Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier: kimzzN9IKNeykjkndEOI+ZCL8NdR3kA99vBpgBYn2t8=
Subject key identifier: 50:DF:C0:8B:1D:C2:6A:70:9C:D5:6C:E1:41:44:79:B8:B7:85:A5:35
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial: 019D38D377CE2B3CEBC00DD2EAD793B30A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number: 1153
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: 4HGdwJ9XKTMjvxsJJx3zyDLYa54.roa (hash: jYE4b7p6t7BDzuGZyvDqlMeK+svfhmC8m+qt2BWH3iM=)
2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: yMx1POSsyMu/+NAp6eU+xd2QT9xBWDXyQ86iz7Vpx0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:77:ce:2b:3c:eb:c0:0d:d2:ea:d7:93:b3:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=50dfc08b1dc26a709cd56ce1414479b8b785a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:52:bf:f3:c8:a0:c5:aa:c5:34:9b:d7:22:
8f:ca:ee:18:5b:73:33:f6:fd:f1:dd:1b:37:29:1b:
fc:b1:29:49:9d:27:91:28:97:c2:ec:e3:c9:1f:46:
8e:88:5e:4b:44:fa:d3:f3:55:5a:06:28:4b:b0:99:
96:cf:5f:f8:52:a7:f1:fd:a2:9d:52:15:4b:c6:d1:
fe:bd:13:c0:11:1d:73:a0:85:22:9e:eb:e4:34:7a:
33:05:9f:46:f1:8f:3c:b6:4f:ff:f9:59:f3:21:21:
ea:37:6d:4f:af:03:f5:3e:55:25:fc:24:ad:7d:4c:
04:47:4e:f6:a1:18:b5:9a:97:45:7e:b7:10:c9:3f:
11:4c:be:c4:b7:f9:bb:c5:3a:1d:2b:f4:da:53:71:
0a:66:22:f8:77:cb:49:87:dd:2e:2f:5e:0a:0b:5e:
40:1e:f3:8c:2a:f2:72:f0:91:10:50:87:9a:e0:aa:
6b:59:5d:c7:1e:ae:cf:57:0d:28:e2:37:5a:4b:d0:
38:6c:1d:de:fd:bd:2b:2b:35:84:26:a2:70:9f:b0:
3f:cc:46:f5:fd:94:dc:42:17:cd:d3:3b:8a:1c:98:
95:df:8e:06:b7:bc:82:f1:da:63:f6:7e:2a:72:ea:
64:97:96:7f:ee:97:2c:02:8a:db:a7:83:aa:12:83:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DF:C0:8B:1D:C2:6A:70:9C:D5:6C:E1:41:44:79:B8:B7:85:A5:35
X509v3 Authority Key Identifier:
keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:dc:c8:a3:8d:48:a8:e6:1b:e9:71:ec:04:8f:e0:d8:6a:
f3:d5:48:63:a0:d8:b7:89:83:d3:15:43:3f:86:45:11:29:40:
80:5d:1f:7e:ef:fc:1b:d2:82:44:f0:ef:9c:d0:07:3e:f1:84:
82:8d:b3:07:31:db:1b:92:ff:74:8d:31:bb:58:6c:21:cb:eb:
49:f1:f3:3c:68:b2:01:db:7f:28:08:ca:d6:cd:83:cd:05:ea:
0c:94:d5:a0:1d:b3:9e:42:f8:72:aa:22:52:58:d9:e3:56:56:
a9:20:07:a1:58:f9:40:4d:08:31:eb:45:8b:30:38:df:36:a6:
ee:36:de:ba:91:73:43:85:d9:7c:50:e9:11:5d:a4:d5:69:29:
5a:59:11:36:07:b6:61:d6:5c:00:f4:c3:44:bc:c6:ee:3a:6a:
45:50:9d:25:cc:6d:e7:0f:fc:63:b2:6f:fb:29:4f:ff:c9:e9:
18:bf:e9:2f:bd:d1:07:46:be:49:e3:f9:2b:25:fc:a5:d2:a9:
a8:19:c0:71:9e:75:7a:36:cd:50:a2:6d:f5:1a:86:4b:c4:ec:
18:60:48:cc:09:d0:c2:4b:cf:8b:76:9c:fd:0e:50:8a:00:98:
c7:0c:4a:7c:4e:5b:e2:79:d2:e7:bf:4e:1b:f6:3e:8d:f1:98:
d4:a7:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:30 2026 by rpki-client