Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: z6KenfqEHq+7WfbPp8wqg7zGCS3A3uCQex5ix1HZ0ZM=
Subject key identifier: 72:47:E6:45:0C:1A:F1:65:C5:47:C7:97:1E:70:87:B0:BB:A0:39:69
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 019D37F701A465465EE76408B48ED6443F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 07F1
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: xcqDjGoa+g/ZQ8hDZEe5fKp4kQBxarWyYAZ/Rxc6mes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:01:a4:65:46:5e:e7:64:08:b4:8e:d6:44:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=7247e6450c1af165c547c7971e7087b0bba03969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:21:a1:02:c1:dd:15:90:4c:7b:35:82:92:
4f:ce:5f:d1:b0:25:eb:3b:29:7f:25:6b:36:e1:f2:
fe:e8:53:ac:53:66:3a:92:b2:91:2b:fe:e5:ef:2b:
15:51:3a:7b:0d:96:bb:58:c7:75:72:6e:ad:c7:17:
04:52:93:d8:aa:4a:e4:32:ed:7f:37:1f:f0:b1:fd:
c0:a6:73:a1:a2:44:b4:7c:b3:9f:bf:61:c8:c2:01:
2d:19:97:9f:59:67:4a:45:04:16:eb:f7:a7:86:d7:
36:ab:02:6a:63:3f:c7:11:ae:22:91:1b:00:d1:d1:
a6:62:ac:63:e9:12:0b:2c:23:37:db:3b:1c:03:ac:
e0:af:56:04:a4:20:9c:b5:ef:ea:e2:20:64:7a:3f:
f8:0a:d0:98:d4:d4:75:87:d3:5b:c5:52:68:f7:de:
59:9d:52:5a:cb:38:c1:13:07:19:eb:d8:c6:64:a7:
42:1a:0e:59:c6:38:77:58:33:9e:b3:5e:30:74:4b:
d2:16:a7:95:e1:ab:75:1f:4c:51:0f:d8:15:bb:22:
4a:be:04:5f:a1:4e:e0:64:b6:f8:ea:ae:61:e6:9c:
2a:9d:68:f9:05:4f:da:11:1b:74:ae:25:dd:27:2b:
74:ba:de:1c:4d:6e:52:40:b9:a1:35:56:56:fb:c3:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:E6:45:0C:1A:F1:65:C5:47:C7:97:1E:70:87:B0:BB:A0:39:69
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:46:57:97:05:f9:0f:e1:11:31:80:bd:59:89:0b:c1:ee:
fc:16:03:81:c9:e9:d2:57:94:ac:2d:c7:a1:e1:32:9b:1d:00:
47:75:6e:48:a5:e5:39:d6:3b:b2:1e:33:d2:b1:08:b2:01:57:
87:7b:e9:49:e2:10:b6:ee:79:a4:f8:d9:4e:47:10:1e:3b:4d:
00:67:2f:81:02:f9:55:1d:69:50:20:64:b7:fa:ba:53:9b:41:
7c:10:fe:fd:9a:35:df:be:53:bd:3c:cf:d1:9f:3b:8e:b3:60:
65:74:c7:d2:6e:a7:fc:dc:22:6f:bc:e7:e8:12:97:3d:c3:58:
4a:27:06:82:ed:9f:46:32:fb:7b:09:67:c7:4b:f8:72:9c:37:
0f:40:eb:79:93:b5:4a:91:cc:2b:53:44:d1:74:00:c7:a5:cd:
fb:ee:f9:32:96:f6:78:79:36:15:f7:e9:3b:da:1c:39:34:c9:
1c:91:c0:43:ec:2d:c1:a1:86:34:36:1a:50:a4:3c:31:69:16:
e0:e9:e6:fe:ae:2d:b8:2f:36:e9:6f:8b:62:76:8d:80:18:07:
76:53:25:e3:4f:05:3a:c1:a3:b1:a7:49:7e:7a:d3:88:97:1a:
f4:83:73:9f:9a:63:af:71:ff:93:ab:af:e8:3e:34:82:3c:bc:
ff:20:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client