Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: 3kRnXvVpHr/0eMr22+qKWVafv4SoTiaV/gZNn6BFb0I=
Subject key identifier: 75:B8:82:92:19:F4:D5:01:73:2A:5D:20:D6:9D:CD:21:16:0E:86:86
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 019D3940732A91DB08A03A472FBC8A179787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 06B8
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: 1-wZ-dGJD7TkcwZp0aHH7GFaEZLg.roa (hash: mvCPOF4PLAlLp3trYs0EdaoYFPkfsfUwTcZFYIhMgoo=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: L5yL5W2+EjaUf5ApToFMUWSdFaUKBAzG5x2nZIf21qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:73:2a:91:db:08:a0:3a:47:2f:bc:8a:17:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=75b8829219f4d501732a5d20d69dcd21160e8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:b4:58:b4:ed:17:44:16:64:4a:6c:bd:8c:
2a:13:cd:60:3a:7a:64:60:e9:f1:7e:55:7a:f7:2b:
d8:fd:5e:64:5d:97:87:6b:f3:ab:b9:d0:bb:c5:61:
9c:90:28:fc:2e:8c:8f:27:5a:1d:44:fb:99:0a:57:
7f:80:ce:48:3b:7b:45:23:7c:bb:e7:bf:f6:c2:43:
05:5a:40:ab:89:5d:6c:4b:ee:67:7b:41:5f:74:fd:
b6:e6:e7:17:eb:a9:af:7c:68:15:c0:e7:06:31:eb:
d6:54:d3:e2:ad:80:92:24:16:55:b2:d2:67:50:e3:
ca:b5:de:de:84:2e:af:b3:93:2d:03:96:31:59:2b:
af:28:99:76:99:27:90:ff:05:09:e9:18:91:cb:18:
8d:03:b7:80:4e:21:12:3a:24:3f:24:48:32:71:3c:
6b:4a:5b:00:d6:04:ef:0f:25:dd:12:5d:80:0a:d9:
3e:52:02:cf:55:e2:79:f6:8b:c0:78:15:e0:0c:d0:
77:f3:1e:3a:83:56:cc:75:ef:e4:64:57:9f:fd:08:
81:2e:88:b7:96:42:4b:cd:39:78:45:c6:38:d7:83:
a3:f5:c2:5d:c9:de:b7:7a:3f:cf:eb:4d:a3:58:6c:
49:89:7f:32:c7:49:f8:77:36:56:cd:02:51:96:25:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:82:92:19:F4:D5:01:73:2A:5D:20:D6:9D:CD:21:16:0E:86:86
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:01:f2:95:d1:98:d4:d9:7a:1b:7c:1f:37:fb:88:7f:da:
15:1d:e5:b3:3e:0f:64:99:e5:93:c1:95:7d:5b:ba:14:8d:e4:
4a:0d:b9:0c:bb:97:cd:a9:41:84:03:61:d9:a2:d9:37:2e:2d:
79:86:fd:89:40:61:f6:12:a9:6b:b1:7a:86:1e:7d:ba:9f:82:
7a:c4:05:e1:8a:79:dc:32:21:14:b1:43:07:57:78:17:d1:55:
2e:66:73:0f:9f:f8:72:5c:de:d0:c2:50:29:8c:75:27:2e:8f:
33:e0:ec:db:17:5e:a2:04:62:81:96:d0:2b:68:c8:2c:ff:3b:
8a:8d:54:5b:45:15:32:60:2e:e5:02:24:dc:33:73:76:91:f7:
0c:01:a0:02:78:28:66:c5:1e:e5:82:00:dd:9f:d2:fe:cb:a9:
12:87:6b:9d:e5:22:38:f7:74:52:32:55:29:d9:07:2d:4d:6e:
02:8e:56:03:a5:b2:09:38:f5:e1:0b:88:3a:c0:b1:b6:6c:2c:
64:d7:99:1c:98:ba:fc:25:5a:ed:35:97:89:0c:f2:29:de:25:
71:2a:1f:d4:41:10:af:e3:b8:3e:58:39:44:2b:d3:2b:6b:28:
d7:ab:a7:3c:ab:b4:ca:6b:f1:0c:b8:c5:bf:36:59:21:fe:94:
42:c5:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:45 2026 by rpki-client