Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: lVEkPqqAAgM+UdqRH3EyiVwMANvGA92ABRiMp3Xc5mc=
Subject key identifier: 1D:DB:98:42:4E:EC:EC:AF:7A:DB:35:66:EB:EA:6A:B4:00:C1:D7:B9
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 019D3789C17701AC326A44FAB9381B51CA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 05EF
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: xAwC9v2pDzbNDsLMQHKskO70xoQ.roa (hash: pNouLSLbbOHtlI8iLu58m9dwfp4hUJRS+ezdGScljvg=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: 0IPM7WEhDYNlw9azIuTQT7nMBH1t+KJySkuxSWdZdLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c1:77:01:ac:32:6a:44:fa:b9:38:1b:51:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=1ddb98424eececaf7adb3566ebea6ab400c1d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:b8:c2:8d:30:f5:f4:3c:f0:80:d1:eb:21:
41:6e:ab:e1:7c:b3:b9:20:f2:68:9c:88:31:f2:13:
82:ca:b2:90:9e:b3:fd:b7:18:7a:a2:36:92:d4:4b:
6d:7c:09:ec:17:2a:3a:01:1f:bc:26:77:75:ee:b7:
ab:67:f0:91:10:90:7d:da:34:02:2c:27:77:c5:32:
27:fa:20:ed:df:a0:bd:34:b0:5d:36:3d:98:0b:41:
29:9a:b8:62:d0:2d:14:9f:63:d7:0f:ae:36:2b:04:
94:e9:9f:75:9b:69:1f:59:1f:c6:46:03:be:55:0a:
6e:2b:83:66:23:9a:a6:46:54:26:03:1f:6a:07:95:
ea:20:95:4d:04:40:71:6f:1a:92:42:46:65:6e:0b:
ec:db:02:b2:b4:b6:a0:3d:a6:99:48:04:95:23:f0:
49:65:fa:6c:de:24:5c:bd:7d:70:59:1c:a9:db:8d:
b7:5b:c0:35:28:f1:4a:14:c4:5f:1c:5f:b8:23:0d:
13:59:11:78:82:04:de:1b:8a:f2:0c:d4:9b:17:76:
d5:2c:aa:ee:eb:35:a6:47:05:67:44:f9:8d:69:ed:
c6:5b:42:94:fd:a5:52:2e:25:61:ac:ac:4a:0d:cd:
43:05:ec:f0:b1:a0:03:ab:af:7a:0b:c5:0d:ad:41:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:98:42:4E:EC:EC:AF:7A:DB:35:66:EB:EA:6A:B4:00:C1:D7:B9
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2c:dc:01:65:e4:aa:60:cb:e9:34:64:3f:4f:cf:c6:3d:c7:
a2:8f:20:4a:ab:45:c3:93:25:3f:7b:59:cd:ac:0c:86:d8:05:
e6:4d:97:93:ec:2b:8e:55:f5:80:e1:7a:03:6f:86:6c:cb:d9:
8a:38:fd:7a:15:a2:45:76:59:29:f1:4c:51:88:37:84:c3:67:
e6:a5:c3:aa:cc:e4:0c:1a:45:02:4f:80:ff:c3:57:ae:71:85:
49:6e:15:3a:57:e0:78:6b:49:c8:78:86:15:e2:17:44:0f:ea:
a1:32:63:8a:53:3d:4c:31:a8:57:c3:ca:13:4e:b1:d3:e9:ca:
bb:5a:a7:00:ae:34:ff:ca:17:a6:53:04:20:d6:94:03:53:94:
a7:8a:5a:12:fe:30:dc:98:03:c7:f1:41:3f:cc:69:15:2f:dc:
dc:8e:55:51:2a:20:a8:20:55:82:ef:6f:e8:f9:13:05:e3:cb:
a9:ab:42:81:c4:17:cb:86:9f:5d:1b:cf:e3:2d:00:36:dd:5c:
13:a7:5a:a8:20:c4:ac:15:92:4f:43:f9:5a:33:92:5c:3f:bd:
6f:63:1f:02:4d:ac:1d:82:8f:be:69:4e:35:f6:47:8c:87:7c:
53:bd:59:3a:e6:b6:14:28:e3:05:16:60:22:1c:cd:61:98:28:
60:9d:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:52 2026 by rpki-client