Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: fgY+W7+gJWHNaMAXmVx5HnqegTfXsDEcTog/lxPVw/I=
Subject key identifier: 1B:88:80:F8:07:BE:E9:8E:32:9A:C7:C7:B7:BD:5F:CA:4E:8F:93:0D
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019CE55A76298559BEC1F7F611A90D3EF119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 154C
Signing time: Fri 13 Mar 2026 04:00:36 +0000
Manifest this update: Fri 13 Mar 2026 04:00:36 +0000
Manifest next update: Sat 14 Mar 2026 04:00:36 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: sAvHBZ3xeJHH9KQcCS7ndrGrsgfbva/GU/fK1bL5M2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:76:29:85:59:be:c1:f7:f6:11:a9:0d:3e:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Mar 13 04:00:36 2026 GMT
Not After : Mar 14 04:00:36 2026 GMT
Subject: CN=1b8880f807bee98e329ac7c7b7bd5fca4e8f930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:0c:04:cb:f2:99:8f:02:d5:e6:6a:da:f1:
97:4d:fa:47:b2:bd:3c:9c:52:71:ea:3e:1b:ce:e8:
cc:b0:84:cc:78:d1:88:04:c2:70:3a:8f:0e:8d:00:
ae:01:2a:08:d6:5e:3f:4e:df:18:aa:5e:10:cc:e3:
ab:86:e0:23:a0:2d:7a:42:cb:3d:13:ea:76:fb:f1:
3f:ed:dd:97:d7:4b:19:b5:52:f2:3c:94:3e:f7:5b:
d9:21:f7:b1:ba:f0:4d:ca:43:63:24:5b:a6:5b:2d:
aa:d9:37:d7:6e:c4:64:b9:36:2f:a6:2f:60:88:62:
44:e5:e5:b2:8d:0c:99:6c:ce:a8:c6:55:ea:2b:45:
df:ca:9b:01:0a:2e:36:65:5b:a9:e9:77:e4:2b:ff:
1a:53:fc:fe:06:24:5a:4f:56:2a:f6:32:1a:c4:e6:
c8:5b:8a:13:88:fb:43:16:93:89:47:20:39:84:da:
14:2a:cf:c2:d1:b0:5b:aa:a8:5a:97:69:ad:00:c4:
81:30:bf:8a:ed:1c:2f:35:5e:ae:ff:46:06:fd:8a:
6b:29:b0:7b:19:45:70:ca:d5:3f:96:3c:10:5d:c0:
f1:86:4e:06:bb:f3:1c:4c:cf:02:85:b7:5d:31:fc:
f3:69:ef:cb:58:3f:e9:13:9f:5a:c1:67:86:a1:71:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:88:80:F8:07:BE:E9:8E:32:9A:C7:C7:B7:BD:5F:CA:4E:8F:93:0D
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:71:c3:54:96:69:9d:37:d2:b7:e8:68:14:0d:74:e5:c5:
7a:68:88:0f:f8:d6:aa:63:e3:43:f2:0d:d5:38:8c:4c:6e:b3:
40:49:dc:68:f7:01:72:d7:a7:7e:71:ca:84:c9:55:29:3a:24:
e6:97:2e:f7:de:6c:2a:99:79:fe:15:e7:c8:30:dc:14:0a:66:
e6:14:30:f2:4c:4f:53:09:51:23:14:e2:0d:4b:f4:d1:c5:84:
20:99:e0:01:e9:36:d8:2d:39:c6:99:55:e7:d3:ea:f0:f3:cd:
b1:84:c6:44:e6:b2:c0:00:6b:89:e5:1b:66:65:5a:13:76:f1:
c3:2f:16:48:58:45:5e:37:af:a0:29:da:66:61:97:ae:cd:ab:
63:c5:b5:6c:89:30:60:89:53:84:9d:69:b3:e9:f0:e7:92:7d:
4a:48:2e:1e:f2:0b:15:9b:6d:c6:02:41:21:2a:07:b0:1e:95:
f7:2f:b3:27:72:3b:ae:04:f2:be:5b:92:90:9d:7e:53:44:d0:
36:fa:87:f9:c3:26:28:d8:0d:25:d1:fc:94:10:84:e6:11:b2:
20:39:b4:90:c8:70:7b:7e:22:d6:73:d0:6e:54:13:3d:75:8a:
52:7d:87:4a:97:c4:80:1c:95:86:6a:d1:1b:40:fc:5d:75:22:
eb:c6:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:37 2026 by rpki-client