Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
File: y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft (raw, json)
Hash identifier: fhy+WuT1w2CELdhxP8ICiNpFFpLzmvkU7ZzFEiV00OY=
Subject key identifier: E5:4C:9C:EC:3F:97:B0:4D:EF:38:72:C2:E2:A7:35:EB:8D:5F:E7:25
Authority key identifier: CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3
Certificate issuer: /CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3
Certificate serial: 019D3865E1AD46D71108A793268C6A9F54A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: 1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa (hash: Hq+dP+btQbNrYBQSTsx2CRpU6VIf7Y+oZgutJKi72PA=)
2: y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl (hash: 5g2C2NRFmkUbHmhMYo6vzx+UB5LCk8unNWOp76jmO4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e1:ad:46:d7:11:08:a7:93:26:8c:6a:9f:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=e54c9cec3f97b04def3872c2e2a735eb8d5fe725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:07:17:3b:c3:2b:cc:08:bc:54:c8:e5:64:
e6:07:bb:0d:4e:73:53:6f:38:12:74:e1:c1:52:15:
85:5c:c5:0d:af:10:11:92:99:69:cd:0c:e4:64:9f:
0a:9a:22:c2:1b:f6:b5:e8:28:c5:f1:76:76:59:c7:
ae:be:3e:d5:20:85:e4:95:91:c4:49:20:aa:48:70:
22:b6:92:4c:c0:cb:ab:b4:d8:4b:17:cb:a4:2f:c1:
01:b4:9b:0c:70:18:38:92:be:b7:54:c9:ab:21:45:
9e:c4:d1:02:32:d0:69:2c:cb:e4:02:3c:e1:b9:ef:
08:3b:a0:56:ac:51:82:ca:0c:cb:02:1c:4d:e5:d1:
3f:93:d4:6b:53:af:d1:5e:9a:6d:f5:c1:2a:2a:55:
ef:58:2a:1a:b0:67:b6:cc:c4:50:d2:ef:8f:80:cd:
91:44:c2:8b:a2:16:c7:35:2c:d6:11:94:bf:6f:d3:
5a:06:6e:ab:0b:c1:a8:0d:b9:9b:f3:88:af:43:f6:
c9:92:cb:38:1a:18:f3:3a:2e:3e:6f:ce:ea:df:75:
81:fc:4d:4c:bb:ee:2d:78:5d:23:e4:27:a2:c0:ac:
88:d1:12:bf:d5:f0:ab:9b:dd:88:3d:e9:4e:85:ac:
6c:2a:a9:41:92:c4:d5:c9:24:e4:06:4a:da:00:bf:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:9C:EC:3F:97:B0:4D:EF:38:72:C2:E2:A7:35:EB:8D:5F:E7:25
X509v3 Authority Key Identifier:
keyid:CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:80:74:89:76:b5:98:58:c4:49:d1:c6:85:bf:67:fa:f3:ad:
db:81:f7:ec:b9:07:0e:3b:2f:e1:e3:29:6d:73:f3:0a:94:8b:
b1:d3:36:63:c8:11:82:ca:12:7d:a5:7d:22:58:d7:6c:ca:dc:
51:ff:cf:58:35:d9:b0:f0:e6:93:81:fe:9f:a6:a9:4b:ad:d2:
a6:f0:7a:14:05:51:04:f5:e7:b0:28:e1:fe:4f:c5:a9:50:8f:
5c:72:56:8c:39:c9:85:47:fe:71:43:42:fc:8b:d6:a9:27:c3:
78:94:f1:97:aa:43:8d:10:7e:ca:6d:60:d1:c7:1e:5a:94:a4:
b8:fb:1d:2e:bb:36:d9:f6:91:82:c4:c5:1c:07:75:28:d4:7f:
8d:9e:89:39:4e:3e:06:8c:e3:94:1a:45:67:d3:0c:a3:20:56:
fa:8f:2a:fa:f7:89:32:e6:c5:98:de:97:ae:27:0d:a1:d3:82:
c2:97:aa:a3:62:69:76:3d:56:ca:a1:a6:4e:2c:82:9a:83:8e:
d1:3c:03:82:f1:1e:a3:0e:be:fd:f6:d0:82:68:20:94:99:a2:
b7:cb:3d:ba:0a:bf:49:97:88:b3:9c:b7:e4:4a:bd:5d:0d:aa:
0e:73:f4:96:80:af:70:d0:0b:01:1e:67:08:eb:ce:33:d2:bd:
e8:9f:7b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeGtRtcRCKeTJoxqn1ShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2FlYmM0ZTg1YjhjYjk4MjRhZTQ4N2FhMTQ0NGVlZjQz
ODI2YTMwHhcNMjYwMzI5MDcwMTM0WhcNMjYwMzMwMDcwMTM0WjAzMTEwLwYDVQQD
EyhlNTRjOWNlYzNmOTdiMDRkZWYzODcyYzJlMmE3MzVlYjhkNWZlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+UHFzvDK8wIvFTI5WTmB7sNTnNT
bzgSdOHBUhWFXMUNrxARkplpzQzkZJ8KmiLCG/a16CjF8XZ2Wceuvj7VIIXklZHE
SSCqSHAitpJMwMurtNhLF8ukL8EBtJsMcBg4kr63VMmrIUWexNECMtBpLMvkAjzh
ue8IO6BWrFGCygzLAhxN5dE/k9RrU6/RXppt9cEqKlXvWCoasGe2zMRQ0u+PgM2R
RMKLohbHNSzWEZS/b9NaBm6rC8GoDbmb84ivQ/bJkss4GhjzOi4+b87q33WB/E1M
u+4teF0j5CeiwKyI0RK/1fCrm92IPelOhaxsKqlBksTVySTkBkraAL850QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVMnOw/l7BN7zhywuKnNeuNX+clMB8GA1UdIwQY
MBaAFMt668ToW4y5gkrkh6oURO70OCajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNWI3OWEtNGM2Mi00NDE4LWIyY2It
Nzc3M2ZkZTNmYTdhLzEveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNWI3OWEtNGM2Mi00NDE4LWIyY2ItNzc3M2ZkZTNmYTdh
LzEveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIB0iXa1
mFjESdHGhb9n+vOt24H37LkHDjsv4eMpbXPzCpSLsdM2Y8gRgsoSfaV9IljXbMrc
Uf/PWDXZsPDmk4H+n6apS63SpvB6FAVRBPXnsCjh/k/FqVCPXHJWjDnJhUf+cUNC
/IvWqSfDeJTxl6pDjRB+ym1g0cceWpSkuPsdLrs22faRgsTFHAd1KNR/jZ6JOU4+
BozjlBpFZ9MMoyBW+o8q+veJMubFmN6XricNodOCwpeqo2Jpdj1WyqGmTiyCmoOO
0TwDgvEeow6+/fbQgmgglJmit8s9ugq/SZeIs5y35Eq9XQ2qDnP0loCvcNALAR5n
COvOM9K96J97Zg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:15 2026 by rpki-client