Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: upRKwbs/NYDniWiIEs5W6VVxK4OtyRY7leHaAuIgmYU=
Subject key identifier: 34:A4:C1:7A:0C:73:67:50:DA:D6:F9:36:17:4F:8D:E4:B1:A3:3A:50
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019D378919643DC3595B78E9C388591D8F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: P7q+fxEA3mrcTGxcIUGekn0Y579jgCada1lLIkeMWBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:19:64:3d:c3:59:5b:78:e9:c3:88:59:1d:8f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=34a4c17a0c736750dad6f936174f8de4b1a33a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:ef:c1:31:d8:7d:e4:49:bc:9f:39:ac:47:
3c:6f:2f:ad:e5:5f:cd:5d:c2:97:a1:9e:c2:a9:12:
d3:74:08:a1:06:d0:a5:7f:2a:ad:66:79:d1:bb:de:
db:95:0b:c3:aa:3e:0f:60:a2:cd:b0:15:ed:fa:15:
93:16:2c:24:e2:f9:9f:50:f7:bc:d5:8c:bc:eb:9e:
5e:7a:11:df:b2:2c:fc:24:74:c6:d9:e2:af:be:08:
47:e6:00:9c:d8:10:8b:3d:ad:63:e6:c9:4e:5e:3d:
a2:66:ad:6e:16:59:16:86:dd:c6:d7:d5:0c:4a:8c:
23:93:95:87:e7:cb:40:07:b1:9d:36:c8:fe:82:c9:
94:73:8d:13:21:4d:43:11:e0:bb:b4:14:a2:60:20:
24:f7:f1:11:16:26:1f:91:e1:c0:e9:79:15:21:a2:
9a:92:84:27:1c:fb:9e:e5:84:fa:5a:84:8e:cc:d2:
b1:59:7e:51:da:5e:a7:ad:bf:39:db:ca:d8:7b:8d:
1a:ed:8f:18:b1:17:5d:51:14:40:e1:bc:56:0e:29:
2b:ea:95:83:c6:9f:7e:6b:0c:8d:be:be:6b:b3:c2:
b6:d8:1c:54:ea:e6:62:19:ab:fb:90:bb:59:d8:e2:
4b:96:e9:41:2a:41:b5:2c:b5:50:29:05:61:4c:90:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:C1:7A:0C:73:67:50:DA:D6:F9:36:17:4F:8D:E4:B1:A3:3A:50
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ea:7b:4c:94:fb:df:84:f7:a4:61:a9:00:26:be:b2:3c:0c:
1f:8b:7e:62:6f:36:ef:0c:6d:00:45:ce:6d:eb:72:f6:3f:65:
96:0f:0c:8c:3b:2c:4d:e6:69:1d:23:43:4a:3e:95:b8:4f:a0:
e7:da:ab:ba:48:bb:28:04:74:e5:09:d6:f9:c8:ab:28:08:8e:
cb:48:9b:68:04:90:b7:2e:da:c7:70:1d:38:d8:68:0a:c9:d1:
aa:28:d9:b4:cb:cc:db:47:cf:24:fc:b7:00:24:ff:56:9e:d4:
54:dc:1b:09:37:b6:4a:59:0f:51:11:4f:55:36:1b:f5:d8:e3:
b3:ab:11:bd:8e:0f:12:80:1d:ae:4e:de:0c:ab:c0:f1:d9:de:
36:0c:b6:40:63:ff:c4:22:51:84:36:9a:47:a4:d1:2b:f3:c2:
4e:99:8d:02:df:b7:2c:80:a0:57:e1:35:21:5e:ee:31:50:27:
ca:85:b5:bd:f9:f0:6f:a1:7d:94:8e:e9:cc:25:1e:d7:15:48:
39:0e:7e:8b:7d:38:3d:9d:15:ac:60:76:92:0c:5d:d9:d9:e2:
f4:03:30:11:e0:4b:f1:cc:56:74:3b:40:09:6b:a0:dc:3b:85:
e0:af:be:b8:1c:e0:51:6c:38:ec:53:25:cb:ac:89:7e:56:ed:
fb:66:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:26 2026 by rpki-client