Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: R2UR3U49h+zuahasXr9emM/niYAhQI8BQWGC8Km+4zw=
Subject key identifier: 65:9E:01:F1:CF:8C:E3:66:F3:17:16:C5:A5:72:1C:BB:C7:39:73:79
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019CE5C95939F6FAA1581716465EB3445309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0F4B
Signing time: Fri 13 Mar 2026 06:01:43 +0000
Manifest this update: Fri 13 Mar 2026 06:01:43 +0000
Manifest next update: Sat 14 Mar 2026 06:01:43 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: Ss7cGCrrWRedWnywcqxpG9RMRHJe6rvQM/0+OKWDWmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:59:39:f6:fa:a1:58:17:16:46:5e:b3:44:53:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Mar 13 06:01:43 2026 GMT
Not After : Mar 14 06:01:43 2026 GMT
Subject: CN=659e01f1cf8ce366f31716c5a5721cbbc7397379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:52:c2:76:8e:08:c6:f0:2f:d4:cb:c2:1c:
3d:cd:50:5a:c6:0a:ae:2e:a8:b6:61:4d:4f:92:c0:
d5:98:04:61:03:e9:e6:2b:24:29:fb:a1:4c:71:38:
40:96:60:b4:f5:7f:8e:5d:2e:76:08:4c:e7:ad:d4:
36:a2:5f:40:63:e1:32:6f:90:45:a5:58:3e:36:ec:
4f:f5:68:1d:67:50:f8:17:c0:80:cf:13:cf:f3:ce:
2e:89:b0:0c:45:79:60:06:c8:81:06:ee:19:05:ef:
d4:b1:d9:1e:5e:16:1d:0f:00:b6:55:ad:ef:03:4e:
72:86:e5:7e:ac:f3:6e:5b:02:a1:2d:d5:44:dd:71:
a4:2a:6c:f9:1d:ce:a0:93:bb:bd:ef:6f:10:9e:fc:
d3:d7:b6:07:a8:f0:62:41:a6:fb:78:15:31:6c:50:
c6:a1:27:91:e1:4d:02:3b:82:79:64:e7:26:3e:d1:
9a:f6:1d:66:f5:6f:c3:c6:b6:d4:d9:b6:d4:83:91:
69:c4:ec:ca:aa:95:d1:d8:1b:ed:19:20:f3:c6:22:
e8:9c:1d:1a:13:ea:65:c7:fe:29:9f:19:db:53:19:
f3:15:72:18:b7:69:03:e3:47:91:21:95:c4:f6:f5:
a3:fd:10:b9:ec:54:d6:b7:22:db:31:e1:76:0d:a1:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:01:F1:CF:8C:E3:66:F3:17:16:C5:A5:72:1C:BB:C7:39:73:79
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:27:a8:8e:62:7b:91:0d:f4:a5:13:7a:8f:f8:fa:48:84:
d3:ba:54:b0:48:73:db:50:07:11:e7:38:8e:d1:35:0e:cd:b1:
6b:03:dc:25:d9:6c:96:23:28:21:49:99:54:a4:a1:f3:49:b5:
ab:1a:8c:41:62:dd:41:c4:ee:e5:28:a9:f3:7f:aa:3b:84:76:
d6:46:d8:a9:da:bc:d0:49:5a:df:e1:8b:97:8c:86:cb:34:f1:
ef:7d:7b:5a:69:04:97:87:24:af:14:b3:63:8c:14:02:5b:f3:
e1:e2:e2:a0:70:ca:14:ea:eb:7d:1b:6b:96:d7:4b:c3:30:0b:
92:01:c2:96:a9:65:af:75:6d:d3:6b:fe:ba:b3:9e:60:dd:13:
80:30:a2:d8:ef:6c:51:78:3e:a9:6c:38:47:0c:79:7e:70:96:
ae:ea:b9:73:c4:d3:8d:67:d8:4e:7e:43:88:96:f1:64:f7:22:
c6:82:85:09:3f:b1:20:62:ab:2a:1c:1e:0e:39:f3:9d:a3:c6:
af:c4:54:f8:80:63:6f:47:72:63:4f:78:3c:9d:3d:2b:59:80:
f4:f3:3a:a1:be:69:c8:05:37:cd:f8:de:90:1c:1f:31:7b:eb:
9e:d1:8a:98:7a:0b:e4:89:43:5f:c3:51:e6:80:40:37:14:f3:
dc:ce:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:22 2026 by rpki-client