Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: xS4oSsetCBBVf9SJLQe7zFdKYOTozWcf4sfQnfzMFX0=
Subject key identifier: 41:6F:96:AE:10:2B:43:62:4C:B1:00:0A:F3:BB:F3:5D:5D:02:96:1A
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019D38665003577CEF4A56BB896DD9F82BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 11F9
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: UnqvcYfZ9wYYLtWWxdFbL+GEwQoYeP+ADT75Ru6HZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:50:03:57:7c:ef:4a:56:bb:89:6d:d9:f8:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=416f96ae102b43624cb1000af3bbf35d5d02961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:53:83:a5:a2:3e:1c:d3:9e:f5:b7:bb:df:
67:b6:f2:56:b8:26:9d:4a:21:1f:67:1e:89:05:db:
82:a1:76:15:cf:1c:be:9c:99:79:33:c9:2b:b1:22:
b4:4a:b0:91:06:71:98:d1:68:01:29:59:c4:cb:8b:
ce:39:37:a0:2d:65:63:13:d2:27:6b:85:49:30:74:
8a:c8:03:e6:67:3e:71:8d:97:6f:02:8b:3f:c1:f6:
a5:e9:a0:a6:f2:fd:76:b1:ac:68:fd:3b:2d:92:51:
52:0b:6a:e9:dd:c2:46:b2:db:1f:f4:18:04:db:8b:
a2:d8:b5:4e:7a:55:e3:38:1d:f3:d9:94:e4:8f:24:
2f:51:69:ff:e5:8b:8a:b2:a8:dc:6e:89:58:a9:b7:
8a:cf:7c:7f:92:59:e4:5d:8f:34:50:64:c2:46:c3:
40:36:b4:ee:bd:d2:33:f0:ca:e9:ac:5a:38:08:e4:
0d:fa:a9:e8:9c:95:cf:14:f2:17:c6:3b:49:0b:5a:
13:c6:f7:9f:6d:a5:4e:ad:d4:f8:bb:f9:d3:2e:fd:
b5:1c:78:9e:9e:f1:96:36:8f:da:f1:c1:eb:a5:34:
fa:f4:b5:36:bc:f8:1b:77:c9:d1:ea:c4:dd:67:99:
1a:64:23:49:01:34:7c:40:66:e8:fe:31:4c:03:bb:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:96:AE:10:2B:43:62:4C:B1:00:0A:F3:BB:F3:5D:5D:02:96:1A
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:d5:a4:4d:60:d6:2d:78:8e:a9:fe:f2:82:78:7c:01:68:
19:ed:d2:fa:66:c2:a2:5a:f3:b3:0e:6f:a9:97:7f:cb:fb:59:
e3:50:dc:a6:b4:f7:b0:ff:2d:7e:2d:9d:06:ff:7d:c5:02:20:
43:ff:d9:b0:0b:a6:55:18:2f:55:2e:7d:a8:1d:d5:f5:45:f4:
dd:dc:85:c3:16:6b:3e:99:c2:79:d8:51:b6:8f:fa:db:e0:2a:
4d:e8:45:9b:76:2f:7f:69:67:9d:fe:61:12:d1:e2:56:54:e5:
2f:6d:34:b5:2e:c9:4c:42:2c:f2:d4:b7:05:8d:39:5e:da:a7:
c7:29:05:a8:50:66:fa:57:56:cb:97:c6:05:3f:b3:dd:ed:b2:
2f:ed:6b:50:df:05:f3:84:1c:db:8d:4f:b2:e5:ca:dc:38:fe:
25:28:25:25:23:c8:17:d8:f7:e1:06:2c:68:c1:ea:04:16:f0:
a7:e6:1a:8f:ba:a1:75:4b:d8:c2:a9:cf:dd:ef:85:b3:14:48:
8d:2b:95:e9:71:1f:ab:0b:e2:96:ba:df:af:3b:5b:12:7b:e8:
cf:a5:e9:34:03:fb:e4:b9:0b:20:a4:7d:2c:52:8d:b8:2a:8b:
4a:1d:6a:f9:90:df:60:4b:8a:8d:92:9b:bc:9a:51:8d:86:a4:
b2:33:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:25 2026 by rpki-client