Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: H38cQ/r5EEgBpzGLuTtrAO3OCieQSFtW/Ihb24b5yG0=
Subject key identifier: 13:9B:5E:0F:80:23:35:F3:34:38:93:B2:F3:C9:49:99:7E:49:94:C2
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 019D389C3393A7DB76BC3CDB49E393506208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 18AE
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: tb6BwBj84/kCSJmXr41iFjIvq4FdBZXbcTrk+sJ95hk=)
2: rbSihGXODQuXmGdRnxTGjpysN_E.roa (hash: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=)
3: xSLEYc0lt1omC0_5S_IEJQG-sFo.asa (hash: XvuqcAAROcucGiTTqNKqYAdleeXb8tap+MKCtPl4Y5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:33:93:a7:db:76:bc:3c:db:49:e3:93:50:62:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=139b5e0f802335f3343893b2f3c949997e4994c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:72:49:b2:5e:36:14:3d:f1:84:64:60:7e:
a6:66:b4:b6:93:18:93:c7:77:3c:c5:36:9c:5b:f7:
1d:ca:2f:f9:fc:05:e1:ab:e2:c3:9b:ba:05:4e:9d:
e2:5c:c1:04:fb:c2:69:02:47:17:33:21:95:4c:0f:
16:11:cb:49:aa:6b:60:fd:ba:5d:01:cc:bc:fd:b6:
2b:42:0a:42:6b:c1:c3:da:f6:f4:7f:90:93:38:2a:
dc:d2:43:51:c5:c3:2c:8b:fb:71:4a:0b:d8:fe:b0:
e1:86:ce:dd:72:36:74:2e:fb:99:0c:97:d4:02:51:
5f:bf:8b:9b:2a:26:d1:f9:e0:14:11:66:cc:14:9f:
83:3f:96:c7:7b:66:44:55:39:27:7b:6e:38:33:df:
fd:57:43:9d:92:fe:32:a4:f6:4f:3e:45:0c:50:79:
b5:72:73:8d:1b:57:c9:4d:e7:2e:fe:97:af:d3:13:
13:cc:22:2e:27:c8:ec:fb:34:3a:22:46:b4:46:40:
ac:5b:df:4e:ca:77:eb:a1:84:d3:c6:a2:40:fe:fa:
5c:a9:d3:20:71:c0:b2:ab:af:0b:cd:15:67:a4:88:
d7:d5:71:e5:89:33:1e:40:f5:2e:fe:c1:5c:6d:ee:
30:c0:dc:01:b4:99:f3:27:8f:5d:be:84:02:d1:18:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:5E:0F:80:23:35:F3:34:38:93:B2:F3:C9:49:99:7E:49:94:C2
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:c5:81:07:dc:e4:62:e1:3e:39:fa:bd:fc:ec:bf:3f:29:
19:22:5d:48:ba:a9:63:96:c9:a7:93:2e:71:80:1c:23:27:13:
a7:1c:82:49:78:ff:41:98:c7:91:69:4d:f4:be:c0:da:e3:0b:
02:ec:12:dc:0e:76:3a:2e:25:b1:2b:df:18:3d:83:53:49:4e:
28:30:c2:3c:93:78:4c:00:19:29:ad:17:69:80:44:4b:94:75:
32:97:b6:1f:56:cd:1b:3d:4a:74:88:23:e4:c9:a4:2f:8c:ad:
07:6e:ab:a9:c6:af:16:e5:94:af:f0:b1:d8:23:a6:89:b6:47:
27:15:88:57:13:8e:c1:ad:da:23:9b:61:14:84:45:c7:15:f3:
59:1b:52:a5:c8:f4:c6:77:dd:9e:75:2e:08:f5:52:ab:21:6e:
2f:0b:3f:19:46:01:d1:c4:a9:b8:c3:9a:17:ff:c0:6c:34:cc:
39:86:24:7c:fe:5f:8b:42:99:c0:fc:52:cf:ea:b6:0d:e0:95:
e9:31:0c:66:0d:41:f5:72:cb:c6:92:01:9a:b9:39:fa:b7:c7:
58:d3:ef:69:fd:2e:58:20:76:0c:4a:7f:6e:7c:ab:da:90:b4:
30:51:d7:b7:8d:11:72:99:00:e0:bb:75:6f:eb:2f:af:2c:94:
4d:4f:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:16 2026 by rpki-client