Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: gO9VFPWiz9bn+AC9a5ddloLB2Q6vDUaDlQdaxmSjwgs=
Subject key identifier: 9F:61:BA:52:01:5A:A2:74:63:3A:6B:D0:51:68:F6:AD:92:6E:3C:06
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019D39413EE221258B87F19EC7CD39AAEAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: VpTcnmIdu1or70NVdb7KksBG0mY.roa (hash: X4YGR6I4Wi0PqQvq++rW4nssY1qKMiMmata2S9zHF98=)
2: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: i/HgI/gCaNN3oMOE1D/GSRzORhIz8Wu3wH7jF3K/7LU=)
3: cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa (hash: SUSOfIvJ0FegXPx9bBr1JRLYC/VJEW0GnploXLv94LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3e:e2:21:25:8b:87:f1:9e:c7:cd:39:aa:ea:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=9f61ba52015aa274633a6bd05168f6ad926e3c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:47:af:49:c6:8f:57:67:c6:fe:f3:85:98:
70:35:9b:21:8f:90:26:51:08:8d:41:83:14:7a:95:
95:83:e8:9d:c3:7d:8c:84:1b:54:96:4b:43:2a:0c:
44:9a:d2:83:94:56:98:2c:fd:f5:4c:02:43:e7:e1:
92:60:40:07:cd:52:8c:87:20:98:99:20:78:c8:c8:
2f:86:9c:56:45:d2:ff:49:31:bb:73:e9:5f:5c:99:
b3:09:ff:ac:72:f3:5b:f4:2d:ba:8d:8a:7c:33:98:
9e:03:80:89:65:8a:3f:75:7c:d9:16:e6:e4:db:b0:
98:19:9a:5e:fb:de:7c:de:d2:5a:1e:11:a6:45:d1:
53:6e:1d:c6:f0:fd:d8:66:81:1e:d0:ff:81:83:1f:
2d:37:ba:fa:b0:e9:57:31:4d:2e:cf:9e:c0:38:0e:
bb:02:0b:12:85:d6:3f:a9:de:29:54:fa:c6:e5:ec:
f6:5f:15:56:5c:3c:c3:16:74:39:32:22:ec:36:d5:
63:ea:98:b7:a0:e7:fe:b1:f3:98:26:73:58:1f:9d:
95:d6:36:a2:1d:e4:2c:d8:80:04:d5:dc:25:d4:7a:
05:36:fc:00:05:09:a5:36:93:c7:62:9d:ee:77:9a:
34:53:dc:48:bc:d8:4b:11:41:60:63:36:57:7b:97:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:61:BA:52:01:5A:A2:74:63:3A:6B:D0:51:68:F6:AD:92:6E:3C:06
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:e2:a5:a2:b9:f8:0c:91:e3:9c:95:f9:08:4d:2b:21:22:
9d:99:1d:9a:22:a2:85:80:e5:84:07:d6:b1:f3:59:23:72:6a:
07:b4:41:26:30:cf:58:f9:19:8e:e6:10:cf:9a:50:41:38:8c:
43:cd:f2:68:ae:b5:a6:8d:a7:72:db:a9:30:19:5e:0d:41:b3:
c0:40:a8:46:06:f4:bf:f8:8d:06:9c:23:e9:c5:4b:d1:10:ad:
6b:04:e6:d1:2f:c3:95:27:a8:f4:6b:d8:53:ee:5b:32:02:e8:
49:7d:b3:06:d7:c8:5e:71:a4:d9:c9:04:0e:44:5f:22:56:73:
27:85:92:38:7d:59:83:9c:18:03:ee:91:fd:36:16:3a:a6:56:
fa:12:50:24:ca:96:f5:79:13:52:a3:6b:9e:3e:36:a7:48:75:
0a:86:e0:0d:a4:3f:1d:df:f5:6a:0f:49:7b:5b:36:24:8e:ca:
d1:7e:d6:d2:d5:f9:d9:75:de:c2:d8:42:54:be:c1:61:e7:51:
f4:d3:82:e8:15:4f:bc:16:ba:b5:7a:dc:54:26:15:cd:a8:e6:
1c:61:23:60:52:05:a0:7b:69:58:3e:f3:74:8b:ae:29:25:d9:
66:c1:43:3d:47:27:b5:f5:f0:18:31:87:bd:82:58:1d:90:b7:
63:24:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:01 2026 by rpki-client