Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: FOviTKHkc49+NC8a51XDaaVbL15tT4mzYS3zztybVU8=
Subject key identifier: 0B:A4:C8:2E:3A:33:B0:6B:18:64:93:F3:1F:1B:32:28:B3:1A:20:78
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019D37C1055354B1179EE0EBB0B7CF8BC6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: FruAgbaxwyAdZ54AyV+6ih3Xs0aIq1R1ZhwM5WzWjM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:05:53:54:b1:17:9e:e0:eb:b0:b7:cf:8b:c6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=0ba4c82e3a33b06b186493f31f1b3228b31a2078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:d9:80:35:c8:98:b1:71:bb:93:ab:b8:a7:
a5:7a:58:82:88:64:16:68:54:14:c6:5f:b6:11:03:
d1:4a:53:f3:0e:b3:85:64:4b:d6:2a:e3:2d:1a:de:
e5:95:d1:62:8f:be:03:7e:2c:c7:b0:63:7e:a6:a5:
e4:69:48:59:dc:b3:39:71:8c:43:07:92:31:61:0e:
93:d4:b2:98:4d:fd:00:76:fc:80:d1:a7:4b:db:50:
cd:33:d8:ea:bf:ee:e8:48:db:64:60:5c:7f:9d:58:
e4:b7:3d:a1:60:79:0f:db:15:84:3c:80:72:d4:92:
26:e7:3e:b4:33:cc:c6:21:86:2d:62:45:d8:5b:70:
83:0a:4c:08:3e:63:91:42:0e:10:8d:44:47:a2:aa:
b7:cb:04:36:91:35:f4:d0:0d:f6:d4:9c:dd:42:d5:
da:d2:e9:97:2e:ec:ab:fc:5b:c4:27:32:58:9d:61:
cb:87:4b:93:ab:a1:4b:87:72:7c:1a:a7:80:de:2e:
12:75:a7:87:a0:8c:9f:85:29:81:4f:58:ae:58:d4:
3e:76:16:06:99:51:c9:c1:84:13:76:55:c7:80:2f:
a1:73:76:05:f1:8b:79:e4:bc:6b:e4:45:1d:19:b1:
6d:41:37:b2:76:65:74:16:40:ca:83:47:98:89:41:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:C8:2E:3A:33:B0:6B:18:64:93:F3:1F:1B:32:28:B3:1A:20:78
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cc:3c:17:1c:8e:8a:c8:e7:1a:3e:5a:ec:fc:c6:8f:df:61:
0f:c1:24:e3:3b:46:7b:77:ef:97:11:08:3b:1c:54:d5:22:0a:
f3:a9:a7:33:0c:45:09:b4:55:e5:90:c2:b4:2b:b3:06:c1:99:
a4:13:6a:c7:9b:6f:4c:7b:90:1e:46:2e:63:83:a5:7b:ca:4d:
73:b1:5f:d5:14:59:eb:6a:b5:50:25:c1:ed:35:47:16:9c:54:
d6:c9:e7:2b:24:8d:13:34:34:f7:9a:36:90:37:1c:38:e7:a8:
fb:b0:d2:a1:71:7a:f1:54:24:34:0f:7e:c6:9d:10:31:d4:5c:
e3:12:13:6f:ba:99:48:a9:30:68:42:de:42:90:a7:a1:a6:47:
98:eb:cb:ad:2c:ea:a5:f7:3e:45:4e:1f:91:2c:13:b9:26:56:
6b:f1:30:e6:7e:da:79:48:6f:3e:78:b1:39:75:58:ad:a4:bf:
84:78:15:3c:2c:17:11:80:e7:0b:c9:07:de:77:f9:3b:7d:c4:
6c:15:93:02:57:7c:49:4e:6a:97:48:7b:80:56:39:18:ed:c4:
35:88:5b:e1:ec:ea:53:9b:38:eb:a5:13:4d:a9:f1:39:f3:5c:
4b:27:2d:c5:1d:8f:16:ea:aa:39:0c:88:de:52:b3:2c:16:88:
f3:cf:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client