Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: PBl4RHKJPV31p5V9dzs6wknTKxp7ddQ9ovmF7fAuWmw=
Subject key identifier: B3:4D:7C:60:8B:86:20:5C:75:7D:E5:D4:12:FA:EB:05:2E:77:24:33
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019D389BB70E453A3925F442B81BE96488D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 1514
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: SvoE06TBZf7Gf4PyTi25KBjPnOBOz9jezt8bS9Wxt1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b7:0e:45:3a:39:25:f4:42:b8:1b:e9:64:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=b34d7c608b86205c757de5d412faeb052e772433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:df:69:9c:3c:cb:7c:cf:f4:fa:a0:ec:18:
13:5c:f3:26:fe:6d:c8:ab:69:a0:92:ba:3e:fd:ec:
64:d1:ad:2d:62:c0:8d:14:6d:0f:c2:d2:6f:1f:f2:
8c:90:8c:62:23:78:0f:bc:05:aa:13:6c:33:99:c3:
d8:64:0f:f6:ee:d7:e1:c0:4d:cd:2a:3f:4e:82:f6:
57:24:95:33:e3:a5:a8:d9:85:ad:57:a9:4e:3a:f2:
32:52:2c:0a:56:39:02:a7:89:4b:b7:9d:5e:12:e7:
19:74:ba:e9:b1:48:a7:d1:af:89:9e:c9:e5:00:5d:
d1:78:5e:d8:7c:ed:48:df:ca:8e:5f:11:fa:f3:9e:
37:a1:32:31:88:12:24:02:53:ec:a0:0c:94:bf:86:
68:a0:50:f5:22:d0:90:10:a8:f1:02:5a:7c:ed:a1:
ab:02:ae:91:76:91:5e:8d:cb:35:e5:d6:57:45:d6:
a7:00:f9:e5:cf:0d:82:72:40:9b:f0:20:77:ff:13:
06:24:69:f6:92:15:95:fe:73:94:24:7e:34:62:7d:
af:dd:5c:de:a7:98:76:39:40:93:1b:14:11:08:10:
7c:90:28:74:c0:75:59:bc:ba:da:19:86:94:22:04:
e5:b7:3a:13:ff:e7:49:c1:68:8f:93:a5:29:30:4b:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:7C:60:8B:86:20:5C:75:7D:E5:D4:12:FA:EB:05:2E:77:24:33
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:91:a9:e2:ca:0f:34:46:4c:fb:cc:25:52:af:26:a7:07:
6a:e9:fa:e6:e3:e7:61:30:88:73:73:93:9e:e6:a0:81:d3:d2:
c2:20:de:2f:60:b4:34:7b:29:73:8e:bb:8b:4b:72:f7:5d:79:
ea:a2:8e:a2:3c:90:38:48:ba:0d:7d:8d:3e:07:3a:24:5d:51:
2d:9d:fe:c9:eb:43:ce:c9:28:8b:2c:02:db:e1:58:7e:ec:bb:
c0:32:d6:00:de:4e:e2:dd:db:64:52:e7:8d:8e:c0:23:69:09:
43:43:de:f7:8e:90:2e:9c:81:d0:3d:84:ff:11:af:6f:29:a7:
bb:95:aa:3d:9b:9b:c3:d6:d6:e2:f9:1d:90:01:bf:35:e9:12:
19:cd:e1:da:e4:57:b5:7d:95:c7:16:6d:1b:56:53:25:2d:4b:
34:24:95:65:3a:58:0a:11:2f:58:a1:07:6e:7a:d1:c5:de:38:
9c:46:ad:d6:88:78:30:ea:63:98:a9:3a:9e:94:54:4c:62:3f:
79:4c:2d:1d:40:f7:38:b3:ae:c3:51:83:d0:97:b5:53:f8:93:
6c:3e:af:5d:80:fe:82:ed:92:48:81:63:74:7b:b8:39:d9:43:
74:fa:0f:8c:f5:fb:3a:d6:be:23:d6:4f:a7:22:ca:ff:f9:cd:
c0:d3:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:05 2026 by rpki-client