Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: UjuFs2WRn3SqS2QzEDZ/cBg2TYSG0vO5KFDrCVycFMg=
Subject key identifier: 44:99:9B:DC:46:DF:65:98:98:D1:5D:D0:E0:C5:C7:B3:F1:51:DF:1F
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019D382EA40994690772482D8F6C56643983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 1353
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: ZZzwNAysyXnTOvUO4N1BhGwUYGkIZVhPJN36rzX6+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a4:09:94:69:07:72:48:2d:8f:6c:56:64:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=44999bdc46df659898d15dd0e0c5c7b3f151df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:1b:fd:b0:a0:1b:af:b2:b0:60:c0:22:44:
ae:2e:1d:ba:c5:a7:25:2a:44:26:7a:81:75:8c:5f:
7f:f6:72:4c:42:03:81:6e:58:8a:f0:09:97:12:3a:
cb:01:af:b1:a8:a1:35:5b:e3:b4:d0:49:b7:c8:5c:
06:14:45:94:bc:05:3f:f5:18:af:46:76:90:fc:af:
6c:ad:a7:48:26:b1:d2:56:90:93:a9:59:28:df:0e:
6b:08:3c:4a:1b:5b:34:5f:e5:84:cb:a4:da:61:19:
6c:94:66:40:64:e6:41:66:17:99:02:cb:c5:32:c9:
e2:0f:c2:49:2b:51:1f:62:de:5f:b6:d6:17:b9:b1:
47:c2:0a:eb:9d:91:ea:cf:f1:db:26:bb:6e:b9:fe:
db:5a:12:a3:bd:07:f0:e4:15:1a:ab:11:4d:03:84:
57:38:42:76:31:79:82:e6:b8:c8:03:2d:cd:39:75:
ec:a7:3f:9d:4d:16:5c:98:12:13:53:32:2a:1b:33:
fd:e5:63:7b:6a:a5:71:1d:58:cd:db:0e:04:f5:cb:
a8:d2:2a:03:55:4a:ed:1d:74:19:2d:d6:41:47:de:
ed:63:28:61:13:2b:61:d0:73:32:7e:08:92:96:cc:
04:24:59:ef:f3:3f:2c:6c:4e:07:90:02:07:62:90:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:9B:DC:46:DF:65:98:98:D1:5D:D0:E0:C5:C7:B3:F1:51:DF:1F
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:08:37:45:27:ab:d7:14:c0:ff:0e:a1:b0:e9:91:46:37:
6e:ce:5c:93:21:9a:7e:14:0a:7d:d8:2e:6e:cc:9d:d2:3f:51:
ca:bc:66:17:c1:47:35:5f:39:6a:37:e7:17:56:f4:dc:4c:1c:
8f:9a:fd:a5:1b:7b:60:85:76:c8:d6:1b:43:34:65:28:28:b0:
3b:73:ba:02:4e:20:09:65:f4:e5:04:22:50:c0:a4:41:61:a6:
0d:03:15:53:0f:4a:7e:86:d5:6f:49:44:7f:6c:5e:11:0a:a1:
f1:82:fd:d6:9f:7e:93:4b:67:86:79:59:d5:57:55:60:aa:a8:
a0:88:39:86:f9:14:31:88:c6:1c:0b:00:96:14:00:a0:ea:83:
e6:81:3c:21:9b:fd:f3:d6:d3:aa:f3:4e:2b:79:0c:32:87:3d:
8f:76:65:f1:66:c0:bd:28:d0:13:0a:27:37:61:bf:7a:ad:e3:
88:cc:27:32:88:8f:47:9f:82:51:25:4c:72:d0:51:9d:9a:b2:
80:90:58:19:b5:07:5a:24:dd:2f:1f:31:91:f5:5d:00:a6:f1:
15:ac:ce:80:a3:b7:f6:84:3f:aa:3b:bc:79:fe:9f:13:b9:7d:
63:3e:f0:74:bf:dd:a1:d3:c1:02:7e:61:62:54:2f:23:6a:1c:
1f:62:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:13 2026 by rpki-client