Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: zpe0ryIdjuVMvnTG2rMMVZPHkaphYWzMBrvE1N9tE/s=
Subject key identifier: 15:F7:E9:85:A5:D4:44:DD:6C:95:EB:96:DA:71:F8:7B:B9:84:E6:6E
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019D38D3563413DE9C7B7EE20E3482E965C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: axvQ9YX1SiJ663NlUzU3lynPXozrs+t8ZzlhhLW+Qfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:56:34:13:de:9c:7b:7e:e2:0e:34:82:e9:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=15f7e985a5d444dd6c95eb96da71f87bb984e66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:b6:fa:d3:0f:30:75:19:97:ec:02:5b:4a:
6d:e2:2f:42:11:33:c3:f7:bf:58:07:0d:54:6a:c9:
f9:aa:40:88:7c:27:52:53:2a:d6:55:2e:75:fe:29:
f5:8a:59:91:7e:94:54:2e:8f:a9:2f:3d:e5:1a:14:
7b:e8:b4:cc:2c:6f:b6:63:ed:31:24:72:ce:43:87:
d4:b0:0e:e6:45:5f:c2:3f:a6:97:6b:cb:75:b4:18:
b5:0b:f1:64:66:b7:ee:f1:2d:ab:c6:9b:38:9a:30:
21:b6:a4:c5:8d:8a:83:4f:0e:07:fc:5c:a4:2a:b3:
5f:0b:59:3e:e4:54:9d:72:03:d3:e7:88:1c:b5:21:
65:5c:ec:b0:1f:76:ed:a6:2b:84:6b:fb:71:02:1b:
90:91:5c:ac:53:2f:92:07:d0:24:3a:84:30:91:f0:
a2:ef:1a:ff:51:09:44:2e:70:a5:f1:18:0f:28:d7:
9b:4e:56:17:29:2d:43:32:22:c8:3c:c6:0b:d7:e6:
a8:6b:a2:dc:30:1d:3a:9c:b4:48:ad:0d:25:09:d5:
b3:bc:eb:6a:0f:0c:d1:0c:6b:b9:a7:7b:47:0d:05:
5a:ba:1e:50:f4:a9:9b:81:ac:82:8f:99:92:bd:49:
e4:6e:c4:de:92:9c:1c:f8:48:df:ff:ce:0c:8c:25:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:E9:85:A5:D4:44:DD:6C:95:EB:96:DA:71:F8:7B:B9:84:E6:6E
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:da:b2:84:d2:99:ee:b8:11:8d:ba:cb:fc:e6:28:a2:46:3f:
60:ff:ae:db:a3:8d:b3:1d:db:94:a4:c4:dc:94:7e:9e:36:21:
e8:ec:88:cf:46:9e:6f:88:08:1e:8c:79:54:cc:b4:50:c2:22:
97:42:4f:61:65:c0:5b:b5:70:f4:e5:80:27:b9:35:fb:1f:59:
d0:30:58:b2:80:42:cf:42:fc:6e:e8:7e:5f:22:eb:57:0f:a5:
e0:c0:d8:6e:0d:1f:d6:74:8d:8b:da:08:3d:08:2d:7c:77:bf:
5f:b7:88:b8:12:66:23:24:65:1b:d5:09:a0:e6:d8:e0:a0:fc:
3e:de:c7:66:4b:30:19:f5:9f:f5:75:2c:94:4c:16:3a:d5:db:
07:cc:e4:be:5b:88:cb:17:e4:c6:fb:19:da:e6:bc:4c:f1:d3:
07:c2:eb:ec:be:73:39:55:52:42:54:83:2d:94:7e:31:91:b8:
90:2d:29:ca:44:57:ae:bf:82:af:3f:64:be:9d:48:b4:54:f8:
54:37:45:db:29:91:3b:ae:c6:aa:f4:3d:29:d4:1f:80:d3:2b:
f7:57:81:00:64:f2:33:d8:6c:44:1a:6e:4e:21:1a:05:9a:65:
13:90:15:18:35:59:16:90:5c:36:be:5b:82:6c:21:84:f4:d8:
64:64:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:07 2026 by rpki-client