Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier: y8FO0yugOwRsQ3nNtuWxyQlU/evLETy7H1xAeax2mhg=
Subject key identifier: D0:A5:CA:E3:25:71:8C:B5:93:CF:A1:4D:84:F7:CC:6E:EB:2B:8F:66
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial: 019D39777D268B6D740DBBFF1C632ADE03E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number: B6
Signing time: Sun 29 Mar 2026 12:00:25 +0000
Manifest this update: Sun 29 Mar 2026 12:00:25 +0000
Manifest next update: Mon 30 Mar 2026 12:00:25 +0000
Files and hashes: 1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: guz0WupMnvzFwl6Su4VrPHQkGpItya+EGo1DJtYOAeU=)
3: v5l5rLmhty_z4zNPYoM2CqX13sQ.roa (hash: iWmastkcHsmmH7pnaTSnEYzWRuOsX68BKyoXtSdp4wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7d:26:8b:6d:74:0d:bb:ff:1c:63:2a:de:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Validity
Not Before: Mar 29 12:00:25 2026 GMT
Not After : Mar 30 12:00:25 2026 GMT
Subject: CN=d0a5cae325718cb593cfa14d84f7cc6eeb2b8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:f0:0b:05:7d:a2:e2:93:11:8b:d8:8c:fe:
97:ed:89:20:07:7e:d0:86:6b:c6:d3:18:ec:e9:a9:
5b:34:ea:ea:5d:ba:0a:0f:04:29:bc:b0:d7:a0:0d:
b5:61:ef:8c:84:28:fb:88:05:8d:42:f7:35:b0:ad:
7c:01:5d:be:a8:5a:f1:d8:dc:48:bf:d4:7e:96:c9:
91:01:9b:36:d5:8e:a8:2c:b5:63:b9:c3:5c:54:50:
7f:94:7e:0d:72:ae:64:a2:ed:7a:1f:53:42:f0:4b:
d8:1d:72:c0:1b:0d:b5:72:f1:5c:d7:8b:02:72:cf:
90:b5:51:b6:6e:d6:08:5d:d1:7b:1f:75:41:11:b8:
7e:e3:33:6b:78:98:39:e9:2f:71:3f:e0:40:45:27:
32:ae:aa:3e:c0:ce:ae:fd:2e:3b:a1:39:89:5e:c8:
b7:22:2e:9c:bc:5b:2d:a1:8f:45:1e:9f:46:da:db:
8e:02:9f:ab:27:10:20:ec:a5:d0:98:95:35:3d:41:
9a:08:4a:d4:7c:68:b7:f9:53:1b:56:c8:46:c7:a9:
97:bc:a1:f3:06:13:c1:11:49:b5:78:2b:7e:1e:c8:
85:7a:d5:ba:90:50:16:a8:49:e6:a7:db:a3:b2:ee:
7d:6e:05:80:b9:25:dc:41:20:01:f8:e1:c5:17:b2:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:CA:E3:25:71:8C:B5:93:CF:A1:4D:84:F7:CC:6E:EB:2B:8F:66
X509v3 Authority Key Identifier:
keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:07:2f:86:71:f7:80:38:59:1e:b8:f3:fa:fb:8d:b9:1a:
d6:ad:d2:db:aa:54:c0:1f:98:63:39:d1:74:f1:1b:59:24:0d:
27:3c:88:ed:74:2a:38:eb:f4:a9:4a:8b:af:8b:26:ca:36:22:
8e:22:30:9d:62:91:6f:32:d5:15:9f:41:cb:ae:4b:5c:71:de:
34:7e:da:62:85:83:8c:6c:ff:c7:f7:70:75:f4:f8:12:9c:02:
f4:79:88:64:f8:9f:a2:01:e7:d0:c4:58:44:9f:1c:d3:c5:cf:
94:77:36:1a:72:36:fa:18:4d:3a:2e:d6:a1:99:cb:51:e7:35:
50:1f:82:68:58:e3:6d:96:3e:95:a9:64:1f:09:79:46:f1:4a:
c6:51:e1:0d:b0:3d:44:22:1b:71:01:69:44:a0:58:4f:c3:ad:
60:5d:f0:ff:04:2f:e9:22:c4:8b:bf:15:88:91:b4:a0:46:14:
b1:ef:73:7b:b3:db:0e:48:34:b5:bb:17:19:fb:77:87:f9:70:
c4:c0:72:ac:c4:6a:58:18:4a:0c:0b:60:5c:86:2a:ad:a6:0b:
10:94:ad:b0:5f:e5:ad:a0:9c:fa:84:82:aa:3f:dd:fb:b8:8b:
8d:44:5c:53:79:3d:b5:a4:cf:1c:1a:21:2c:fe:61:34:5f:ec:
e4:c3:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:11 2026 by rpki-client