Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: OOvf5UFsMLviMs6oPSsFqPWz4IIhNosKLGIJNQA/RPE=
Subject key identifier: 47:C0:78:C1:60:A9:2E:03:D3:7E:F1:8B:59:94:FD:39:0E:52:43:A8
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019D382DCFBC50EE7C15758C5D6DFA2E6194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 0966
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (hash: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: bft6K008/4GsG7E1hydbaBj6QYlqP3n/fYbqZBnnjuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cf:bc:50:ee:7c:15:75:8c:5d:6d:fa:2e:61:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=47c078c160a92e03d37ef18b5994fd390e5243a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:3b:90:02:52:33:99:ef:e2:0c:ea:07:84:
b9:e5:96:61:44:3c:55:75:38:d2:19:8c:73:71:24:
75:16:9d:9c:28:ef:bf:30:20:01:14:71:57:e2:c4:
a1:fb:30:86:5b:82:70:ad:63:a2:09:05:e8:2c:e8:
64:02:1f:e5:42:8e:7f:7a:89:f1:3e:73:8c:8b:28:
15:24:e0:07:1f:66:92:0b:04:75:b0:af:42:15:04:
50:e9:71:59:e4:ad:c3:dc:13:fb:ae:c0:4e:a0:e6:
0c:57:7a:6c:88:23:08:a0:87:29:4a:2c:bd:04:c5:
63:d1:bf:1d:b3:1a:5c:7a:56:5b:17:e6:b2:49:cb:
17:e1:e9:63:cb:1f:d1:99:b1:44:ac:f6:a8:47:e4:
36:38:d3:25:ba:20:be:5e:a1:79:ba:5f:a6:13:ce:
00:70:22:cf:a2:40:0f:d1:5f:ff:7f:e8:d6:21:19:
4c:6f:38:90:d3:d3:42:0c:e9:e7:0c:9c:41:4f:ad:
cc:f5:13:86:23:e3:27:bd:e3:1d:ec:7e:90:68:1a:
87:56:70:37:25:e8:86:7d:26:d7:b5:7d:11:f3:e7:
af:af:13:f1:66:0b:c5:08:dd:69:53:f5:a8:61:88:
15:ce:0d:ae:ee:18:66:6f:77:b2:cc:88:2c:24:32:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:78:C1:60:A9:2E:03:D3:7E:F1:8B:59:94:FD:39:0E:52:43:A8
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:19:7f:8e:00:2b:68:b8:3c:a8:65:b1:c6:39:16:9c:e4:
c8:21:e1:96:33:c7:79:81:f8:5e:41:30:4f:58:af:c0:99:c6:
63:74:c3:53:21:27:18:f9:69:29:7b:25:f0:67:6d:d4:e4:4f:
72:c6:f2:32:29:32:17:13:de:03:ba:c0:49:bf:19:ac:75:ea:
15:ab:c9:ad:a2:57:c6:14:c1:2f:e7:9e:01:72:7d:15:28:95:
e7:2c:78:32:f5:39:ac:ba:bf:2b:46:b0:d5:d8:c2:e5:e6:fe:
0b:50:f7:77:a7:ad:c3:2c:92:58:61:c4:ea:6a:07:eb:cb:a9:
f9:11:e6:83:c4:78:a7:0e:85:83:1a:6d:e0:52:3f:53:df:be:
80:c3:b8:ad:d6:6c:0a:1b:f8:96:c2:c3:16:cb:24:87:47:28:
7e:29:36:91:03:2c:fa:1f:5d:e6:af:87:f9:51:d0:d6:a0:d9:
52:d9:06:e4:7c:64:e4:0f:2e:ea:3e:ad:6b:d1:18:f4:24:6b:
b3:b3:38:cc:75:48:0e:9f:00:a2:9d:0e:eb:63:bf:1e:a2:38:
78:8b:26:1e:76:61:0d:09:1d:36:d7:13:d7:29:29:db:c5:08:
50:45:7f:f7:83:22:cb:dd:b1:d9:0a:20:a5:6d:3a:ce:54:b6:
db:6e:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client