Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: MkvAFtS8YPY4h4RsQYvxBGswT1ON1RFTqLtiMwDgG0U=
Subject key identifier: A0:93:F4:EC:0A:B8:18:E4:2F:42:E3:EE:21:0B:E8:01:0D:41:98:B6
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019D3A53C58ECD02B53528804973EBA6FDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0691
Signing time: Sun 29 Mar 2026 16:01:01 +0000
Manifest this update: Sun 29 Mar 2026 16:01:01 +0000
Manifest next update: Mon 30 Mar 2026 16:01:01 +0000
Files and hashes: 1: 12r5iDgWvwsfOuY62IZTikj8QKg.roa (hash: y5zUQQDYJqybKXwbKXQWR71NYli16e7rtRVTqKRI2pI=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: mAx0GV7G01iaSbIEwruFU1f52VGVbPoShQ8x2Xs4V20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c5:8e:cd:02:b5:35:28:80:49:73:eb:a6:fd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Mar 29 16:01:01 2026 GMT
Not After : Mar 30 16:01:01 2026 GMT
Subject: CN=a093f4ec0ab818e42f42e3ee210be8010d4198b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:87:3a:7a:8e:5e:a5:f0:a8:7d:b9:7b:c3:
49:c2:d2:8a:65:5c:d8:35:fa:c2:1b:75:32:ff:ec:
da:e8:72:ef:ca:a3:be:1f:44:29:6f:05:07:7f:c6:
87:b9:b6:8c:f9:c9:d3:16:7c:fd:d0:fc:42:72:be:
d8:77:e4:f4:f7:78:1e:be:31:69:24:bd:2d:8a:91:
eb:6c:35:4d:9f:e8:ee:4b:77:e3:81:84:fb:01:f2:
2e:ff:7e:64:5d:d5:15:b4:94:a1:db:7b:96:91:84:
74:e6:dc:20:9a:2c:fe:1b:88:06:ea:12:4b:6c:e1:
84:ba:c0:b6:78:cd:68:1a:db:42:38:17:c1:38:08:
31:2a:29:f3:f3:79:44:0b:a7:a6:5d:67:2c:8f:1d:
6c:00:06:8c:7c:a2:ed:23:c8:1f:aa:1d:36:5b:55:
af:9c:ac:ee:27:16:7a:9f:b1:d8:52:d9:ef:f6:1d:
6b:ff:00:4c:56:ec:91:a8:91:5b:11:03:cd:4a:71:
ac:64:31:f7:9f:61:01:c9:3c:7a:98:7d:fb:b0:02:
64:91:8a:86:2f:d7:12:78:b5:8e:7d:13:74:59:a5:
71:fb:a9:94:dc:c1:51:c8:32:9a:78:2c:6f:07:21:
dc:56:c1:a6:c5:5d:b0:95:0d:8e:9c:03:99:32:fd:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:F4:EC:0A:B8:18:E4:2F:42:E3:EE:21:0B:E8:01:0D:41:98:B6
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:09:a8:57:45:3a:47:dd:79:27:da:2a:a1:2f:2c:79:23:84:
53:5a:3a:b9:c5:1b:a0:58:30:ea:82:ef:a3:5b:20:13:f0:e8:
42:3e:ef:86:00:04:21:91:fa:a3:e8:87:4c:b2:c9:d4:fe:44:
30:b8:75:02:4d:c2:b8:c9:d5:13:73:f8:45:5e:ec:c1:a7:26:
10:c7:44:af:42:d0:0d:07:9f:9e:b0:1d:cd:a9:95:c0:e3:b3:
8a:65:c2:14:ca:1a:5d:b6:82:cd:c4:58:76:9d:cb:a8:92:84:
be:5c:a4:32:3d:8c:19:a2:70:fb:78:e5:d5:7c:2e:d2:93:15:
93:aa:85:f0:fc:f6:32:45:c9:87:30:f1:fb:f8:07:63:26:29:
a2:82:38:eb:ff:79:29:48:e8:02:7f:14:cb:27:40:db:32:46:
27:a3:27:82:b4:fb:29:69:2f:b6:1b:e9:93:27:ed:a6:54:74:
da:bc:ad:a1:85:c0:95:9c:eb:9a:d9:90:da:61:ee:8e:cb:08:
d5:b1:0e:95:20:c8:a3:65:d0:aa:6c:2c:38:7f:b1:a9:7f:21:
1d:57:7a:0f:35:d4:4a:cf:7a:42:5f:79:0f:8c:81:ea:c4:f2:
17:51:e1:5f:70:08:c5:4b:d5:45:26:d6:1e:ab:f9:3e:2f:e6:
36:bf:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:41 2026 by rpki-client