Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: 86ZsBBEZl4E30uWYUNiJzKJcdK0N4i2bowunjFWWKZs=
Subject key identifier: 53:C2:A3:9B:25:A1:B4:5D:6D:63:E9:34:A0:8D:C7:0D:33:25:05:F3
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019CE71235D23F49D1DE2FA2C6E4C800C0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0A93
Signing time: Fri 13 Mar 2026 12:00:56 +0000
Manifest this update: Fri 13 Mar 2026 12:00:56 +0000
Manifest next update: Sat 14 Mar 2026 12:00:56 +0000
Files and hashes: 1: NL-GZ6A5efHdGaOTzp86clCa2uc.roa (hash: ncgag6cx1L4BB9efkwTYVUbJ2MuFxWCJXY1VLSVWtpU=)
2: UADZ4YVn7TSGISo3JiXNjBmBm_s.roa (hash: N3tP1R0iLr7HsiUesHdYEFoZ03zveLr6qDLnn0E6Gpg=)
3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: JNynbjv9iRfKeWDNttI/X3481WOhKPkbZqvcRZBMQD0=)
4: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (hash: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8=)
5: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (hash: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:35:d2:3f:49:d1:de:2f:a2:c6:e4:c8:00:c0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Mar 13 12:00:56 2026 GMT
Not After : Mar 14 12:00:56 2026 GMT
Subject: CN=53c2a39b25a1b45d6d63e934a08dc70d332505f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:67:2f:1a:c3:db:4c:a0:36:4c:1b:61:1f:
83:85:99:58:96:21:7c:d3:69:0d:f7:3f:b1:f5:9e:
fe:a2:cb:d8:90:53:46:47:e3:82:61:e3:01:55:10:
14:9b:a5:db:49:06:d8:97:b7:1e:68:2a:b0:04:0c:
2d:73:5d:55:ad:4c:c8:e8:fe:db:bd:0b:28:49:43:
ca:c7:62:43:8d:b1:d8:f4:81:dc:d1:1c:e2:48:91:
42:0e:25:8b:87:08:14:61:ff:ec:fe:89:22:40:41:
32:0e:de:f5:82:fb:6d:ae:d1:a3:e9:4c:c7:fc:51:
d0:ec:aa:ab:d7:5e:8b:14:79:66:19:c2:a5:39:32:
06:b5:06:c2:c3:07:01:7a:0d:59:dc:d5:eb:fc:c2:
59:f8:92:88:30:dc:61:bd:51:6c:61:f3:23:71:e6:
ea:d6:3e:40:07:b0:74:17:1e:c4:51:aa:74:9b:31:
d1:50:a5:3f:ea:35:4e:d1:63:09:36:0d:f4:9e:2a:
56:30:43:08:43:91:4d:5b:4b:b8:0b:f4:c1:b1:32:
2d:d2:85:1d:a9:f6:64:de:50:02:d2:48:a3:0c:81:
09:5a:f8:9c:3e:31:95:34:1b:3f:f7:7c:dc:fc:ea:
78:82:65:a7:23:21:b5:10:0a:84:8b:bc:1e:5c:93:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:A3:9B:25:A1:B4:5D:6D:63:E9:34:A0:8D:C7:0D:33:25:05:F3
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:2e:ef:58:9c:a0:2c:76:11:81:a1:68:df:15:d1:6f:bc:
44:2a:9f:3a:c9:aa:a2:d3:f1:4b:56:be:63:82:ed:b0:82:9b:
66:44:fb:f9:85:25:fe:e3:d8:11:ed:36:bd:93:d5:db:84:82:
dc:ee:18:d2:cd:47:b0:7d:d6:63:5b:74:35:5e:ed:6c:e9:40:
a1:19:ee:3c:9c:cc:20:9a:f9:bf:ab:c7:46:45:14:4e:0a:92:
0b:91:4f:82:09:4b:e5:75:24:b7:e2:73:33:d2:09:96:7d:47:
58:52:f0:59:53:c5:3f:d0:36:a4:ca:cb:d1:79:c4:ba:08:e1:
ba:42:fa:3e:37:2e:ec:47:e2:05:ff:64:fe:c3:a6:de:f5:e5:
d3:c5:44:ed:72:21:4b:3a:2d:02:a0:8b:2e:42:c8:a0:cb:f7:
65:7b:19:66:81:e8:30:3e:ab:a7:c0:b7:65:6c:b4:cd:66:b5:
07:52:d7:7a:10:68:00:49:b3:c0:16:41:24:9c:0b:78:23:90:
84:eb:99:0a:94:9f:29:86:62:13:47:0c:0b:87:ee:67:66:c0:
8e:48:0b:9e:c2:a6:bf:cc:c3:30:50:18:5e:4e:e8:be:48:63:
ca:4e:a8:4f:09:8d:cb:20:aa:39:11:5c:26:c3:1a:00:64:45:
e9:de:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:31:59 2026 by rpki-client