Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: 2JNiL6NPYHQTnct70ndVlEYORJvhcKsDl4SISmsdL00=
Subject key identifier: AD:4B:33:5E:99:4E:CD:19:CD:C9:8A:EA:AE:86:54:59:62:EE:9F:66
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019D3977F4C566D81FBF55EC75613AECB5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 09C8
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: 41KhDGrqUnPRW+1diPINEThuAsMpCWI3iH2CDTKlCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f4:c5:66:d8:1f:bf:55:ec:75:61:3a:ec:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=ad4b335e994ecd19cdc98aeaae86545962ee9f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:cc:dc:49:c6:f5:8b:e8:77:e2:6c:19:39:
b0:08:2b:aa:7a:8b:b7:80:d8:19:6c:06:73:de:33:
9a:25:06:87:a1:23:7e:e4:18:b7:da:c1:60:8e:1a:
76:4f:ec:52:54:06:fe:3b:f2:5c:b0:e0:32:76:b0:
c4:78:e4:62:c6:99:24:44:f6:01:08:f5:79:ba:39:
08:e0:6a:47:38:f6:4f:a7:48:3c:ab:b3:7e:5c:00:
22:c8:89:6d:51:71:e8:3f:2a:4c:9e:74:ac:01:22:
42:d3:2b:8c:07:60:3b:ed:51:9d:03:75:a2:64:94:
60:1b:e9:8b:87:40:1c:51:6c:c7:12:74:df:27:51:
bd:00:2a:32:54:0f:22:d5:09:58:1e:3d:a0:d1:03:
ad:a2:da:03:e5:56:41:09:10:6b:42:d9:48:9d:0c:
b3:71:f0:6b:30:db:c0:8b:a6:ea:e1:f8:38:d2:38:
4f:73:b2:ea:7b:34:4e:04:45:2c:7c:ba:01:e1:2d:
9f:8b:3f:92:3d:b2:2f:a6:29:76:31:2a:e9:84:d8:
12:d9:47:9c:22:07:2a:50:4d:34:93:41:24:54:9e:
28:7c:70:d6:20:84:8c:eb:6c:57:4c:74:29:54:8e:
4b:95:49:13:c5:5b:cc:f0:0a:ce:ce:3b:40:44:5b:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4B:33:5E:99:4E:CD:19:CD:C9:8A:EA:AE:86:54:59:62:EE:9F:66
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:60:d4:bf:a2:bc:b4:55:0d:8b:8a:b6:ba:78:65:b1:40:
19:2e:51:d6:d3:7d:9f:41:f1:1e:8f:be:39:fb:db:19:76:65:
c8:61:63:81:39:5a:59:52:d2:8b:94:89:91:5e:b1:94:7c:a6:
42:c6:17:41:c8:17:f5:94:25:e6:50:95:12:25:35:30:69:e7:
9d:39:2b:a8:f3:81:ba:9d:46:1f:30:04:21:8e:02:e8:9e:cc:
af:8e:cb:a7:ae:7b:8d:d3:e0:41:de:cb:e4:ef:27:09:55:e7:
d9:19:0d:bc:41:45:ab:9f:2a:2a:b1:9b:77:d1:91:f2:c0:2b:
8d:7d:29:b1:b2:9c:5b:e8:ca:70:41:36:a4:4e:8f:56:e9:c5:
55:3a:14:55:bb:19:61:af:59:d2:e2:61:89:21:b7:15:1d:27:
1d:7b:a2:92:5b:c9:28:72:ff:41:3a:a8:02:2e:6c:78:07:51:
4a:0a:68:06:ea:fb:0d:5c:62:95:bd:ea:10:b4:df:32:9d:d7:
69:b2:39:73:3a:9e:86:b9:e6:04:1a:30:9c:1e:93:f0:8a:06:
7f:ed:c0:09:30:5e:0d:0d:e8:5a:2f:e4:69:27:22:3d:43:2f:
bc:f6:9a:c5:f9:36:b5:ea:41:75:3b:61:c9:2e:0a:bf:ba:4d:
20:30:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:07 2026 by rpki-client