Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier: TQCV93m8rzaeposo5ybmS/Y5RONSKmykkmW4J/YPS/Y=
Subject key identifier: C6:12:D1:FB:D8:34:F2:C7:09:2C:BD:88:49:31:9F:99:E9:7B:2F:2A
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 019D386561EB44831B66D6010310A1542DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number: 0B16
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: FMQ4xU5rGzBy9XfN6xkHNPPuK2w.roa (hash: VpW8Q4PIVbHWidRFeTd9pn+aHZWxpeF2VrUK329P7b4=)
2: OJY6iE54MT93V4GP2ZSvbOq5K4Y.roa (hash: 4QTAC5eFNbrr/GKOsA3KxkrPE1SA8Il65VwGfi0JgLQ=)
3: sP3xxrP16BVYtRejuodDQfjDjnY.roa (hash: rhdnZt+TyfSBG9e9GLDjxat3cDe+UxxerHxAqaJJWko=)
4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: DOMcLRUrZCFr7pB0ErnIJ20cCcOxszQ8WYgjThV+LiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:61:eb:44:83:1b:66:d6:01:03:10:a1:54:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=c612d1fbd834f2c7092cbd8849319f99e97b2f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:06:12:4a:64:9e:6f:3f:f9:b0:b5:4a:90:
b5:2e:62:a0:93:6c:0b:a5:e6:21:29:cc:4b:82:ce:
08:3e:b5:13:7c:7f:ad:1a:75:38:5a:14:fd:b0:ee:
c0:ae:70:f5:76:da:c3:53:84:00:bd:68:5a:ae:ef:
4e:27:10:5f:1f:fc:ab:4d:86:85:96:07:69:f9:0a:
d5:cc:eb:0d:86:e6:be:05:0a:da:b7:b7:4d:2a:9c:
81:a7:60:b5:c7:1b:eb:96:12:22:5a:2e:d4:dd:65:
7b:95:b3:fa:51:15:2b:9e:2d:c4:8e:cd:0f:c7:9e:
17:dc:5d:b9:b8:ee:42:87:6e:e0:a7:76:f6:2a:1b:
11:b5:5f:9d:dc:11:16:35:5f:f7:ff:65:e6:24:db:
c0:91:98:24:b6:86:22:ad:dd:cb:82:c7:98:d5:7b:
db:72:ed:04:70:6c:ec:50:ba:41:0d:84:c1:b8:cb:
16:41:0f:78:8d:50:22:8f:c6:8d:48:bb:0a:b3:3b:
5f:9f:bb:fb:c1:54:05:d8:aa:f9:7a:77:92:00:0e:
96:23:73:f0:d9:81:b3:9a:27:d4:6f:90:fa:30:e3:
a8:cc:16:e9:8a:b1:93:e1:d3:d1:a6:65:5a:a5:8a:
bf:5f:ad:16:21:43:e7:77:9f:4a:cb:b8:55:5c:5c:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:D1:FB:D8:34:F2:C7:09:2C:BD:88:49:31:9F:99:E9:7B:2F:2A
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:41:fa:8b:a8:d6:4c:da:6f:eb:ff:21:d2:c7:d3:81:ca:9c:
f9:11:90:59:e3:b0:d7:87:de:e3:12:6c:15:52:58:43:84:05:
a1:c6:4d:9a:9f:70:aa:2d:dc:a5:92:02:ac:af:c4:09:dc:57:
4d:89:f2:0b:60:99:32:fc:69:ae:6a:85:55:51:a4:13:7e:c1:
d9:51:56:cc:09:54:07:44:ec:f3:6d:37:2e:80:ee:69:b2:69:
a8:bd:e9:e7:36:9c:b1:6d:3a:c9:cf:7b:51:c0:6c:d6:f4:fa:
06:1e:86:6d:54:44:61:7a:bd:48:15:4c:e1:a1:e4:fe:dc:bf:
48:c6:9b:e2:e4:33:c7:37:86:97:45:58:3a:62:77:8f:f4:df:
1a:dc:59:db:8c:f2:d9:26:93:a4:95:cf:b3:81:a9:98:78:e9:
dd:74:a9:b1:69:c5:41:5d:a0:49:11:94:e9:ce:b0:47:db:a3:
72:5b:21:af:0a:08:88:40:96:ef:2b:6d:fc:34:c4:13:3e:2c:
f0:4f:39:c6:70:07:25:31:55:0a:ea:d7:16:3d:27:90:4c:f2:
cc:d6:ef:02:16:b5:85:92:8e:48:c0:dc:2d:3d:76:42:fe:26:
20:3e:e4:a8:2e:ac:7d:da:00:84:3e:ec:b5:51:4f:a6:b9:98:
e0:bf:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:51 2026 by rpki-client