Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: k0tieRDFY27cxQYKNoGWi4CiqExrQZut+MGXc2V4PiI=
Subject key identifier: 86:CA:0A:30:2B:62:0E:80:82:39:E9:CF:07:04:A0:0F:93:D2:D7:B9
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019D389BDD70690ED872D3AE8E465C35DE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: yRzpO4X5sLOTst1ZffD703jOtbm1lg9B+Id0hqduF74=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:dd:70:69:0e:d8:72:d3:ae:8e:46:5c:35:de:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=86ca0a302b620e808239e9cf0704a00f93d2d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:82:75:14:07:55:3b:27:88:af:ea:9a:d0:
a0:4f:f4:40:4a:46:e6:5c:bd:68:28:f0:ab:a8:3e:
f0:43:be:d8:24:ac:c9:98:1e:16:e5:6d:82:c6:06:
38:67:87:1f:7b:49:7b:bd:04:0f:eb:63:6b:3f:9e:
c2:b8:1b:75:71:a8:44:05:9c:b3:4f:5a:3f:62:11:
44:69:0d:70:a0:11:85:e9:60:d2:3c:45:0f:33:17:
55:a1:9b:c1:63:64:04:5e:d1:87:32:93:89:c1:2f:
42:83:b6:00:93:49:c5:12:93:1b:3b:72:aa:aa:f6:
b2:c4:19:24:3f:05:3f:10:fc:06:9f:7b:c4:82:95:
2a:8c:ec:24:8a:5d:95:fa:5d:83:e4:0f:38:67:d5:
08:22:d9:90:d0:f3:07:d6:27:f0:4b:07:6e:40:e1:
5b:34:f2:05:a6:0e:ba:e8:0c:01:26:e2:c6:46:ac:
d2:84:14:ab:0d:de:45:6b:87:51:ed:d0:5d:c5:5e:
d1:22:81:02:fb:c1:e6:b3:ce:d3:f7:ae:13:d9:d6:
9f:cd:7b:8d:2d:b0:99:84:3d:b1:8c:11:94:c0:05:
77:2c:83:1e:60:b2:5a:d4:be:8a:82:50:f2:b5:69:
99:6f:05:21:48:00:3d:40:b4:ad:9f:22:93:27:7d:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:0A:30:2B:62:0E:80:82:39:E9:CF:07:04:A0:0F:93:D2:D7:B9
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c3:13:99:13:de:66:06:19:bc:2d:61:42:3e:80:38:87:40:
0b:48:ce:82:70:98:41:23:53:ab:4a:be:1b:6a:b6:2f:3f:32:
7c:ae:e0:63:5c:bd:97:f7:eb:88:ec:9a:3d:81:48:08:c3:9b:
0e:ba:fd:5e:bf:ed:06:a1:73:f9:84:45:08:fb:eb:08:8c:8a:
7a:04:e6:c8:77:68:c6:45:56:81:e8:b4:f9:48:48:b7:b8:5f:
7f:f9:f9:11:76:a7:96:b9:c7:c1:2b:d1:3a:43:80:f7:22:b6:
f0:ef:3c:66:86:48:94:26:96:44:96:5c:80:30:2c:48:89:ea:
10:68:3c:9d:c3:bf:d8:c2:6c:0b:b0:3a:34:b2:d7:d2:30:fd:
17:4c:71:a4:f8:5c:d2:12:f5:82:cf:b3:92:42:89:f3:32:78:
60:2e:a3:84:7f:c1:fd:f5:88:06:7c:d0:48:97:36:3a:78:6f:
34:8c:d6:fd:86:e3:a6:54:d7:00:7b:d9:87:f0:87:e3:be:7d:
5d:2f:36:82:8c:f2:1e:d7:3f:0e:26:cc:be:c2:d7:e3:86:74:
d5:32:ea:b0:dc:5e:41:76:ce:6a:86:48:2c:57:83:8b:c2:85:
78:ee:ee:8b:b6:c7:f8:4b:60:cd:f1:09:e1:ae:84:cd:ea:4a:
17:17:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client