Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: aEJvAewDogqBtXd5hwlYUaaPDs6Q8IXR1EkBNfq0fqs=
Subject key identifier: EF:4C:3C:BA:50:97:C0:14:19:C4:4D:91:E5:9F:41:D7:B3:85:11:A5
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 019D40FAA8F53B4F6AFCD440DEDB2E7A0BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 1896
Signing time: Mon 30 Mar 2026 23:01:02 +0000
Manifest this update: Mon 30 Mar 2026 23:01:02 +0000
Manifest next update: Tue 31 Mar 2026 23:01:02 +0000
Files and hashes: 1: ScsWRL_Mu43RcB7Q3E8exZ3sAxE.roa (hash: a2qscDdrl/I7FMbIlIwybQ9A1yL+THmCfW/+aGHZ230=)
2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: CzhDZMg34e937h08BSQ5POTAqh6f5LjkGwDHzX8zCuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:fa:a8:f5:3b:4f:6a:fc:d4:40:de:db:2e:7a:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Mar 30 23:01:02 2026 GMT
Not After : Mar 31 23:01:02 2026 GMT
Subject: CN=ef4c3cba5097c01419c44d91e59f41d7b38511a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:90:1d:b8:ff:a2:45:4f:74:ff:b5:98:f1:
e0:b0:67:4a:c4:34:c8:ab:e6:b6:ce:81:71:28:30:
40:62:d7:5f:c2:d8:6c:67:72:48:b6:9c:bf:be:4b:
12:70:79:da:0a:83:69:0d:5a:11:31:b1:76:a8:ed:
44:72:19:b4:a5:a9:f0:7a:18:29:79:3d:88:ca:22:
b1:6d:ef:fb:f8:c7:07:00:73:47:ab:6f:be:9b:64:
52:b2:f5:bf:86:93:f1:42:1b:fe:d0:75:81:0a:9f:
c0:8a:6e:aa:0c:66:5c:9b:3d:95:f8:48:9a:2f:05:
29:5e:f7:ff:bb:8b:0b:8c:aa:7c:59:80:71:56:04:
3b:19:3c:11:89:57:b4:7c:1d:11:53:2c:14:3d:14:
8d:f4:58:9d:fc:11:6d:e4:e9:35:6f:17:3d:b2:b2:
ab:36:47:69:32:50:c7:0f:14:a5:02:15:51:71:b6:
48:97:fb:3c:a8:ec:6f:f3:d8:0e:49:94:57:c1:bb:
4f:f7:36:3a:02:26:9a:78:97:53:8a:d9:37:0d:00:
1e:a0:7b:8d:c3:a4:95:5e:2f:2c:60:16:1b:30:75:
64:a1:d0:34:a7:50:0c:d9:44:b1:34:6d:3e:91:85:
af:e0:c7:03:21:ff:ae:21:96:bf:b0:c1:7f:86:01:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:3C:BA:50:97:C0:14:19:C4:4D:91:E5:9F:41:D7:B3:85:11:A5
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:3a:62:94:9c:8c:36:ce:f8:ac:a7:eb:59:08:93:07:d1:
01:28:a3:70:2a:dc:d9:5c:dc:5e:86:24:bd:db:02:c1:cf:d4:
d4:95:a4:47:70:a4:c4:da:30:a2:37:29:14:57:50:8a:d1:54:
0d:a0:10:5e:9a:26:7a:f4:f1:40:d5:56:e6:29:ff:51:1b:04:
06:66:27:7c:fb:fa:b1:7f:4d:1c:bb:32:e1:84:94:2f:d8:ef:
d4:0f:73:ef:85:bf:80:72:b9:95:dd:10:18:b7:b6:6d:66:ea:
50:3c:4f:71:31:5f:52:3f:0c:be:51:4c:1b:37:96:e9:f0:87:
29:f5:65:bf:e1:c0:67:59:29:5f:0e:fb:1c:d4:c6:b2:e6:9a:
d2:e5:ba:a0:a7:f3:c4:32:82:85:20:a1:26:d1:0d:c1:47:27:
61:f8:63:ff:cc:42:46:a8:ba:aa:ad:4c:bf:30:a8:1b:2f:c8:
9c:04:1e:b0:7a:b6:eb:db:d4:90:33:03:f6:97:15:e3:1a:5d:
c8:a5:cf:e5:bc:00:c1:f3:e2:96:b7:e7:db:93:6d:33:86:37:
f4:8c:b5:95:ad:80:a7:6a:7e:cf:f4:4b:79:81:72:c7:b6:51:
1a:61:e4:2c:2f:e9:32:36:10:a3:9b:13:04:88:fa:9f:15:a3:
68:ef:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:19:17 2026 by rpki-client