Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: GCcI9i7PoY/Ay5JoqLG14wq/lQz5J3F+kqec46ZNzGk=
Subject key identifier: 91:65:C9:22:5F:14:53:40:DA:68:2E:FA:8F:EF:3D:8B:E0:9A:62:8C
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019D38D382B2F74E74F330AD9179D6375969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0DB9
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: YX1AfxlaaraQqPp6lnD91/i+mccTK2Vn24wr10faQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:82:b2:f7:4e:74:f3:30:ad:91:79:d6:37:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=9165c9225f145340da682efa8fef3d8be09a628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:44:62:27:93:d1:e0:43:5c:2f:f9:76:bc:
27:5e:f2:44:df:e0:ce:2c:34:e4:48:cc:30:93:0a:
67:11:e6:af:6d:42:e5:8f:6c:8c:8c:8c:43:c4:16:
bf:2c:ae:2e:56:90:14:01:3d:95:98:5c:b2:f9:68:
60:13:52:43:9b:a0:6b:47:c9:12:a5:6f:f6:db:0f:
7f:4c:b2:d2:08:65:06:86:e2:01:ad:5e:df:8e:d3:
85:26:1d:9b:58:7d:df:c7:e2:c1:6c:89:fa:dd:39:
ff:25:78:23:0e:a7:3d:05:9e:f5:51:c2:55:0b:3a:
5b:fa:dd:fe:48:5c:7a:71:3a:63:71:a1:fc:1c:32:
8b:8f:6f:b7:e2:94:92:22:b4:61:d9:e3:4d:7e:a8:
13:22:bb:38:82:57:22:75:df:b9:0a:ab:12:b3:74:
cc:30:90:59:ce:61:aa:f7:1a:6b:21:fe:4f:7f:8f:
a4:58:3d:4d:1e:fa:24:f3:56:1c:d6:c1:57:00:22:
c8:55:d4:83:2d:8b:bc:00:2f:2c:9c:20:4a:06:75:
3c:3a:5a:55:7f:22:be:25:55:3b:cd:02:2f:93:20:
d6:6d:88:da:af:2e:27:66:6e:4d:d0:16:b7:c0:af:
a7:a7:38:f1:36:b8:e0:6c:4f:73:4f:72:96:d1:99:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:C9:22:5F:14:53:40:DA:68:2E:FA:8F:EF:3D:8B:E0:9A:62:8C
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:f1:50:a7:a1:31:a0:52:e7:6f:f6:e0:e2:43:4c:fa:6a:
d5:aa:61:c0:07:84:6d:de:a9:c9:6d:0b:47:97:e7:00:eb:62:
c6:f3:1c:b6:19:ca:59:53:49:d5:9e:22:0b:e5:86:a1:9d:a2:
f9:f6:eb:91:5c:dd:37:63:41:d6:91:45:d7:f7:cc:b5:f3:4e:
3e:ad:f0:21:f4:40:9c:8f:90:e1:55:54:e4:bd:d5:30:28:d4:
7e:77:68:bb:68:dc:a9:29:93:24:9f:97:b2:3b:15:9a:0f:fa:
85:98:1f:cd:ef:9c:f4:fe:38:8a:3d:3a:2c:8e:40:af:fe:7a:
d4:d4:3f:f9:c3:47:28:19:a4:49:1c:51:12:cf:2c:ce:3f:6e:
5d:45:dd:56:9c:2b:6e:88:82:8c:9e:04:c0:22:ec:cb:83:a8:
ae:27:0d:60:d1:c9:7e:0a:c3:3b:2f:81:b1:f5:cd:b3:08:9e:
dc:b9:b6:05:4c:3c:db:ac:d1:24:b2:16:b7:a9:47:99:ac:84:
85:ca:f7:b0:e6:7a:9c:8b:0a:f3:aa:9e:4b:74:fd:9f:94:eb:
71:5e:53:c0:c3:7a:e8:48:64:ae:ec:90:09:ee:42:5c:d9:5d:
b5:ea:ff:7e:15:bd:6c:2d:8f:5f:7d:14:3a:12:c2:c9:d1:73:
44:35:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:46 2026 by rpki-client