Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: JaG37Z43vl9Hkypc1oJ/6ViGatIx+BO9nFX2M3neHvo=
Subject key identifier: 21:EE:DB:5F:FB:AE:97:5C:00:79:68:9F:F1:8F:09:E4:E5:4F:EA:73
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 019D3865BE00222C938E287E996958757A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: OEyaeGj+L3g3hXVZCLcRgLudpI/gSl1iB72pUEx6QFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:be:00:22:2c:93:8e:28:7e:99:69:58:75:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=21eedb5ffbae975c0079689ff18f09e4e54fea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:4d:8f:ab:63:15:87:46:4f:38:f7:42:65:
e1:e7:aa:84:f3:d1:42:31:b6:23:58:26:7e:8f:ae:
6b:e0:50:4a:3f:1d:55:58:e5:05:04:e0:98:36:ef:
98:13:2d:60:98:14:3f:9c:a6:b6:33:ed:1b:8d:89:
af:60:5f:cf:78:e0:8f:e5:f7:57:d4:8c:e1:90:51:
4e:de:3b:c8:04:e5:d2:9f:45:c8:e1:9a:56:bd:d7:
e1:8a:91:95:f5:01:c8:dc:1c:96:b7:19:13:94:c3:
b2:d5:00:79:3f:ad:0c:ae:64:2c:6d:8e:e7:62:e8:
70:3e:90:46:aa:e2:6f:c6:63:d9:7f:5d:53:50:62:
b1:38:db:eb:8d:f0:5a:dd:28:fe:00:fa:e4:20:e5:
ed:b3:4b:b1:d3:4d:0c:b5:ec:9a:e0:23:4c:ca:8c:
c1:81:20:b4:c9:ad:3b:29:f3:1d:41:f1:62:85:5a:
5e:1f:87:8d:cb:26:5f:2c:e2:5d:f6:f5:05:33:02:
18:0f:cf:80:24:ea:e9:40:a3:06:c0:e8:f4:b3:5b:
21:ac:07:86:e1:f8:ad:79:18:7d:5f:7c:e9:4a:96:
13:b4:f4:54:a8:32:4b:89:81:cb:44:1d:c3:7f:8c:
7d:8c:a1:eb:42:47:d3:2a:58:31:8e:be:57:f2:05:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:DB:5F:FB:AE:97:5C:00:79:68:9F:F1:8F:09:E4:E5:4F:EA:73
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:45:de:ce:74:16:f5:7a:e5:80:36:0c:e7:8b:6f:a0:4a:
08:cf:18:60:8d:83:41:66:79:15:7d:37:a6:1e:1d:50:57:d6:
94:5c:f0:fb:62:4a:0a:45:07:1a:89:a0:0f:27:e6:5e:82:f7:
85:c4:bf:25:35:a9:35:94:db:9e:5c:29:4f:f2:77:0f:65:e6:
27:18:bf:2e:2c:24:5b:0f:8d:63:2f:ef:4c:f3:3d:82:99:20:
8f:52:70:4c:80:54:aa:6e:32:cd:13:db:74:cf:60:69:49:70:
f0:30:89:16:30:67:e5:d2:b9:71:ee:a3:45:68:21:7c:14:91:
0f:f6:94:fe:05:86:9b:fc:8a:a1:79:fd:00:ab:f3:05:47:28:
a9:95:3f:ec:b5:ef:0b:7b:f6:83:58:fd:ca:f9:fb:55:03:ee:
aa:b0:af:c4:77:8a:2a:c2:45:8c:96:8a:5e:e8:73:3c:47:25:
93:58:db:50:f8:93:55:44:74:4f:a4:29:f3:a9:06:a1:70:66:
e5:11:74:33:c1:ff:82:ad:f6:c3:6a:13:46:33:79:5d:7d:62:
31:e1:6e:26:ef:39:4d:63:94:0c:4a:19:bb:8f:8e:0d:a7:27:
6c:21:62:4f:a2:4c:1f:4b:07:85:a2:32:75:91:39:11:a5:88:
10:a5:3c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zb4AIiyTjih+mWlYdXqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw
Mjc5Y2QwHhcNMjYwMzI5MDcwMTI1WhcNMjYwMzMwMDcwMTI1WjAzMTEwLwYDVQQD
EygyMWVlZGI1ZmZiYWU5NzVjMDA3OTY4OWZmMThmMDllNGU1NGZlYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBNNj6tjFYdGTzj3QmXh56qE89FC
MbYjWCZ+j65r4FBKPx1VWOUFBOCYNu+YEy1gmBQ/nKa2M+0bjYmvYF/PeOCP5fdX
1IzhkFFO3jvIBOXSn0XI4ZpWvdfhipGV9QHI3ByWtxkTlMOy1QB5P60MrmQsbY7n
YuhwPpBGquJvxmPZf11TUGKxONvrjfBa3Sj+APrkIOXts0ux000Mteya4CNMyozB
gSC0ya07KfMdQfFihVpeH4eNyyZfLOJd9vUFMwIYD8+AJOrpQKMGwOj0s1shrAeG
4fiteRh9X3zpSpYTtPRUqDJLiYHLRB3Df4x9jKHrQkfTKlgxjr5X8gWJhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHu21/7rpdcAHlon/GPCeTlT+pzMB8GA1UdIwQY
MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt
YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi
LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQflF3s50
FvV65YA2DOeLb6BKCM8YYI2DQWZ5FX03ph4dUFfWlFzw+2JKCkUHGomgDyfmXoL3
hcS/JTWpNZTbnlwpT/J3D2XmJxi/LiwkWw+NYy/vTPM9gpkgj1JwTIBUqm4yzRPb
dM9gaUlw8DCJFjBn5dK5ce6jRWghfBSRD/aU/gWGm/yKoXn9AKvzBUcoqZU/7LXv
C3v2g1j9yvn7VQPuqrCvxHeKKsJFjJaKXuhzPEclk1jbUPiTVUR0T6Qp86kGoXBm
5RF0M8H/gq32w2oTRjN5XX1iMeFuJu85TWOUDEoZu4+ODacnbCFiT6JMH0sHhaIy
dZE5EaWIEKU8AQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:21 2026 by rpki-client