Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: f/f4KU3CkNoSPcXNawUJTnz/9+asYvsFZUdI4/W5PzE=
Subject key identifier: 75:15:83:B0:F3:61:4C:F6:E3:CF:7C:7A:6D:F1:71:E4:CE:F5:EE:03
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019D36E48D14CC43E5FACEDD0F4C4E576DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0401
Signing time: Sun 29 Mar 2026 00:00:40 +0000
Manifest this update: Sun 29 Mar 2026 00:00:40 +0000
Manifest next update: Mon 30 Mar 2026 00:00:40 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: RA/nq1vWeqC4zHLbUroUiUPlylcn7dBlLgic7TvnHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:8d:14:cc:43:e5:fa:ce:dd:0f:4c:4e:57:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Mar 29 00:00:40 2026 GMT
Not After : Mar 30 00:00:40 2026 GMT
Subject: CN=751583b0f3614cf6e3cf7c7a6df171e4cef5ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:b1:88:de:ee:b6:35:c2:16:be:77:99:55:
b2:12:e9:ef:28:ff:ba:8d:62:82:b6:ee:e3:8b:b5:
2e:d6:d1:14:87:42:d3:84:52:0d:f9:de:5d:2c:be:
5a:14:23:1c:31:34:35:a5:4f:81:c5:41:fe:f9:df:
6c:fe:8d:7d:84:66:b6:fb:f8:2e:08:e5:76:c1:d7:
d9:2c:ef:e0:e9:d3:52:60:22:42:2d:d1:87:5d:5c:
6e:12:ff:c7:46:48:30:3a:f3:92:cd:05:4b:af:d9:
71:dc:7b:ce:ad:dc:5c:25:3f:59:41:9f:f8:c9:6f:
5c:20:e6:1a:82:7c:da:92:4e:47:18:32:78:b4:8b:
fd:dc:0c:1c:71:35:b1:7d:6b:bd:9d:44:29:d5:a3:
92:9a:4c:69:8b:55:db:89:ff:32:63:5c:f4:fd:0f:
6e:fa:e8:d7:a4:0e:9a:fc:04:80:63:48:d7:28:e5:
52:d8:61:82:2e:4e:dc:d9:c4:ba:fb:73:eb:04:01:
94:dd:fa:da:5d:c1:30:04:15:33:7e:20:12:a4:90:
8b:75:1d:f7:c5:0e:e7:37:97:91:96:a2:54:31:6e:
10:08:b8:80:43:b0:57:24:c0:2c:af:ac:df:64:24:
5c:2c:dc:12:e6:39:e7:d8:98:29:90:91:43:39:7e:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:83:B0:F3:61:4C:F6:E3:CF:7C:7A:6D:F1:71:E4:CE:F5:EE:03
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d1:8c:f5:d2:19:45:f8:54:93:92:04:92:8a:d6:66:c3:74:
e7:d5:d9:fb:1e:b4:10:bc:c9:e7:c1:b0:33:22:9d:df:8d:15:
b9:8c:44:91:c2:21:de:5e:9a:7a:c4:ea:51:04:d8:f0:d4:35:
70:35:53:d4:89:5f:95:ae:6a:c9:71:39:4f:56:27:14:cd:de:
73:f0:df:32:05:d2:b6:32:e7:d9:25:aa:11:31:4b:c4:7a:9f:
fc:b4:f7:7a:f9:33:f0:5e:74:06:f6:02:d7:91:e5:cc:5b:51:
82:57:ca:4c:84:38:84:17:79:3d:4e:71:cf:2e:0b:2d:f9:5c:
76:10:b8:53:23:05:86:10:c6:63:09:64:8d:77:55:6e:82:c1:
4d:a2:f6:b6:c5:a9:c8:9b:18:e7:c9:3a:23:ef:38:1d:de:5f:
0b:b7:dc:00:77:19:ad:25:eb:12:f3:16:e8:aa:18:20:11:aa:
b2:03:18:29:ca:bd:8d:1a:eb:d2:c9:04:06:a9:c1:b3:b7:df:
c9:74:5e:2c:6a:1d:f9:bc:93:b9:58:e7:89:a6:14:c2:82:26:
cb:99:92:e4:38:52:2a:31:00:ce:b5:10:ae:d9:cc:a9:a5:c7:
f0:7f:fb:6f:d1:2c:2b:ca:4f:7b:6b:40:07:ea:26:49:f5:83:
61:af:7d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:18 2026 by rpki-client