Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: zY1e+MZHklSTHFA6b3vP8ul3BvcyaEgxr1H5rBkfWt4=
Subject key identifier: 84:98:A1:E9:F1:5C:89:75:6E:38:D3:79:D8:A7:9D:F1:26:1C:D1:27
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019D37C0864AB1B2A57D176B7722A5E435A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1524
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: 8rVQAuzaoC8+JfkvOCFyKqGrJabR1uuu538gM0rEvwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:86:4a:b1:b2:a5:7d:17:6b:77:22:a5:e4:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=8498a1e9f15c89756e38d379d8a79df1261cd127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:56:ce:9b:f6:f9:60:4e:34:bd:92:5b:0f:
ca:a6:96:50:af:cf:5f:65:5f:9b:7c:90:7c:04:d8:
d0:12:9a:33:75:fa:0f:71:46:90:1d:62:77:3a:d1:
cb:04:1d:de:4e:fd:fa:45:49:10:e9:45:34:c7:5c:
2f:7c:9c:44:73:e8:96:6a:8a:16:57:30:fa:ac:c1:
9c:9c:f6:ce:91:0c:27:41:27:f7:b8:e3:37:7c:2e:
46:14:c0:eb:09:41:25:23:c0:b1:f6:b0:41:a3:75:
53:f5:fe:9b:c7:ee:16:0f:1d:91:71:21:6c:88:b1:
8c:7c:df:b7:97:00:9a:de:d7:fd:9f:36:e9:31:ea:
d0:e4:b5:71:63:1d:27:25:ca:7c:49:ce:18:69:ec:
89:f0:62:04:b2:ae:31:1b:75:35:f9:2a:40:66:46:
c1:5b:18:53:99:40:5d:31:6a:db:5b:2e:83:fa:fa:
68:f9:9b:bc:81:0a:9e:ed:00:71:04:c0:dd:09:22:
cf:1b:4f:00:d6:a8:c3:5e:99:38:e0:8a:ba:71:e8:
a1:2e:c5:61:a1:d7:39:66:93:3e:d6:5d:1d:d5:47:
f5:da:e5:d1:f3:16:bc:cf:51:ab:08:e1:1f:97:85:
b3:c1:a2:58:a7:0f:9e:47:62:67:d6:93:c4:9a:03:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:98:A1:E9:F1:5C:89:75:6E:38:D3:79:D8:A7:9D:F1:26:1C:D1:27
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:20:b7:ab:8b:c3:a4:bc:2c:b4:0e:3d:e7:bf:78:2f:f6:
51:10:dd:96:15:90:b8:0e:c4:00:2b:27:ec:97:0e:0f:28:d5:
da:dc:15:ba:2e:48:69:e0:fe:bc:e9:f9:44:25:6e:b7:f2:8d:
3b:b0:11:4b:38:e6:d6:2f:54:f0:84:7a:29:56:74:20:34:f1:
a9:25:dd:0d:4a:d9:b5:d0:df:81:5f:cf:c7:06:d1:06:4d:69:
ed:c6:d1:e7:79:dd:48:db:a5:c3:9f:41:c5:2a:2b:83:70:f8:
c7:cd:a3:be:13:41:e8:d4:4d:cd:9a:29:eb:fc:e8:5c:9e:ae:
b8:70:c4:39:0d:e5:bf:f4:71:90:8c:20:2e:99:7c:c7:c9:c2:
8c:78:fa:07:b9:46:dc:ae:3e:6f:9f:33:9f:e0:33:12:a8:c4:
67:e8:6b:a3:21:6c:6e:67:e7:87:47:ae:07:3c:7f:e9:f1:6f:
6c:06:07:41:4c:d7:31:48:2e:6a:71:b8:7a:a2:a1:5f:de:82:
b4:f6:95:2f:1f:98:8a:e6:db:98:e4:8e:a8:04:8c:8a:b2:20:
88:f2:56:9c:f3:58:4e:55:d1:0c:c5:63:b1:0c:f5:8b:d1:0b:
8c:de:42:78:17:a8:f0:be:d4:92:08:ac:80:43:fa:59:c7:0d:
39:06:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:17 2026 by rpki-client