Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
File: yfoWHXofBQRhxb4pHp--B_5N1SQ.mft (raw, json)
Hash identifier: vj1hYLjZkpGwEyb9+T7dJR1uHEYVCeH5nOcmyydDP1Y=
Subject key identifier: E3:AF:41:35:C0:DC:50:B0:AA:D6:0B:D2:C3:49:0E:BD:2E:2A:75:F3
Authority key identifier: C9:FA:16:1D:7A:1F:05:04:61:C5:BE:29:1E:9F:BE:07:FE:4D:D5:24
Certificate issuer: /CN=c9fa161d7a1f050461c5be291e9fbe07fe4dd524
Certificate serial: 019D38D39BDEC902305A83AB0F7C56BE17D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
Manifest number: 80
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: q9r5Sa2pF-LAaTI2zR7haz9jOHw.roa (hash: w1oiwYmUyslgOeSb1JpT0bOjSe/1ej94ia9AqsY8TDQ=)
2: yfoWHXofBQRhxb4pHp--B_5N1SQ.crl (hash: 6nZBSuwfeULMzkrbXWSXImE0PZ9cFx4uQst9vgPAvVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9b:de:c9:02:30:5a:83:ab:0f:7c:56:be:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fa161d7a1f050461c5be291e9fbe07fe4dd524
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=e3af4135c0dc50b0aad60bd2c3490ebd2e2a75f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:de:4f:c5:29:ed:59:ef:3a:78:a0:a4:44:
00:7b:92:eb:8b:71:21:e0:29:3d:0e:90:0a:73:6f:
c9:17:17:bf:6a:5e:46:b2:63:10:0f:cd:cc:90:ad:
7b:0e:10:cc:9f:84:0f:10:4e:c7:10:05:4e:ed:b3:
29:f3:1d:f4:3d:13:01:1f:58:50:1e:97:2e:02:8c:
57:5b:a8:18:e7:b2:dd:af:8c:0d:7f:80:38:a9:81:
90:fd:6f:c4:39:9d:14:0d:f4:af:ae:22:68:2c:4a:
0f:f8:5b:3c:1d:7d:60:a3:f6:2f:d2:86:68:e6:25:
2d:75:9e:d5:1e:0e:3a:b6:74:3d:eb:76:e9:be:da:
09:b4:a1:79:f5:7f:bb:05:e0:6a:6a:f9:93:e9:c0:
92:a5:80:da:89:af:e9:63:6f:39:06:90:51:c2:e3:
cc:9b:ac:4a:4a:fb:23:ca:05:f1:48:bf:3e:4a:f8:
65:68:b8:48:d9:56:76:25:bc:b5:cd:0e:56:0d:2f:
88:90:3c:57:fb:01:20:2c:50:14:2c:f2:32:1e:cd:
33:cf:f7:30:6b:fb:0f:9d:f0:19:b6:53:ed:28:d0:
38:ec:d8:98:14:d1:1c:c2:72:6b:b3:e0:b5:2f:35:
46:ea:35:37:74:af:3e:99:91:f6:1d:fc:8a:74:f8:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:41:35:C0:DC:50:B0:AA:D6:0B:D2:C3:49:0E:BD:2E:2A:75:F3
X509v3 Authority Key Identifier:
keyid:C9:FA:16:1D:7A:1F:05:04:61:C5:BE:29:1E:9F:BE:07:FE:4D:D5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b9:da:9f:fc:16:61:24:e4:ae:83:17:0e:61:66:a7:42:b0:
9b:95:27:05:d8:22:9a:56:05:89:db:f1:06:95:db:8e:21:dc:
28:1e:89:1d:c9:03:f8:ca:d4:fc:0b:7e:b4:a2:f1:b9:62:49:
9c:e8:cb:4b:50:b4:49:49:06:b7:af:49:27:e5:67:95:90:e0:
65:67:6e:98:71:04:45:70:a7:53:6e:80:60:53:1c:d6:58:5d:
d7:15:9e:3a:b9:e8:96:d0:3b:a9:04:b0:2c:95:0f:65:87:ce:
b9:e0:d1:8a:28:8d:f0:a3:11:70:09:05:c1:b1:42:5f:45:e3:
8a:d1:f5:22:ed:80:fc:78:c2:52:43:34:d6:c0:d9:cf:f1:dd:
cf:35:cc:e5:1f:f3:2b:93:30:4d:86:c2:1f:48:8a:ef:7e:49:
46:3c:da:48:61:1b:e0:ce:2d:f0:81:fa:e3:95:6e:65:45:e1:
9c:26:cb:1c:17:e3:c8:6e:eb:e5:90:e1:9a:55:28:99:4d:f3:
78:7e:37:c3:76:a5:5e:b1:bb:b3:32:ea:5e:7d:ea:06:67:1f:
6f:47:b9:ef:60:0a:be:87:1a:1f:36:5a:a7:e5:57:66:7a:66:
15:6f:36:63:f4:f7:d3:66:5f:cd:bd:2b:12:b0:1d:44:a5:06:
7e:e1:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:13 2026 by rpki-client