Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: XTHA+aFp9Fg/s5/zEXoDRjBIDJdQTcia1A11vSitKxI=
Subject key identifier: E2:B5:29:5C:83:80:97:1C:26:46:87:B5:8E:2A:E2:3C:68:45:5E:89
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019CF617E4EC5584A655BA43FD60D8DB299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 07DE
Signing time: Mon 16 Mar 2026 10:01:26 +0000
Manifest this update: Mon 16 Mar 2026 10:01:26 +0000
Manifest next update: Tue 17 Mar 2026 10:01:26 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: 73rlxbbiX1hpE5sRFqaTPfsZoUgH3MvhRAFe7lsPxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:17:e4:ec:55:84:a6:55:ba:43:fd:60:d8:db:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Mar 16 10:01:26 2026 GMT
Not After : Mar 17 10:01:26 2026 GMT
Subject: CN=e2b5295c8380971c264687b58e2ae23c68455e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:b0:46:6f:a0:3b:fc:4f:d5:37:f6:12:1b:
c0:f3:82:66:f3:eb:98:36:8c:dc:4c:4e:de:ad:20:
aa:c1:14:c8:a9:43:49:15:e1:8d:b2:86:dd:10:11:
04:52:b7:bf:16:99:41:a3:1b:1a:cd:19:a2:1c:12:
90:15:d5:97:a4:47:30:bf:34:9c:03:5c:bb:7b:8d:
d1:31:ff:54:03:39:6b:f2:9a:47:4a:2c:6d:f9:88:
94:01:cc:89:d4:88:59:ee:22:5c:3b:45:2c:3f:b0:
0e:ed:f1:3f:f6:6b:6a:8b:40:f6:8b:a6:df:cf:c7:
18:22:bd:3e:d3:91:3a:d3:89:4b:15:cb:1e:23:2b:
3b:e8:2d:02:3a:d6:87:5f:e8:09:df:64:52:af:85:
cb:89:34:da:2c:ba:26:1f:23:d3:13:04:41:9d:6d:
c6:2b:ab:07:b5:74:50:2b:13:5a:8e:f3:0b:bc:92:
82:95:d2:34:3b:af:10:c5:0f:90:67:18:ea:d0:2c:
b9:26:0c:3e:81:34:73:c4:b0:3f:d3:9b:7e:c8:2b:
0c:38:a8:a4:16:6b:23:33:6b:11:d0:cf:58:25:d2:
ac:93:17:6a:ea:56:f0:66:6d:74:bf:4d:51:72:d6:
68:e8:7f:07:55:c9:4c:b5:28:90:af:e6:01:a1:4b:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:29:5C:83:80:97:1C:26:46:87:B5:8E:2A:E2:3C:68:45:5E:89
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:69:f6:85:05:87:bb:c4:60:e6:70:0c:5b:2a:4e:07:a1:93:
af:5f:f4:70:4c:8f:32:62:50:fc:70:d8:16:bd:45:9a:25:6b:
2b:d6:cc:bc:f0:ff:0e:fa:df:9b:13:28:0d:49:78:93:ca:85:
29:74:97:9f:84:14:f7:62:f7:34:00:c4:77:9a:1b:5a:5f:89:
48:8e:a6:1a:28:48:7e:b9:60:98:32:6f:3e:c3:3c:d1:5c:1b:
f8:0d:16:e5:bf:4f:7d:0f:53:8b:99:05:07:03:76:d8:67:c2:
17:e0:16:00:49:b1:33:b0:f8:f6:0b:d8:de:ba:75:59:5e:8b:
03:fb:1a:0a:72:1e:7f:08:b2:3e:1e:0e:76:ac:f0:25:a4:a4:
16:fa:00:2c:98:94:c9:bf:7f:fa:2c:11:a9:2e:90:b9:5b:6c:
f6:13:03:21:9e:c1:12:57:d1:a4:3a:02:e5:04:20:50:49:2c:
91:f2:48:a2:0a:45:ee:58:63:6d:1f:ba:21:bf:35:1a:b9:5a:
7d:32:82:e3:02:31:02:14:f6:01:ff:18:64:51:be:99:65:06:
97:1f:2d:8f:28:5b:f2:82:8e:04:39:ea:88:ad:c4:a1:24:57:
ab:56:34:3a:ec:8a:dc:93:cb:f3:48:63:a7:c3:a5:5d:57:96:
84:51:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:10:31 2026 by rpki-client