
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: TlJwteWwJQ6sU0G2o7VZo+S6DQuj668AsqCWxYzgrqA=
Subject key identifier: AD:B7:13:A3:26:D1:01:2A:64:46:97:79:FF:6B:DA:18:F4:E6:6D:72
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019CF2A8BA3067EC72AFA8EC523734771247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0801
Signing time: Sun 15 Mar 2026 18:01:09 +0000
Manifest this update: Sun 15 Mar 2026 18:01:09 +0000
Manifest next update: Mon 16 Mar 2026 18:01:09 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: HuUTMnZcAUpCFC+ZChcxYqUh66tf6NTN2txd17W4xRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:a8:ba:30:67:ec:72:af:a8:ec:52:37:34:77:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Mar 15 18:01:09 2026 GMT
Not After : Mar 16 18:01:09 2026 GMT
Subject: CN=adb713a326d1012a64469779ff6bda18f4e66d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:14:b0:dc:d4:46:25:7b:f8:a7:23:f2:06:
44:c6:77:d8:70:7c:87:93:6d:10:01:a4:b3:18:82:
d2:4e:05:c4:89:52:20:3e:91:25:85:59:33:8e:65:
2a:f0:78:41:7c:b2:a5:b0:1c:ed:40:78:c5:ad:0e:
58:b6:5b:d1:df:8d:96:62:b3:5f:13:eb:e3:42:fa:
6c:70:74:6d:a3:61:1b:c9:ef:00:3e:73:05:5c:be:
9d:e9:de:6d:e7:43:90:d9:08:a9:35:0e:8e:0f:3f:
c4:c7:9e:f7:fd:6f:e1:af:57:58:de:24:40:cc:d8:
de:be:85:90:e7:46:e2:74:77:e6:74:0b:7f:8c:93:
dc:9b:5d:a6:08:df:31:50:47:2c:fb:ac:de:f2:37:
04:3f:19:ab:a3:1a:44:77:78:fc:14:df:16:7a:45:
e5:ed:e0:0e:90:42:3b:c5:54:17:cd:85:bf:e2:74:
3f:e1:72:a5:8f:90:71:0c:ac:2e:bf:e3:97:41:79:
61:29:b0:81:79:4e:0b:76:95:b8:2a:b4:91:69:8f:
02:48:81:67:eb:73:59:05:63:03:19:e0:e2:48:67:
57:e3:3a:a8:1c:5a:98:35:53:0a:2a:f5:93:36:2c:
4a:b3:b4:39:af:c1:5a:0d:74:46:db:48:fc:e1:f6:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:13:A3:26:D1:01:2A:64:46:97:79:FF:6B:DA:18:F4:E6:6D:72
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:5f:81:6d:fc:5f:d6:a4:00:6a:cb:fc:41:87:1d:5c:e4:
d6:b8:0f:ef:8d:9d:07:b2:0d:24:09:cc:b4:29:75:cb:06:4d:
df:82:f8:2c:6f:98:61:8b:56:cd:09:c8:b4:a6:99:6e:50:62:
c6:e1:08:14:a3:74:de:02:79:88:44:3b:78:46:8e:b2:6c:aa:
19:c2:47:e2:da:42:78:7d:d6:70:f1:8a:1b:6e:79:63:c4:a5:
31:0e:9d:5d:26:00:5b:94:a0:b8:80:72:ce:dc:7d:f6:e0:a3:
8f:98:c3:46:35:16:5a:b8:ea:fe:bb:6a:8a:56:a2:00:37:6d:
10:65:97:8c:1b:5a:90:0a:21:5a:64:3e:7d:22:b6:31:0d:ac:
29:a8:9b:bb:cb:41:45:98:a5:27:90:7f:9a:84:10:63:4d:4b:
0d:06:3b:cc:33:2d:62:47:4a:39:ab:ff:3b:8a:9c:fc:d0:92:
9e:99:67:23:7d:d4:b1:87:be:51:21:32:ea:51:7e:36:ed:df:
89:83:d3:41:e6:5a:fb:a8:eb:97:99:d6:11:74:9d:31:00:6a:
a0:7c:6b:ba:ad:e5:3c:fd:ce:94:1d:a4:c1:06:dc:27:94:2c:
57:cc:2a:d2:74:af:3d:d9:09:c1:a6:1a:71:af:d8:1e:cf:d7:
13:00:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:50:16 2026 by rpki-client