Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: n2fV5m/nUgYG+4euzjmzI10YqIwA+VNHcDc0ehduMRw=
Subject key identifier: F4:71:EA:F7:15:73:0C:AC:A6:95:05:61:81:71:3C:58:32:B0:A9:29
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019D386679F133763E22589F09DC0E6B1EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 12D7
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: mwYtccRJdMqRlXRAWUDrZ4m0O4APOKNLMV6i2h4Z9f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:79:f1:33:76:3e:22:58:9f:09:dc:0e:6b:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=f471eaf715730caca695056181713c5832b0a929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:0e:09:a5:45:40:de:fe:ac:fb:46:9b:b9:
1e:51:92:75:8b:22:59:02:03:01:96:aa:a8:d9:68:
9c:b8:e7:88:26:24:95:69:f2:34:af:eb:93:f2:c0:
21:55:f6:19:cc:9e:35:2c:74:f4:c7:54:30:35:1f:
f9:77:47:b9:52:e0:35:eb:c0:59:75:44:f6:e8:83:
96:41:cf:05:3d:07:11:4e:c9:b7:f6:8d:fd:3a:e0:
4d:0c:d8:45:58:f5:a5:6c:4e:40:ae:65:ab:e3:bc:
28:e3:77:57:f2:67:94:af:5f:04:39:71:55:14:d2:
68:7b:5b:35:71:aa:c7:4a:0e:15:15:5f:fd:a4:f5:
fc:d9:76:8a:79:5d:18:75:37:66:c6:f1:a5:47:6a:
34:37:83:45:63:28:5c:82:e2:80:c1:55:f5:de:b0:
19:c1:c3:03:61:dd:0e:90:ae:e3:96:db:83:b5:a9:
d8:b4:ff:5a:2f:62:a5:ae:e4:80:f3:0c:27:1d:e8:
67:47:1a:4d:5c:a1:00:41:ab:fe:4e:8c:e1:d4:f4:
90:21:52:fb:3c:ea:f4:38:ed:20:c6:97:2b:d1:c0:
6a:26:1f:bb:02:74:4b:0a:42:0d:4a:39:0f:ef:0d:
4e:65:21:b5:9f:96:18:7d:d6:75:8f:96:9a:90:1c:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:EA:F7:15:73:0C:AC:A6:95:05:61:81:71:3C:58:32:B0:A9:29
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:39:f5:01:b7:7c:be:e0:a7:75:33:06:41:8d:33:73:69:
43:94:d2:7a:93:8c:ca:5e:4a:0a:49:69:48:24:3d:68:5e:e1:
2b:6e:2e:43:85:db:a6:0f:94:fa:b4:57:73:f9:32:18:b0:fc:
a7:a3:96:62:8c:19:10:a2:2e:46:8b:c0:1f:ef:f4:02:dc:43:
ac:e7:32:77:4b:99:3c:78:16:50:db:de:e6:db:f1:14:cd:9e:
dc:45:a1:88:8d:9b:ec:73:e4:4c:a7:17:77:18:94:d5:56:3a:
a3:1e:8c:d4:bd:3a:f4:ae:90:7a:dc:d5:36:57:2c:c6:56:7a:
f7:59:e8:9a:7d:6f:1f:8c:bb:a1:6f:46:a6:de:09:1c:eb:6b:
f6:09:b0:d3:9a:69:0b:b7:e0:89:3e:48:8f:bc:bd:1b:c8:94:
47:13:53:3b:3b:ef:aa:7b:83:bf:84:08:fe:c4:2c:67:89:71:
20:5e:ce:23:61:74:0c:c9:0f:41:10:46:6a:6f:0e:5e:18:5a:
6a:ab:04:db:51:17:a1:fe:a2:a1:d0:3e:2e:dd:73:7a:98:0f:
90:7f:32:ae:f9:01:c2:7c:65:49:13:7c:18:12:e0:fd:d9:d0:
5c:3b:fe:f9:55:e6:84:b2:82:6c:a3:ec:ef:d5:82:ba:c3:b8:
3d:c4:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:09 2026 by rpki-client