Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: i9E7UK+p541rCLLvjumCHP+gHuvHa8vFUPYspkN4MlU=
Subject key identifier: C0:E1:E9:47:BC:93:6A:AC:6F:7D:E4:FD:C5:89:50:69:69:81:D5:0E
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019D37F72D5B3A5524809C64AC62F0EB49B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 05:00:39 +0000
Manifest this update: Sun 29 Mar 2026 05:00:39 +0000
Manifest next update: Mon 30 Mar 2026 05:00:39 +0000
Files and hashes: 1: X3ZQenpvE8l1hGo8jarjWIZlEHg.roa (hash: z2dHWQocjAT7eQBvB40EN/2l3Ks2v71LcjzkY2camiw=)
2: ko8WrvZomBgcI3Hqp37PqXOWiSI.roa (hash: 8LPZPPU2MH1K+TEuOxL4YKzpLJKTkh0MI1eoRloRcik=)
3: p5uygMovU567H0ml5c8C_ZDtiZY.roa (hash: PWQLRe33NpLQ7v5TkzLMs7Rxm+rn1zWzKAt3r3JdpTc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: UDS6UI4wiopL/EPpymIYbr5zBrZt0pb/ItGXRWZ+Llc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2d:5b:3a:55:24:80:9c:64:ac:62:f0:eb:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Mar 29 05:00:39 2026 GMT
Not After : Mar 30 05:00:39 2026 GMT
Subject: CN=c0e1e947bc936aac6f7de4fdc58950696981d50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:ee:7d:ec:42:f8:b2:34:dc:1d:eb:cd:d0:
0d:f8:1a:7e:da:49:e5:08:6d:ef:88:c9:ef:35:43:
b9:76:42:b1:88:cc:8e:32:25:8e:e0:83:52:10:20:
f1:4d:b1:b8:fa:49:2f:ae:54:bb:9e:08:00:77:0b:
45:5b:0b:e5:49:8e:bb:86:f5:12:53:44:1b:86:12:
ac:b9:0b:b8:15:fb:80:25:2a:0b:d9:f3:05:6b:fe:
7b:f8:5d:1e:37:4e:2c:85:15:60:c4:78:8b:ff:23:
0a:b4:c4:83:33:ff:da:6d:f9:29:bc:bd:26:93:64:
94:9b:a9:34:eb:76:ca:ef:ed:fc:7c:5b:82:66:75:
a5:85:09:c9:9d:1a:c9:bf:99:ac:b1:24:bb:8b:cc:
90:9a:4c:40:0f:84:a3:ac:c8:b6:e1:18:24:39:2e:
78:bf:3b:43:c2:ca:29:b3:24:91:21:44:43:7b:95:
0a:e2:19:fe:9d:ee:95:7e:27:e1:7b:44:3d:a3:04:
da:44:bc:cf:42:a9:98:fd:d3:8d:de:a4:5d:40:70:
ab:f3:28:b3:97:d4:5a:a5:94:f0:f2:39:3b:e0:0e:
ab:f5:d5:ac:4f:60:86:83:86:01:c7:f2:c1:b0:0d:
62:22:84:03:10:35:ef:b1:1d:b0:49:0e:a4:3a:2a:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:E9:47:BC:93:6A:AC:6F:7D:E4:FD:C5:89:50:69:69:81:D5:0E
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:07:96:89:7f:e8:39:bc:40:ee:98:2f:b3:90:ff:f5:ab:
48:fa:3b:4f:be:e0:67:95:13:2d:46:2a:ba:a4:8e:f4:94:da:
af:f9:1a:38:c6:7c:15:40:43:da:52:93:f6:05:f2:74:de:b1:
5f:f7:87:d4:55:d3:d8:7c:a2:f9:c8:9b:3d:aa:c7:7d:16:73:
6c:d4:cd:46:25:46:fb:f1:69:c8:8c:3c:6c:29:75:e9:22:04:
82:83:84:84:84:58:2c:af:c2:76:95:90:d6:7c:c1:88:93:47:
2c:da:96:d9:46:31:2c:4d:5c:08:24:47:fc:23:c5:45:72:86:
d4:8a:e7:a5:4c:98:95:5f:0d:8f:69:0c:ca:65:d0:dd:d9:4a:
1b:cb:cf:3f:d6:e1:67:1a:16:ba:88:de:ed:e5:8f:d2:a3:fd:
54:9e:74:bb:d3:a5:e8:84:70:32:83:6d:cf:5b:a2:3c:b9:d2:
20:08:ab:0b:9d:7a:f5:55:c6:8f:e3:0a:9e:74:2a:57:85:4a:
13:d6:d0:58:1c:12:c7:df:de:92:f2:1b:91:7b:08:fc:5d:30:
f3:01:d6:33:11:5b:c8:1a:38:cd:ab:fe:6f:ab:01:c5:51:04:
35:9a:25:d4:72:cb:56:cc:f0:cd:2b:6a:9c:d2:2d:5d:8c:da:
b5:a3:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:21 2026 by rpki-client