a8:3d:bc:62:de:
14:f7:5c:e0:5c:17:94:cb:0e:94:15:67:f7:8e:00:
52:79:64:0b:d1:2b:13:c3:42:0a:65:74:61:16:f5:
fb:31:bd:3e:5a:1a:ce:8e:ea:a1:f6:94:ad:1f:ac:
43:81:1b:78:c1:25:82:2e:fb:bd:8a:b9:06:91:c1:
59:f1:de:50:5e:7a:cf:e4:28:48:0e:b8:91:f6:7c:
56:42:81:33:c6:a1:67:84:75:57:36:93:84:00:5f:
4e:e7:e9:85:fa:3f:15:3e:47:97:40:b9:e6:4d:4b:
6e:6a:7a:b7:a2:34:7d:51:ff:61:c8:2d:e8:8d:9f:
7b:79:de:08:24:83:17:be:d9:3c:63:3a:e8:22:6e:
75:96:c3:58:a0:6e:89:95:b0:ca:81:ec:b5:bb:ec:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:B9:14:F8:88:88:21:E3:47:54:43:E6:C2:8A:1C:CA:71:57:62
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:9f:bb:94:23:34:f3:60:81:6c:fc:ed:03:13:ec:95:ef:
5f:8d:a9:e3:24:29:39:4c:db:70:cf:54:fd:06:90:08:f0:67:
16:b1:95:04:cf:ba:9c:2a:9e:fd:53:ed:39:85:c5:6e:5b:d7:
c9:f6:dc:00:a2:2f:a7:dc:e9:70:8b:a5:bc:55:ee:c3:1f:0e:
64:56:e4:f3:c4:34:84:12:dc:f0:86:9f:4e:19:61:f2:e3:91:
a6:67:40:a4:27:51:a0:e1:f1:36:0f:ca:63:ae:65:d1:c9:5c:
24:3e:f6:36:b9:53:40:34:91:dd:e0:da:9a:c3:ed:6e:9e:67:
82:b1:e7:ca:9f:2d:22:ca:b3:44:25:07:3b:a8:29:00:12:c8:
a9:93:57:c3:a4:28:a6:cf:8a:37:34:9b:73:a0:9a:fe:04:35:
5a:23:bc:d6:5d:ca:2d:0a:44:2a:9a:82:01:31:e8:27:ab:b3:
cf:40:77:60:b3:a7:e5:b5:22:2f:44:bd:e3:f8:75:6d:94:bb:
53:8d:88:fc:07:76:52:c9:97:27:ea:93:6c:b5:73:bd:d3:79:
7d:75:4b:ae:0b:c1:46:2e:5e:4c:9b:db:8e:df:10:65:36:d5:
4b:16:a8:83:04:e5:e1:24:ed:5b:32:67:6e:a6:a1:70:66:4e:
23:13:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:18 2026 by rpki-client