Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: yu+7eiOJJtzPVngTw2n2JxqkpwEYm7WWJDghvZwlNLE=
Subject key identifier: A9:C4:36:0F:06:01:9F:94:31:7D:66:DF:7E:3D:D8:4F:E4:E6:29:D8
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019D3A5385918B5FD48887AF13FBF56C2B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 0664
Signing time: Sun 29 Mar 2026 16:00:45 +0000
Manifest this update: Sun 29 Mar 2026 16:00:45 +0000
Manifest next update: Mon 30 Mar 2026 16:00:45 +0000
Files and hashes: 1: UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa (hash: jpEDe24rlUn3pxTT1qasWKlz+X8T9bS0HUXdOUhAmHA=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: /qECiJHNLE+B4fxRIYg2hIhShBhU25ouq8fm221lIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:85:91:8b:5f:d4:88:87:af:13:fb:f5:6c:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Mar 29 16:00:45 2026 GMT
Not After : Mar 30 16:00:45 2026 GMT
Subject: CN=a9c4360f06019f94317d66df7e3dd84fe4e629d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:95:db:07:d8:e5:a9:fb:95:ab:ab:e2:34:
1a:0a:9f:b5:52:c0:c3:10:d4:50:02:d5:47:9b:6f:
47:f8:c0:c9:c7:86:1b:52:07:b1:c1:ad:c2:91:9e:
a1:5b:cc:b4:67:97:0c:41:78:3f:cc:f2:b8:e7:72:
24:69:06:fe:81:95:ac:e0:de:37:8a:6d:21:1e:9e:
16:76:e5:f8:3d:90:75:5d:4a:ab:4a:33:e7:0b:a5:
fd:7a:19:64:20:bc:66:4d:68:d5:01:70:32:14:62:
dd:d8:f4:e3:23:b9:58:31:36:06:d7:0f:0d:a2:1a:
29:7c:6c:3c:30:76:5b:f0:6b:04:fa:de:d3:93:8e:
8b:f5:41:e0:08:54:0c:68:7e:22:df:42:a2:77:dc:
87:a7:c6:67:1b:af:e9:e3:a0:28:94:5f:07:4a:84:
f3:54:60:48:15:3f:db:8a:73:d3:f1:9a:6a:5c:6b:
b6:e9:82:b4:85:9b:be:ae:5f:2d:99:5e:a1:5d:d7:
f0:66:a5:7a:69:37:82:fd:ee:e5:01:b9:0a:c7:54:
04:d2:39:6f:c5:bc:b6:44:e8:32:cc:4f:71:58:ca:
0f:4b:68:0e:be:2b:eb:b6:1c:d2:e4:58:b0:54:e3:
20:79:bb:fe:63:70:82:02:90:6f:41:fd:0a:26:9c:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:36:0F:06:01:9F:94:31:7D:66:DF:7E:3D:D8:4F:E4:E6:29:D8
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:cb:7c:9c:1b:fd:1b:36:5c:95:30:61:db:96:08:f2:a2:
54:f1:ce:e0:cc:c1:81:f0:a2:fa:6f:d3:c5:c6:d8:41:ed:8d:
a4:d7:65:13:e1:9b:ba:13:cd:11:60:87:d2:66:a1:a1:ee:34:
24:a2:78:da:7a:0f:4b:6c:89:3e:05:eb:bb:e9:ef:b8:2d:5d:
11:2a:89:b2:6a:af:c1:80:0f:3a:ab:30:1c:48:9b:76:39:e2:
e4:66:aa:77:8b:f6:9a:a3:2d:30:85:42:e1:df:e4:41:f7:51:
d1:f6:02:4d:c6:68:b9:6a:d0:6f:c6:1e:c0:52:cb:1d:56:83:
df:d1:70:a4:e7:c9:b0:f3:51:95:5d:0c:7d:68:ad:ea:70:13:
bc:3a:ff:c1:af:c4:29:5b:ff:b3:20:98:1d:7a:88:8b:e7:b8:
e3:cb:99:69:d2:c3:ae:9e:52:02:3b:cb:de:79:1e:82:9e:1b:
eb:bb:d0:88:e1:50:4b:0e:18:7f:66:07:7b:82:44:7f:7e:2e:
41:4f:7d:92:21:5f:50:d4:94:ab:01:9f:30:ac:a5:b7:78:f4:
f7:e9:eb:62:56:57:95:e6:95:d3:4b:73:1f:10:fa:e9:d4:e7:
e4:dc:c5:0d:d6:48:d3:80:92:77:05:16:65:3a:b0:37:91:bd:
76:f7:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:18 2026 by rpki-client