Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: U49/fPI9a0sUPsQrSwY3h4Z47ctiGJzOq0aXRXuwuZQ=
Subject key identifier: 4C:02:79:F9:74:12:0C:65:AC:2D:FF:FA:04:20:DD:E8:5C:F1:76:1C
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019D38659A824DFC55D140B16ABD5B3CA606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0BAC
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: AedgcNL8Ig_vUhjnBiaFjptK-_w.roa (hash: MX7QqsHI59rsb+txANol5zSV6ybo4HBl4AZOtA8MFPQ=)
2: RH-_P69EnY_CfaPrSpeX5TNaUIk.roa (hash: Kh8dA74PAzmGIT95EUvW7CM2vVdmLwl1/1xo5k7UCuA=)
3: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: OwPsywg+P324aP9wixExc7QumyewJpWi3WCV1eZyQyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9a:82:4d:fc:55:d1:40:b1:6a:bd:5b:3c:a6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=4c0279f974120c65ac2dfffa0420dde85cf1761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:60:33:9b:f8:fe:23:03:13:70:9d:06:cd:
4c:c6:c7:ba:8b:54:4a:68:46:ab:51:d0:f3:31:8e:
3c:6d:c8:51:74:0b:4b:95:4d:6a:7f:81:a1:ea:3b:
7f:4d:44:4d:55:ef:15:94:8f:ad:21:ce:36:6f:84:
1e:06:a3:73:e5:a9:8c:3d:92:96:71:25:4c:0c:8d:
13:d6:41:7c:36:98:7a:92:7e:72:54:49:0b:03:7b:
8c:fa:af:7e:ca:23:ea:28:57:6b:67:24:a2:84:de:
81:a7:8f:53:b1:7f:98:7f:cb:0a:09:36:05:43:26:
1d:2e:e2:59:4d:81:70:6e:8f:62:3d:00:92:9e:3c:
d5:c3:06:a8:5a:e5:61:9a:fd:b8:a1:56:2d:68:9c:
a4:5e:0e:3f:0d:03:54:a7:f4:51:a8:d1:c6:a9:7e:
ce:03:ca:71:f1:13:dd:4e:c0:9c:0f:1b:24:c9:27:
ca:e3:59:1f:58:d3:36:6a:f5:9a:10:78:b8:05:c9:
ae:92:de:52:73:de:dd:ca:4c:87:aa:57:d4:5b:f5:
06:f4:90:68:a8:57:05:de:38:1d:a4:b1:a0:05:66:
ff:07:32:98:7e:e6:71:df:4f:76:59:9a:f1:67:10:
31:90:8f:87:c6:33:ca:bf:a2:b6:15:fb:5f:17:ba:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:79:F9:74:12:0C:65:AC:2D:FF:FA:04:20:DD:E8:5C:F1:76:1C
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:5e:4f:48:f6:78:11:7e:a4:55:b6:07:70:f9:8f:09:9b:
62:6b:ab:dd:55:99:f7:ef:68:31:0e:76:ba:55:0b:e3:83:b5:
c6:3a:da:95:6d:85:16:fd:9c:78:bb:da:c7:e7:e9:9c:d2:e4:
fb:b5:04:3d:8c:71:40:c3:d4:a6:7d:fa:69:53:74:4c:bb:d2:
51:56:39:f6:81:3f:72:df:e5:7f:b2:17:73:21:24:0a:45:1c:
a0:a4:50:b4:a0:11:ac:ef:76:fa:1c:2a:a2:93:69:3e:bb:a9:
9c:04:be:5c:4f:07:d6:1f:ed:73:8c:9a:f1:7b:fc:00:ac:7e:
30:16:f3:db:ba:fa:1f:28:59:0e:3f:85:a0:66:78:ca:80:02:
13:78:75:07:70:70:db:d1:31:bb:4f:22:fb:de:22:a7:13:e6:
b2:1a:a2:62:97:b1:0d:a9:d7:b2:17:66:0f:25:7d:89:b1:27:
64:ca:b3:0e:57:6c:b7:9e:4e:b2:86:75:ce:dc:60:e2:c0:bf:
97:be:b9:1f:94:a2:03:11:fe:9b:5a:8a:6a:86:d8:b9:76:da:
c0:d1:c2:ba:bd:d5:cf:a1:58:2a:ee:75:fe:27:47:e6:d8:fa:
e3:9a:97:da:70:ca:98:0d:58:bd:2c:e3:bc:bc:8b:91:f9:6c:
de:f1:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:36 2026 by rpki-client