Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: 5ARak/2aPgy96quSwHF+IFwDWuishmV9EgUDkdBlpRw=
Subject key identifier: B3:F4:AA:55:B9:83:C2:F5:F4:6C:5B:36:CB:59:B3:6F:3E:4F:EF:D3
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019DDE7A6CD2B7C78A33C1E6F32590FC965A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 10F3
Signing time: Thu 30 Apr 2026 13:00:58 +0000
Manifest this update: Thu 30 Apr 2026 13:00:58 +0000
Manifest next update: Fri 01 May 2026 13:00:58 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: dgMB1lfXzIO9z9CsO9NhkTynFLeK8O82EbmNrwKjkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:7a:6c:d2:b7:c7:8a:33:c1:e6:f3:25:90:fc:96:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Apr 30 13:00:58 2026 GMT
Not After : May 1 13:00:58 2026 GMT
Subject: CN=b3f4aa55b983c2f5f46c5b36cb59b36f3e4fefd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:df:fd:74:b8:ad:88:d5:34:4c:4e:f5:fd:
23:2d:d5:77:96:de:97:9f:29:4a:a8:c7:c1:0f:1d:
87:a0:f3:df:ea:65:d9:a9:f6:48:7d:cf:34:da:9f:
c9:8a:a4:87:ea:c0:f5:1f:b3:1e:70:d7:9d:ec:ee:
9c:6a:1a:2c:5b:7b:df:fc:d1:f5:56:87:c7:9d:7b:
b0:db:25:da:00:bc:59:fe:67:87:fb:55:f0:c7:bf:
fa:61:01:78:63:41:48:95:70:8e:07:7f:b2:47:85:
93:cc:ff:9f:c0:e1:d6:a7:1d:6e:c7:57:7d:6c:4f:
09:1e:29:b8:40:50:a9:ea:4a:a1:ec:ed:c6:38:b4:
dc:4a:04:e7:45:64:51:32:c3:f9:a8:76:1f:a7:ba:
3f:07:6a:61:83:d6:08:bd:55:d5:59:2a:8a:1f:6f:
d8:92:11:27:85:ec:73:59:bd:4f:3e:4b:ae:e5:29:
48:1c:0b:f7:57:44:d6:aa:41:a5:db:8e:35:95:c8:
80:93:2f:b5:52:58:9a:5b:f2:db:5f:a0:ae:dc:b2:
28:65:75:65:b5:6e:22:c8:dc:dd:5f:b6:7b:cf:1b:
dc:1f:20:0c:c3:6e:eb:fa:9c:c6:e6:8a:a3:f1:c5:
63:34:13:5b:a7:b4:b9:78:70:84:77:a1:24:85:61:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:AA:55:B9:83:C2:F5:F4:6C:5B:36:CB:59:B3:6F:3E:4F:EF:D3
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:93:43:01:74:da:62:fb:37:1a:14:fc:27:20:dc:10:c0:42:
0e:a3:cc:99:dc:48:db:51:34:4f:26:2a:46:b0:61:7b:9f:7c:
cc:66:74:ea:a5:fc:86:5c:a1:3f:fd:4f:fd:37:c2:37:34:6e:
43:34:2d:0f:ba:e6:75:d5:f1:43:3f:c6:c0:3d:a0:cf:37:6a:
de:64:6d:77:09:a2:c9:2f:8a:ec:35:f8:be:aa:56:79:05:f8:
04:ae:0c:59:d0:88:a8:d0:7c:7b:bd:24:19:18:38:e8:42:06:
9f:db:c8:db:44:0e:6c:a8:0d:9f:f0:ab:ff:ab:ef:8c:04:db:
eb:c5:7e:4f:b5:ed:7c:41:71:23:d6:49:48:c5:a6:3a:6e:19:
5b:09:5f:37:17:fa:31:ee:6a:6f:36:bf:d7:65:c2:8f:f7:cd:
21:12:21:76:98:ac:67:0a:40:a8:6b:b5:b9:bf:8f:c2:7a:87:
a1:ba:01:3e:08:d0:c5:a4:d7:4d:81:a7:49:79:85:cc:f4:62:
d0:94:38:c4:c4:b8:6b:7e:f4:d5:20:76:ef:df:37:70:63:9a:
6d:8e:89:7d:07:9a:6c:4f:22:c0:7c:99:34:65:2d:62:e5:98:
cd:e9:aa:92:81:30:b9:64:0a:58:1d:6a:43:4a:25:ee:2d:c8:
fd:6a:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:37:38 2026 by rpki-client