Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: v7jHOLWiimh5wbt+JgKl0lwDGnTdCBcS8C2Bk3p/q+0=
Subject key identifier: 27:4C:85:FC:91:B1:2E:A4:26:70:D3:EA:72:D1:90:BD:3D:83:9E:42
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019D38D362B5DD01AB21C15CC21A23DE30A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 1119
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: n1XAogWuiUQosVwcUWqjhII6Do27qo4WB21FqyY16pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:b5:dd:01:ab:21:c1:5c:c2:1a:23:de:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=274c85fc91b12ea42670d3ea72d190bd3d839e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:17:39:68:a2:6a:46:97:38:61:30:cf:99:
5d:00:d3:df:1f:01:05:96:20:44:d3:a9:93:da:86:
de:c1:80:3d:a9:a0:6b:03:a5:9e:d5:49:32:8d:74:
4e:49:b4:f4:96:a4:1d:48:6b:ec:6f:cf:87:ad:0a:
a6:cb:a6:e7:c3:73:7b:04:89:c3:40:5b:33:0c:62:
f5:20:e3:68:83:44:90:4e:06:a6:f5:5d:53:cd:82:
f6:b9:60:d8:d2:7f:34:98:86:78:8a:9d:ac:58:6a:
0b:2f:27:73:51:61:66:49:df:c1:b9:c5:e2:ae:99:
98:28:70:b5:05:85:15:a7:fc:45:7f:d1:8c:b5:7f:
66:11:42:e3:f2:be:e7:7b:cf:06:c1:e2:0d:1f:9e:
05:8a:ac:ed:47:43:21:36:53:18:98:08:ea:e1:e0:
99:28:fd:42:25:9f:fb:44:72:9d:40:c8:5c:ab:a8:
45:86:04:09:b4:0c:4a:3a:3b:e7:ba:97:10:27:3e:
3d:e0:50:f0:7e:de:54:99:cc:b0:4b:5c:2d:7b:36:
08:bb:6f:47:3b:46:5d:dc:d4:3a:42:35:8e:7c:86:
43:72:cc:bf:7f:99:ae:5e:30:73:a0:20:82:43:37:
72:e8:d4:9b:74:3a:ee:6e:a3:c9:e0:ea:bd:42:21:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:85:FC:91:B1:2E:A4:26:70:D3:EA:72:D1:90:BD:3D:83:9E:42
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:9b:40:46:f1:d2:c3:9a:cc:76:82:a4:d5:e6:e7:58:dc:
72:02:45:f1:d1:14:17:5a:d1:a5:6e:1a:54:70:30:3e:9f:ef:
2e:1d:e8:0e:21:dc:41:c3:4a:c9:d9:95:a5:4b:71:d3:74:d8:
bf:88:17:b5:eb:3c:d6:bd:bc:4d:78:2b:e4:13:5d:1f:0e:9d:
8f:24:66:61:07:84:90:77:96:39:84:45:f7:95:f7:de:7a:00:
9e:02:72:19:47:61:23:10:5d:23:94:8e:24:59:a0:b1:f8:d9:
8d:c0:f8:10:de:7d:fc:96:0f:d9:51:f6:1a:0a:d5:15:32:78:
b4:9d:e1:9a:5e:41:31:8c:14:da:13:df:20:20:cf:c8:a5:e7:
f4:e7:83:4f:4d:46:eb:67:3f:7f:0b:69:1b:79:68:f9:38:00:
97:8a:ee:3c:4d:22:e8:1a:e1:7d:20:ef:c4:6a:0c:03:b9:92:
04:3e:7f:1f:1f:a4:43:40:65:21:c7:c5:db:db:40:62:96:80:
dd:56:bd:98:c1:c3:11:72:bb:8b:0e:18:4f:bc:e9:cd:86:4c:
78:d9:fe:f7:83:c7:e5:6e:ca:a8:5f:43:b1:1c:59:52:8d:52:
6d:05:d7:a3:06:8d:78:13:bd:83:91:62:c7:53:5e:60:bb:0a:
58:01:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:22 2026 by rpki-client