Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: VnIFfewV5+LjkmZh7ezfPy99DqKipAKX/5Q5kk9bkGc=
Subject key identifier: EA:47:BB:D6:7A:6B:55:A7:FC:26:47:8F:B4:1F:11:67:82:9D:61:B0
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019D390A5569B2BED9EE1134233CFB34F52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0814
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: FF7R76JgWNeODUKbsK8f7XVN024PJNri3J/C1/IoGik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:55:69:b2:be:d9:ee:11:34:23:3c:fb:34:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=ea47bbd67a6b55a7fc26478fb41f1167829d61b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:c9:1d:26:c4:d0:48:0c:a7:3c:37:81:79:
32:33:4a:6a:e1:75:ba:be:4e:df:b3:d4:e7:53:a4:
b9:36:4e:24:a5:2f:c4:e1:91:a9:c0:28:06:32:47:
61:d0:55:ad:c8:47:aa:51:89:0a:db:6d:15:17:42:
b2:60:16:57:0e:76:b5:1f:12:62:07:81:18:b8:3d:
e3:44:c7:de:6d:b9:cf:9f:3b:2c:7b:18:c3:96:27:
2d:73:9a:b1:88:ef:d4:45:b3:03:f8:98:21:bb:ee:
21:89:0e:01:bc:3c:0b:7f:df:41:39:39:e7:9b:f3:
b7:1e:e1:2d:ff:b7:a0:a4:ab:a6:ad:2e:7b:dc:64:
fb:72:e8:c4:5c:22:0d:60:d7:42:98:5e:d0:9b:41:
82:ec:b1:df:b8:40:44:06:18:a5:f4:be:85:23:2c:
a1:d8:2f:be:42:0b:88:17:be:f8:f0:0f:f1:44:69:
db:49:11:a6:8b:bb:69:8a:1b:c1:55:9c:1f:86:56:
4f:94:f1:d2:e0:4d:6e:e4:b1:be:af:c8:32:76:68:
69:cb:83:fe:10:45:a7:be:b8:2d:97:a4:09:45:e2:
5e:a5:dc:50:7d:bd:ec:07:9f:26:33:a8:99:33:d2:
f4:bb:72:87:4d:f5:31:f1:71:a5:31:4f:db:bf:fd:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:BB:D6:7A:6B:55:A7:FC:26:47:8F:B4:1F:11:67:82:9D:61:B0
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:ee:c7:98:d1:ef:19:bc:11:50:f2:07:09:f8:da:fe:95:
ff:18:67:d4:a6:f3:30:47:3c:1d:2f:85:a7:4e:84:c2:69:2b:
76:42:bb:ed:ef:5b:0b:94:ea:ab:ff:0b:57:61:9f:d4:8f:06:
c8:52:0a:22:72:b1:ef:76:33:3c:2e:cb:7a:37:02:3b:29:52:
14:cb:73:6a:6b:7a:24:d3:32:28:ed:f5:89:a9:61:12:d0:42:
7e:4e:ad:d8:24:63:61:11:95:36:23:9e:b0:ce:e2:6a:0b:7f:
d1:9c:87:74:1d:11:cc:27:04:af:3d:ac:07:2b:8a:b2:d0:80:
dd:b2:71:98:fa:dc:3a:ec:88:5f:4d:19:84:98:65:03:d1:51:
77:08:b0:f1:8b:a1:6a:42:8b:6d:06:9c:f9:46:ce:43:1b:a1:
04:c3:75:40:a8:9f:4f:10:bb:88:fe:1d:7c:ff:1e:4f:6d:d6:
85:6f:f5:4d:0d:3e:1d:ef:b5:bc:0b:6b:e0:33:2e:f2:1c:e5:
ce:f3:f5:47:56:96:6b:38:01:8f:b8:16:1b:a8:8c:64:81:cc:
70:84:78:ca:57:51:d3:2d:bd:58:de:00:95:26:b7:91:83:1d:
b0:89:45:fe:21:2b:dd:35:3d:4d:bd:1c:eb:17:0b:46:55:60:
1c:4c:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:19 2026 by rpki-client