Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: uwcrz8TRl253yZ0oAJWENAygkO6H35l2E1F8eEOYtR8=
Subject key identifier: 0D:30:1A:A0:6B:7F:68:10:DD:D6:5A:56:58:0F:FF:E0:72:D5:D8:72
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019CE4484C28C41FD4080D9F770553678C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 18C7
Signing time: Thu 12 Mar 2026 23:01:09 +0000
Manifest this update: Thu 12 Mar 2026 23:01:09 +0000
Manifest next update: Fri 13 Mar 2026 23:01:09 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: G3IinTW+erl3jyE/Au5ZYIlZ2Z/qxgfdE9W+m/1JC8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:4c:28:c4:1f:d4:08:0d:9f:77:05:53:67:8c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Mar 12 23:01:09 2026 GMT
Not After : Mar 13 23:01:09 2026 GMT
Subject: CN=0d301aa06b7f6810ddd65a56580fffe072d5d872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:da:0d:e7:b7:49:29:87:45:19:fa:7f:6a:
87:ed:52:54:30:ec:98:62:1e:ea:6f:a4:1c:38:0d:
18:02:dc:1a:03:75:7a:33:2e:18:14:c3:df:ea:cc:
6a:32:3e:c7:29:dc:17:5b:59:1f:67:73:47:b2:c8:
90:40:71:94:08:cb:d2:e0:b0:1c:97:fd:26:46:55:
0c:4a:26:17:ad:ef:ff:99:a3:d1:71:07:f3:3e:91:
5d:63:1f:a7:8c:df:70:8b:33:4f:41:1b:37:91:17:
94:79:50:f3:01:13:9f:78:99:50:36:5d:b8:97:7b:
d5:7e:60:32:6f:4b:06:de:f6:0e:cf:73:84:8c:59:
3d:b3:63:ca:17:6a:3c:3b:c6:59:2d:23:2a:b3:30:
54:0b:b9:4f:d9:d4:cd:a0:e3:6c:6c:61:59:58:83:
9a:12:3e:a1:b0:e0:0c:e6:02:bb:c6:00:c7:73:d4:
31:08:b8:bd:9c:71:f4:ff:d2:50:08:83:54:a9:78:
41:63:73:75:28:94:12:67:53:56:58:21:79:6a:4f:
30:0d:27:e3:ab:f7:0b:9d:0c:d3:a0:69:53:fa:80:
0b:01:ee:41:d1:c8:47:76:32:27:0f:18:5f:31:d2:
b9:19:fc:27:88:ad:d9:a9:bf:c6:cf:01:93:20:ba:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:1A:A0:6B:7F:68:10:DD:D6:5A:56:58:0F:FF:E0:72:D5:D8:72
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e5:2e:5f:50:dc:22:8b:f9:a0:c6:8a:b2:29:1c:57:ed:92:
2a:bc:bb:b3:af:ec:b7:4c:b0:41:a2:df:08:4f:96:b1:c6:bb:
d0:4f:e0:6c:d6:9a:e8:31:d5:5d:58:24:9f:68:28:0f:3e:c6:
ae:e1:24:cf:12:88:d9:ad:69:5f:e8:8c:ef:57:83:a0:5f:d7:
67:3e:99:14:7b:26:10:a4:0d:dd:ec:c0:35:7d:78:b5:40:5c:
ec:ea:9b:3c:12:89:53:7e:41:5c:d0:7f:21:85:27:81:d4:c7:
d1:13:d4:87:2f:78:84:fe:d1:97:8f:fe:79:ec:7b:0a:3f:68:
91:0d:de:d6:5d:66:4e:7d:ab:4f:73:5e:d3:11:f4:e4:f5:0b:
51:dd:24:94:ed:74:55:1a:fc:5d:79:0d:a1:68:6f:00:fb:85:
de:9a:7f:b9:37:c7:f8:85:8b:c7:b3:1d:89:ea:31:3a:7e:ce:
2f:ff:12:50:b5:0b:4b:56:17:8a:54:21:e1:7a:55:33:4b:ff:
50:95:9d:d1:98:09:06:b4:6a:3f:cf:2b:9e:93:c1:1d:4b:6e:
82:6d:46:58:e8:6d:ae:ea:af:09:05:42:b2:a6:56:99:e9:a5:
55:73:09:0c:71:2e:79:6c:b4:2d:83:07:cc:18:96:5b:2d:92:
7e:2f:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:30 2026 by rpki-client