Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: j3gw/b/rIR4BdWrhBBi5hIiVGnck/xRm67GNsnBCAOY=
Subject key identifier: 39:F5:AF:87:CB:E5:B9:BC:C6:1A:EC:6C:76:74:3B:65:27:AB:C0:62
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019D382E77338A3DAD7C2347F469595F39F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0BFF
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: 5/bchQZgwSsCK7WeFaZwhHHAK8ryS6Tk7bAuInsrI7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:77:33:8a:3d:ad:7c:23:47:f4:69:59:5f:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=39f5af87cbe5b9bcc61aec6c76743b6527abc062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:18:83:a0:9a:24:0b:18:4d:44:e0:cc:6f:
6b:64:49:b8:f8:c3:5b:c7:a4:3b:95:a6:45:15:fa:
83:23:e6:4a:b5:bc:60:53:9d:2a:a3:77:67:45:9a:
aa:c9:85:85:29:dc:5c:19:2f:7e:ff:5a:f3:cc:56:
a9:0d:f4:6f:e5:82:a5:35:3b:9c:3d:3e:70:2f:d2:
c5:d6:2a:8a:a2:f9:f6:b7:19:05:e4:8b:de:90:76:
36:91:1f:ae:26:41:12:38:c5:2d:44:e6:90:37:47:
04:2b:d5:15:95:8d:a8:4a:5d:66:80:78:44:83:56:
ce:db:db:20:ea:d3:a3:c8:34:dd:d7:50:40:fd:10:
e5:d1:9b:b8:6f:0d:e3:4f:4f:b9:7b:3e:ae:8f:bb:
6e:6f:f7:69:56:59:04:37:ce:35:77:8f:0e:ac:26:
99:13:7f:84:e7:93:43:ba:3c:76:f8:b3:33:d5:24:
21:a6:32:61:9d:42:43:ba:db:88:a3:49:dc:52:16:
d0:41:c2:dd:ed:5e:5c:1f:16:d1:9b:70:42:74:f8:
4f:a0:d9:40:76:d9:4d:07:b2:2b:c3:c4:c9:7e:d4:
da:39:5c:cd:a6:75:8c:86:71:af:2a:19:36:13:5f:
af:ea:0b:fd:88:8e:0f:69:76:43:4e:f5:96:01:a7:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:AF:87:CB:E5:B9:BC:C6:1A:EC:6C:76:74:3B:65:27:AB:C0:62
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5c:e3:71:49:09:7f:bf:db:28:b1:ca:29:9e:fb:41:0a:f0:
ae:b7:51:63:61:ef:12:30:3f:55:d4:26:03:3c:35:db:e8:ce:
9c:d0:8a:b1:44:d4:60:93:19:70:1c:f2:2e:09:06:58:fd:27:
f7:ea:9a:1c:0c:87:e4:84:bd:5c:63:eb:47:79:05:85:77:48:
c7:be:ec:2c:8e:92:9b:9b:04:85:d7:b3:d5:26:d1:64:44:cd:
d1:c7:e8:a0:9e:0d:1a:dd:1a:b7:9e:7e:5d:49:fd:79:c2:f9:
29:b9:ea:5a:60:75:a8:11:93:5a:b4:25:9a:fa:df:84:0b:3c:
b1:cb:56:fd:fa:9d:83:a3:3f:ec:fc:7f:d2:6e:42:7d:d2:08:
0b:27:c7:63:0d:c5:5f:73:f5:13:25:02:2c:0e:05:6a:c7:27:
50:5b:86:ff:b3:33:bd:fd:6d:6f:ce:d9:82:b2:fd:95:83:71:
68:c8:e6:70:3d:6b:5c:8a:24:c4:10:7e:2e:a2:86:3b:50:45:
e0:d8:c6:79:d0:7b:d3:77:44:fc:77:66:26:ff:c8:4e:d5:86:
ed:ea:44:db:ca:2c:a9:33:0a:ea:8b:4a:e6:01:fd:4b:ca:e1:
87:d7:6d:c7:8e:95:ad:de:5a:00:13:5a:2c:fe:a1:e2:0d:5e:
25:f6:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:00 2026 by rpki-client