Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: s75YNEYbO6V9fkItq0Dmi9Q8M/vmnqnYNbsHtCqZybo=
Subject key identifier: A1:C3:08:25:8A:10:09:11:C8:35:A9:95:BD:8A:7D:78:75:18:E5:65
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019D371BB32DC0312AB03126BB7A75207591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 07DE
Signing time: Sun 29 Mar 2026 01:00:55 +0000
Manifest this update: Sun 29 Mar 2026 01:00:55 +0000
Manifest next update: Mon 30 Mar 2026 01:00:55 +0000
Files and hashes: 1: 4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa (hash: new/XwK7LDSQZ29SSLejk2ZrF4hRfXE6iD6WKPwdrVA=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: 0qk5VElNL9kM7p2iw1yXjJ5F+wQ1zOvqVr+Yg9+sxuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b3:2d:c0:31:2a:b0:31:26:bb:7a:75:20:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Mar 29 01:00:55 2026 GMT
Not After : Mar 30 01:00:55 2026 GMT
Subject: CN=a1c308258a100911c835a995bd8a7d787518e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:4e:4b:fc:a1:c1:f6:23:24:38:3a:3a:e3:
90:ac:1a:3e:3b:38:e5:4c:fc:40:96:e1:4d:43:30:
3a:ab:3d:a9:ea:94:9e:76:af:d3:b5:0e:d5:cb:5a:
97:96:a8:13:3b:2f:a5:a1:9c:29:96:63:f9:3a:dc:
1d:b6:6f:a6:c8:9d:ce:93:75:bc:db:8c:05:03:5e:
1d:e6:11:36:2a:54:a1:2e:d7:ef:46:16:10:9f:83:
d8:ac:97:a1:2b:b1:72:3b:ba:cc:22:6f:0c:71:08:
5e:79:d5:c3:c0:a1:ed:ad:e4:11:59:cd:07:2f:95:
74:46:4f:29:de:0d:44:04:f9:8d:b7:62:ff:5d:6b:
fb:15:4c:e9:e6:ef:aa:77:74:23:a3:3f:84:17:a9:
bf:c8:e3:27:61:9e:07:42:c5:f5:23:8b:bc:b5:89:
85:01:9f:53:47:4f:bf:a9:75:9e:71:35:5f:73:ae:
57:a6:3e:68:ee:b3:54:bb:3a:45:cd:c1:3a:e0:e3:
ba:d2:9f:5f:03:1e:72:c9:b9:65:56:ed:de:db:f3:
c6:eb:ae:cd:46:03:2e:69:53:59:1b:40:e2:4d:2e:
a9:28:bf:df:ef:94:0f:5d:ed:6a:7f:f8:0e:48:e2:
9e:ab:47:40:50:0a:13:b1:01:7d:d8:2d:a4:af:9b:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:08:25:8A:10:09:11:C8:35:A9:95:BD:8A:7D:78:75:18:E5:65
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e6:8f:63:d4:75:04:47:f8:86:b0:6e:63:8e:63:66:80:29:
18:a8:ae:2c:91:c7:9d:1a:6b:a4:53:c7:df:2c:a7:fb:f4:ef:
f1:ce:ce:ec:52:38:7f:a6:86:f0:28:06:5c:42:f5:5a:a8:a2:
61:32:f5:0e:4e:3c:e4:62:de:a8:c3:69:6a:cf:de:21:09:04:
0f:0b:61:55:d0:e3:e1:87:35:a1:62:1f:c1:c9:01:f7:b2:12:
05:fe:33:87:d7:d2:4f:ca:12:6e:f3:8d:a7:6b:bf:f7:0a:d2:
57:c1:6b:7d:66:d5:e5:a0:31:93:de:fd:80:7d:02:52:c0:d9:
14:b5:ad:88:0c:7f:94:3c:a2:c9:b7:b5:9c:86:fb:6f:ec:fc:
a4:c7:e5:99:a5:48:86:8b:be:44:1a:ee:a7:b1:bb:8c:7e:d3:
a9:83:78:1c:07:c3:5d:f3:b8:9f:f0:b0:a7:f1:72:2a:ef:e1:
5a:ea:47:1e:21:3d:b3:6b:f9:31:07:ed:25:23:86:74:42:f4:
8a:9b:57:23:a3:c6:28:f0:6a:a8:6e:60:75:ad:d7:9d:52:cc:
9b:6f:84:eb:56:8a:27:9c:5b:52:2e:bb:97:2a:14:f9:76:a6:
b4:e9:27:bb:5c:cb:8b:3d:35:f7:95:f1:4f:1f:ca:19:a4:0d:
47:df:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client