
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: jCSeUFWJ9FRt+fH3RE+V5I3/C78wTEqi1+4RKmaomUI=
Subject key identifier: 70:6A:22:15:95:97:3A:6B:B2:7A:6C:4F:D3:E7:25:12:38:C5:62:41
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 019D33088F4A8797765DF7B4F6B56188D4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1885
Signing time: Sat 28 Mar 2026 06:01:32 +0000
Manifest this update: Sat 28 Mar 2026 06:01:32 +0000
Manifest next update: Sun 29 Mar 2026 06:01:32 +0000
Files and hashes: 1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: MkmiT2uTngMR8bPGe52PqLtP+v2Kvo90zSQQAaR0/zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:8f:4a:87:97:76:5d:f7:b4:f6:b5:61:88:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Mar 28 06:01:32 2026 GMT
Not After : Mar 29 06:01:32 2026 GMT
Subject: CN=706a221595973a6bb27a6c4fd3e7251238c56241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:28:dc:75:5c:44:23:bb:fd:95:aa:9e:bf:b8:
39:e7:1a:27:f5:35:7c:d0:7d:e8:55:0b:ae:0f:5a:
32:43:71:1e:e5:dd:db:94:d6:fb:33:3b:ca:91:60:
bb:1c:97:21:2c:7d:31:eb:56:13:f1:b1:bb:76:e1:
8f:57:03:59:b4:81:39:7d:f4:5f:c8:1b:84:5c:a0:
25:f2:eb:a0:74:0a:c2:05:45:0a:06:d9:5e:aa:9c:
b4:85:8d:93:9b:83:70:37:4c:b1:fb:00:74:5c:5b:
27:fc:6c:75:ce:d7:3e:f2:1b:20:6c:ff:91:8d:f1:
7d:c9:bc:c2:47:10:5c:5a:f3:dc:2d:2e:f3:57:bb:
99:8f:6c:ae:b3:8b:43:28:65:6e:7e:65:f0:cf:9a:
77:95:bd:32:15:12:a9:93:b1:e9:1e:ca:0e:88:d0:
95:6b:a2:fd:09:08:6b:f9:e1:41:70:7d:a1:c2:d0:
a3:44:3a:c1:fa:a3:43:34:0b:58:99:8b:6c:32:c2:
22:59:67:ef:f1:97:a0:97:71:66:57:88:ed:44:9b:
c7:47:5a:f2:b5:73:d6:7a:c7:32:77:42:e7:cf:27:
dc:59:b2:a3:d1:ab:40:7f:e9:95:58:5f:6a:81:c3:
d9:91:09:ba:18:56:c7:51:9e:4e:c5:e5:c8:7f:99:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6A:22:15:95:97:3A:6B:B2:7A:6C:4F:D3:E7:25:12:38:C5:62:41
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:10:5f:01:9a:b8:22:8c:58:53:a8:00:65:5f:a6:f6:c9:
66:e9:2d:65:52:72:5b:a5:15:59:e7:19:0e:a4:f6:1b:6f:20:
98:1d:30:23:3c:5d:77:07:21:b7:6c:66:b7:50:b0:ed:6e:4c:
95:6b:00:7e:85:38:7f:01:b9:91:25:e5:78:2f:d0:8e:4d:55:
1a:2d:4a:c0:65:79:51:4b:77:7a:75:f1:65:ae:b3:dc:01:ad:
fd:31:e2:a8:e0:5f:f9:e1:2a:ea:e3:e9:46:48:15:d9:fd:d1:
22:d9:32:11:b6:91:26:e2:73:2d:c7:78:bd:a5:49:30:7a:fb:
e6:e2:de:5c:b5:64:74:23:53:5e:75:87:2a:c5:49:64:fc:94:
ab:df:c8:e5:8f:03:11:fb:c3:74:9e:ac:31:88:12:73:67:c1:
58:cb:d1:3f:fa:07:bb:2b:e1:05:f2:d4:60:3a:5b:48:65:e1:
4a:6d:fc:f3:a8:e0:8f:36:45:3f:00:71:80:86:af:04:38:07:
0a:92:ee:68:75:0f:61:07:39:01:df:05:17:dd:06:ee:df:e4:
ee:b3:ec:ef:ff:c4:6e:3d:45:ac:3e:be:46:ee:de:9c:40:c9:
48:60:1e:65:0a:00:38:72:7d:78:4d:9f:ad:32:0e:4d:b1:20:
0a:dc:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:05:22 2026 by rpki-client