Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json)
Hash identifier: 6U+aBtsdumNSh2x2BmW5+qHEFno4uZ/b98yrqVVjFRE=
Subject key identifier: 32:68:12:F4:10:F5:A0:B4:AD:E0:1B:4F:9E:F9:4E:6D:0D:4A:41:8F
Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Certificate serial: 019D37533A2EC5464E1300314DC2F27CC560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: 6xzwjLfc074wzpSsasUFpTvwQ78.roa (hash: fXZfzg+UYAPpupI96tb5/VxIz5QW19/qQNhNNMcTUWI=)
2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: 2pAovNqJYrQ+LXgs/p6szBFNEPonibjoYIHMZBY3T+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3a:2e:c5:46:4e:13:00:31:4d:c2:f2:7c:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=326812f410f5a0b4ade01b4f9ef94e6d0d4a418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:47:19:c6:0b:bd:44:3f:4a:c7:1a:5f:ce:
46:32:75:34:47:a8:41:37:ce:80:59:ad:d6:1c:cc:
11:90:7f:e6:6f:4d:06:4b:15:51:9f:d6:5e:84:1e:
89:06:a1:30:3e:d4:ac:5a:a9:35:89:ad:4b:90:eb:
1b:2b:56:72:08:a6:01:2c:ee:a5:57:d1:ad:6a:5c:
23:7c:05:33:ce:db:53:60:24:90:b8:15:cb:89:89:
e2:80:ab:3a:dc:62:ec:6b:44:2f:bb:87:d2:b3:a8:
da:84:a9:a7:4d:9d:7c:bf:7a:e5:3b:f8:a4:2d:6e:
eb:50:48:80:7f:0e:83:8b:ee:45:17:96:da:c3:23:
b1:9c:32:61:e2:2a:35:fb:59:e8:e9:ca:54:1a:ed:
13:44:f6:72:5e:ef:2f:f1:ae:fb:c9:73:fb:a1:a4:
0e:e3:c0:5b:bf:92:c1:63:2e:59:64:9c:86:c7:af:
9e:82:34:48:81:8c:77:a8:8a:fc:f1:1e:08:1e:45:
8d:b4:24:7a:3b:01:c6:15:3d:8c:ef:69:52:6a:40:
79:58:ce:fb:6e:c4:82:e8:1d:17:95:a6:d8:ef:a6:
6f:a9:94:18:33:9f:1b:7b:35:8e:5f:7f:a0:7e:15:
ab:ea:87:fd:7a:e2:fc:b5:03:ee:a4:4b:7b:4f:69:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:12:F4:10:F5:A0:B4:AD:E0:1B:4F:9E:F9:4E:6D:0D:4A:41:8F
X509v3 Authority Key Identifier:
keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:20:14:37:9c:db:0e:59:57:31:fa:46:79:e3:8b:30:67:
96:c5:37:4b:2e:e7:40:93:76:d1:45:92:27:1a:6b:58:54:59:
d0:42:2f:f1:e0:19:8d:87:d0:46:f3:28:9f:94:e7:84:23:8a:
20:51:f4:38:72:a2:6c:9f:e5:1b:e8:2c:1b:5d:d4:36:fb:dd:
38:68:f3:21:18:de:c2:64:9b:41:9e:b1:d0:04:72:03:d7:26:
0f:3f:70:68:be:6e:9d:8e:17:56:4c:50:3f:f2:47:e3:aa:0a:
e5:5f:86:0a:66:07:54:40:fc:a4:b5:38:72:9d:2c:cc:3e:15:
aa:93:24:38:06:41:55:d0:ce:b7:f5:3b:1a:1b:3e:3b:07:64:
30:b4:a9:2a:08:0b:a5:a1:ea:3e:6d:1c:35:06:b7:c0:49:70:
fd:fa:7b:94:52:9e:ed:c4:9d:da:c0:9c:23:31:89:f6:0e:32:
d8:ea:b7:57:78:a3:5a:9e:90:21:22:b9:eb:fc:f4:5d:66:86:
a3:94:96:3e:74:53:43:79:0e:cc:5b:08:ca:d7:15:48:57:05:
93:da:f6:17:37:de:97:fe:0d:8b:55:e2:25:67:66:f3:58:f6:
0e:83:60:3b:44:ec:d3:59:27:8d:26:84:ec:a8:5f:3b:b6:4b:
aa:65:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:18 2026 by rpki-client