Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: zD5b+HsJkg2zxsMqwWg+lCXmqt7Hh28OJl5KQmqQjYU=
Subject key identifier: 8F:E6:87:F7:89:66:A7:DF:E3:ED:49:8C:0B:2A:66:73:95:28:49:45
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 019D38D34B1D6E1A6662D1DE9C170E324331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (hash: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: qWLsEiOQslpVetSxF5ogsp1HgAmT68XvtjEMqKrMbKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4b:1d:6e:1a:66:62:d1:de:9c:17:0e:32:43:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=8fe687f78966a7dfe3ed498c0b2a667395284945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:81:75:cc:90:59:42:c0:6b:2c:92:aa:d4:
b0:70:58:b6:07:ab:b5:95:7f:b9:d5:c6:d9:61:4b:
8f:65:08:18:f3:89:3f:fc:48:f2:1f:2f:2e:d5:4e:
8d:55:aa:2b:31:6d:64:67:7a:ee:2d:56:62:84:41:
c6:ae:5d:53:ec:d1:96:68:1b:a9:ab:bb:21:ce:db:
4e:b6:26:01:89:8b:45:f7:32:62:96:95:cf:5e:e7:
fa:3b:6b:04:e2:dc:cf:a5:e9:30:48:f6:9c:87:65:
85:7a:d3:7f:17:d1:d1:df:a6:21:4c:e7:5e:17:9b:
1f:4a:22:b5:07:1f:64:9d:06:dd:5d:20:f8:b7:2c:
65:ae:28:89:e0:1b:24:dd:4f:4b:34:dc:57:8a:c7:
8d:23:96:13:82:ab:63:12:eb:5b:26:64:b6:b6:46:
a0:8f:bd:d3:ce:7d:f3:f4:06:82:4d:48:03:6b:a8:
c9:3a:19:e9:e2:fb:c1:86:8f:c9:dd:88:e8:44:f9:
ff:79:df:80:88:f8:70:3c:87:7e:88:69:da:cf:67:
02:dd:65:9d:e9:16:2e:b3:d5:2e:3b:ac:56:ec:79:
ed:5b:b4:01:a0:ad:0c:49:9d:60:f9:91:a5:d5:d4:
ca:bc:2e:ac:c0:22:0a:4d:fa:65:12:98:f3:34:da:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:87:F7:89:66:A7:DF:E3:ED:49:8C:0B:2A:66:73:95:28:49:45
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:e1:70:7f:fd:73:67:4b:60:a4:8e:49:a7:53:f5:60:9f:
d5:68:2b:da:e3:53:9b:29:35:7e:64:04:a4:d8:e2:5a:67:af:
9d:89:e5:1c:ab:1a:88:b6:84:e3:44:08:f0:54:9e:dd:d1:25:
ba:2a:4b:f5:ff:05:46:c7:1a:45:f4:d6:c9:56:0c:a0:05:e3:
66:8d:9d:7c:0b:c5:d7:3d:31:fe:b5:6c:1b:65:a5:e9:6c:66:
c8:e3:97:1a:bd:e8:f6:b0:58:26:b6:a1:0c:d9:30:46:ba:7c:
70:aa:fc:f6:48:98:cb:42:32:c2:2e:8b:77:07:9f:44:d4:b8:
df:50:27:47:bc:1f:6f:b8:ee:48:42:9a:d9:c3:de:1b:8e:04:
a5:a0:90:3b:d6:f6:e6:79:6c:ba:0a:42:99:78:f3:28:1c:77:
c8:5a:4b:9f:12:99:5c:cd:ac:c3:8d:e4:a9:6d:14:ec:e3:d0:
b6:f1:bb:a3:14:5a:32:2e:63:56:97:f4:ee:70:bd:a2:52:14:
5f:97:74:7a:13:72:bc:fd:13:8e:fe:8e:3e:06:54:02:a7:e7:
f3:49:29:08:5c:a2:21:95:fd:e4:01:46:f5:af:87:da:25:fe:
42:99:84:5a:5d:ec:90:ee:0a:c1:f0:34:8c:f9:39:d5:0e:c8:
0d:31:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:40 2026 by rpki-client