Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: ROXaqgDlmu4eaBkzoCz/ayNZF/qtpsIONscS1u/NJ24=
Subject key identifier: FB:A1:C3:6B:9A:EB:84:7D:6F:52:50:2D:7A:9D:00:CA:A4:86:14:CA
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 019D3977F16C5154DA0A2852DB3CA9B79A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0F2E
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: XsUKN2cOhLRHhR3AtKfxWQhi9jo.roa (hash: 6oB/bvwt2D2mFpVBEQFtPNnqH7Wf192r6bul35x6h9A=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: pBbhMXNF4GawXywVLGWzp+kDI+AyrVaj/ZytZU95aNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f1:6c:51:54:da:0a:28:52:db:3c:a9:b7:9a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=fba1c36b9aeb847d6f52502d7a9d00caa48614ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:9a:db:7e:f1:69:37:5a:00:20:55:5b:af:
f0:a7:e2:d5:64:16:e3:87:6c:3c:1c:bb:cc:06:90:
2f:08:c5:74:db:59:c7:ab:6e:f5:41:7c:e8:6c:63:
5b:61:37:e2:99:19:7a:bb:f9:9a:19:76:93:7c:3f:
bc:88:07:c3:15:ab:2d:83:f7:5c:2d:0a:ed:da:32:
37:2d:df:90:67:0f:4d:fa:ca:a1:fc:c9:da:33:a8:
43:0a:6c:22:17:8a:b1:ac:5b:4b:96:b1:67:ad:68:
99:35:84:3c:5d:9e:05:76:42:4d:30:93:e7:06:e2:
dd:b4:0a:d7:1f:80:0d:00:40:28:d2:3a:79:a4:95:
0d:d5:62:05:24:d1:34:b9:79:54:49:58:a8:f0:1c:
44:fb:e8:a8:07:31:cd:e8:66:18:2d:e5:26:5f:8c:
3c:dd:ac:7a:22:47:d1:27:06:74:8a:54:c9:22:d1:
e9:f9:ee:65:2e:8d:b3:13:c6:a0:9f:7d:f1:a8:34:
e1:85:e0:b5:a3:5c:2e:7b:eb:f7:2d:15:22:ca:43:
7d:dd:e5:4b:9d:4d:f3:3d:ce:1e:bf:5e:f8:b9:08:
b7:93:1b:75:af:8d:f3:42:ce:41:5a:09:c2:74:1d:
f9:9c:b9:f6:6a:b5:bc:1d:df:9d:22:66:38:0e:22:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:C3:6B:9A:EB:84:7D:6F:52:50:2D:7A:9D:00:CA:A4:86:14:CA
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:68:64:5b:93:70:0a:6c:b4:c8:a9:24:6a:21:5e:8d:18:e4:
4c:5d:ed:94:2f:53:6a:79:1c:d9:06:5e:74:7e:7f:c4:a5:ad:
4d:82:e0:ef:49:3a:80:03:fe:c5:07:f0:df:de:7f:74:af:8b:
78:33:e4:42:b7:ea:2e:53:b2:61:c0:e1:1f:f1:48:80:d1:8d:
b3:cf:5a:81:62:e1:cb:e4:85:cd:b2:e6:9c:75:66:2e:90:42:
2f:81:0d:93:20:b9:7c:66:a9:67:54:fd:16:a3:96:62:cd:d4:
8b:95:aa:31:81:af:df:90:cc:a0:c3:ae:a8:5a:7e:e3:1a:37:
4f:41:26:ad:e9:1d:36:ea:31:48:3a:cb:33:aa:1d:9f:d8:12:
e8:f8:c7:b2:c4:13:5a:c5:64:7f:ef:e9:a0:09:24:23:5e:0b:
1b:e0:80:97:bb:5d:77:ff:1b:ce:08:28:02:31:0c:c5:12:db:
46:ce:83:c4:d6:d0:d8:c0:65:fe:78:b5:98:11:2b:21:b5:b8:
47:01:18:7d:e3:b0:df:9b:65:c2:c7:51:5d:d1:3b:df:ae:da:
ad:40:26:2a:49:44:5c:4f:46:b0:5e:8f:6a:11:dc:32:a2:52:
23:9c:35:0a:ca:e1:01:42:a0:85:56:f9:0a:39:37:38:b7:d7:
c3:e2:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:17 2026 by rpki-client