Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: gyz83zFNy7mKjRXtz3zMyblgxmDV6PkQlqHt3u/G3TU=
Subject key identifier: 63:86:A0:E5:96:16:6C:CE:45:D2:72:A6:0D:CF:20:FA:01:60:4A:36
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019CEC3908A866BACB4876DBB1876A54CE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 08B9
Signing time: Sat 14 Mar 2026 12:01:26 +0000
Manifest this update: Sat 14 Mar 2026 12:01:26 +0000
Manifest next update: Sun 15 Mar 2026 12:01:26 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: /9tpA6seGzzbVAjRBzF7CXG99z8/ehmyerY01CHE3UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:39:08:a8:66:ba:cb:48:76:db:b1:87:6a:54:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Mar 14 12:01:26 2026 GMT
Not After : Mar 15 12:01:26 2026 GMT
Subject: CN=6386a0e596166cce45d272a60dcf20fa01604a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:07:89:8a:0b:c2:bd:8d:56:78:68:b7:bb:
87:2d:d7:61:9b:b5:2f:43:ec:8e:bb:f3:59:bc:6e:
18:ab:c2:31:31:4b:58:86:ed:14:2e:c8:b0:c4:8e:
61:ad:e0:11:03:8c:48:eb:e2:d6:6d:c5:79:f0:f4:
5c:b3:13:ca:0f:e5:63:b3:2e:3b:dc:61:42:94:66:
0c:42:38:7b:38:7d:54:a1:b0:fc:29:61:ec:f5:af:
ae:d5:86:c6:e5:ed:cc:4c:58:9b:a0:2d:ce:7d:01:
52:a2:50:16:20:3e:6d:bf:82:73:23:ee:8e:b7:21:
2d:5d:6c:09:53:6b:3e:75:54:cd:33:b8:80:db:f3:
ec:91:d6:dd:37:3f:2c:94:31:e6:4d:53:5b:e7:86:
51:6a:00:01:9c:1e:a5:81:f4:c1:fd:a8:39:93:bb:
35:3c:c4:e3:41:08:4d:7e:86:8a:b9:54:00:34:41:
ae:69:c9:f6:7b:43:9a:b9:d6:ac:fa:b9:cf:96:c7:
77:d7:94:34:59:d0:92:60:28:d4:2b:ab:55:cd:b3:
ab:71:fc:9e:8b:fa:32:13:eb:70:e2:a4:37:e7:80:
83:29:c7:c5:93:74:a7:f0:01:a5:11:99:8e:55:46:
6a:da:5c:c1:7a:75:42:87:d2:bf:9a:e9:43:ee:ae:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:A0:E5:96:16:6C:CE:45:D2:72:A6:0D:CF:20:FA:01:60:4A:36
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6c:34:9e:2e:bb:ab:f8:79:62:87:18:77:bf:fc:0d:a5:62:
48:2c:a3:b2:45:0d:c9:80:0a:aa:32:57:37:ba:62:86:00:c4:
a7:19:91:ae:33:87:3e:7e:9c:e8:c9:4d:61:3e:17:d0:fa:cb:
a1:40:12:f6:a4:f5:0a:e5:15:17:e1:d1:da:16:d2:8b:0f:1b:
08:b6:e9:3b:2d:a4:7f:62:4d:14:3f:84:c3:db:34:17:94:5f:
37:24:ae:2d:cb:4f:1b:50:e1:59:a5:43:67:d6:4d:73:06:76:
d7:31:60:9d:19:28:68:3d:cd:b1:0d:52:fd:b4:86:1d:42:28:
cf:71:9f:d8:7d:a4:23:57:c7:f6:00:42:05:f9:77:c6:2e:09:
5c:b2:76:58:91:f9:e3:44:bc:3a:3b:d1:28:23:5e:7f:f7:85:
ba:61:f7:f5:e2:4b:83:5a:ca:ee:23:a4:88:97:3d:2a:ae:1a:
dc:0a:8e:36:b1:f3:db:01:22:cc:d0:93:e1:e7:a6:c7:b9:cc:
9b:2a:fa:a7:5b:5f:63:ff:1a:fe:1a:8f:18:30:48:26:2d:f2:
c2:b1:1d:fd:72:c1:84:57:5d:15:17:a0:44:07:07:99:b5:3e:
9f:9c:c5:d9:58:ac:66:40:a6:54:9f:78:46:79:b4:d0:c2:00:
52:ed:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:51:17 2026 by rpki-client