Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: ke/SbqHHntERmYrPLD/jT89BZRwz5L748CPc1eneS1w=
Subject key identifier: 82:01:C0:4A:51:3B:19:BB:7C:08:1B:E4:E0:92:25:25:A7:F6:8B:9F
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019D3AF822BE79CE4A3B60834D548402F935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 135A
Signing time: Sun 29 Mar 2026 19:00:33 +0000
Manifest this update: Sun 29 Mar 2026 19:00:33 +0000
Manifest next update: Mon 30 Mar 2026 19:00:33 +0000
Files and hashes: 1: Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (hash: ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=)
2: TdzUQghIehxteP-iZtI9mD6S7yM.roa (hash: JMCW44uz3J0EyEDOpMW3IeWpIRHn5nCzZnwcaDitVew=)
3: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: l3YXkj5zXhjv0mDTDE//WXclMggZxtHuo4qYCCaOCEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:22:be:79:ce:4a:3b:60:83:4d:54:84:02:f9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Mar 29 19:00:33 2026 GMT
Not After : Mar 30 19:00:33 2026 GMT
Subject: CN=8201c04a513b19bb7c081be4e0922525a7f68b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:35:fa:8f:18:eb:06:af:5a:41:69:1b:54:
7e:93:ce:b4:49:1d:03:9f:4d:05:86:51:d7:3b:81:
06:5d:d6:ad:b4:21:d0:07:0c:7e:87:e7:f4:15:52:
0a:6e:36:e5:ed:9a:10:ba:ba:2f:86:04:b3:1f:e5:
92:66:2d:6c:6f:b3:5e:e2:b5:73:ac:78:1d:69:41:
0a:a2:45:3a:28:ef:88:f6:51:ed:10:2d:66:85:dd:
32:9a:12:e0:c9:bf:e7:95:aa:eb:02:d8:8c:96:8e:
86:bb:71:fc:2a:e2:c5:9c:41:31:22:fc:eb:d3:af:
25:09:fd:0a:6e:6b:9a:3a:a7:38:da:fb:9d:6a:a9:
ec:2c:2b:3f:7f:ad:6d:31:d0:27:14:3e:79:9e:c7:
25:6c:be:59:6d:18:44:95:bb:3a:cb:c2:a5:dd:27:
3b:96:82:cc:c1:d7:9f:fa:e6:3b:3b:3a:b8:27:26:
49:d8:ca:00:0b:66:0f:cc:00:84:a3:62:80:32:36:
7c:f7:b0:10:1c:a1:83:58:1e:13:1d:d1:64:fc:16:
ad:a6:d4:0f:c0:7e:79:16:46:00:17:f8:27:d6:e8:
ba:50:30:fa:66:b7:e2:20:6c:01:3e:0f:72:b9:19:
8b:8e:60:0c:c3:3e:39:88:cb:af:6e:c8:f9:bd:e7:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:C0:4A:51:3B:19:BB:7C:08:1B:E4:E0:92:25:25:A7:F6:8B:9F
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:cd:86:b2:ee:b4:75:c3:ce:ed:40:0e:33:ad:2a:7a:52:
58:d6:7c:45:97:04:88:94:94:69:2f:5d:9b:07:29:0e:f6:cb:
e2:14:5b:8b:e4:74:86:3b:25:e5:ce:f7:4a:11:1f:82:44:9f:
17:d2:71:04:b6:01:09:4a:9a:f6:52:1e:ba:de:5c:32:ef:1e:
2b:a9:26:ad:c7:12:12:53:f4:22:ae:83:9a:f6:04:1c:4d:33:
53:0d:8f:26:90:97:09:4e:f0:e5:b9:78:a3:49:4f:5e:84:f2:
4c:b7:cb:24:f3:68:ea:c0:08:7b:27:96:75:23:85:8f:df:52:
14:36:c4:15:4b:1b:78:d4:8e:83:f4:0c:5e:e6:32:4e:52:06:
13:23:9a:84:e9:20:ed:fe:7a:de:77:c8:db:34:dd:c2:20:01:
b9:41:32:d1:29:59:92:b0:2a:91:3d:2e:9e:44:fb:0f:f4:57:
1a:2c:17:d9:a2:a6:a8:f5:01:17:2b:f6:40:0e:ac:94:d8:f8:
d4:4c:ff:fd:1f:ec:54:b3:7f:34:d7:93:fc:23:b6:33:33:44:
cc:a9:e7:67:29:51:7f:d3:fe:e1:37:9e:27:ce:8a:1d:c1:a7:
96:68:ba:7c:fa:fe:d6:85:e7:f4:2b:70:e1:cf:3a:1e:79:e5:
d7:dd:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:40 2026 by rpki-client