Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: zZhcLWpdWw7Bc0dO4ifCLlcKzAmTeMLoTZ4MYETiZtU=
Subject key identifier: CC:91:27:98:1B:DB:60:26:00:70:45:28:29:6A:5A:9D:6B:9B:E1:94
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019D26960966EDF342FD150FBD57AFDC37F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 05D4
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: WdcwwVvHHM9XNKKDiv408pGW0_s.roa (hash: 8+/x9c3F4SvSIKBaDBTfqOk6wDn1R73L7fhpNgptXLw=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: pInwkYA27aoLiw3TgkuT4rUeNoysCQB0RyzHSQdYrjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:66:ed:f3:42:fd:15:0f:bd:57:af:dc:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=cc9127981bdb602600704528296a5a9d6b9be194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:2b:3c:76:cc:be:34:b8:a4:2b:f0:89:af:
8d:2b:69:91:a4:5a:e5:44:17:c0:3c:73:c4:83:7a:
d7:10:6f:88:1f:c8:2c:72:c1:98:13:c9:97:e2:e7:
8a:0c:4d:2d:2c:92:53:29:df:ee:84:c7:62:18:0f:
e5:41:36:84:17:a4:52:16:b9:98:8c:bb:08:3d:ce:
15:c1:a8:79:9e:9c:86:9a:d3:50:0e:5c:78:fc:24:
02:eb:e4:3e:ae:87:9d:48:fc:47:54:b1:2e:f4:e5:
de:4a:dd:c8:5d:d8:d9:0a:56:2f:93:11:d1:3a:6f:
8c:f8:a8:a0:89:bb:8a:9b:02:0f:fa:b9:4c:e2:bb:
41:5c:a3:97:72:a0:f3:37:33:4e:63:85:95:7f:6c:
c1:41:71:d4:31:29:92:59:c9:3e:03:70:3f:3a:58:
d4:a7:4f:c0:ea:19:67:4d:bf:82:ed:37:1c:74:83:
fb:c7:a1:6e:53:69:07:45:be:05:92:18:cd:3c:97:
8b:bc:00:c2:76:54:77:43:27:25:92:6d:d2:bf:44:
ef:8d:8c:fa:04:75:8f:5b:61:e1:f1:c9:14:33:db:
37:4f:f9:4b:98:2d:5a:d2:33:75:38:8f:58:7f:27:
07:95:e3:99:c8:7d:b3:cd:3d:9c:78:d6:5a:01:ec:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:27:98:1B:DB:60:26:00:70:45:28:29:6A:5A:9D:6B:9B:E1:94
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:14:49:c2:12:cf:08:8f:ef:e4:0e:4a:0d:da:c4:4f:06:6d:
4b:58:58:aa:99:c2:b0:e6:62:58:d1:a6:8d:a1:50:05:b2:f5:
ed:ac:d6:2d:3d:8d:8a:74:42:e3:d8:18:91:85:8e:6c:3f:d4:
2f:5d:d7:38:70:ac:44:9c:a1:42:75:ab:2d:de:e8:01:0d:91:
9f:f8:18:fb:3d:13:0f:9c:e0:28:0a:4f:c8:ef:8c:70:b0:ea:
d7:a3:73:15:04:72:88:27:f5:d2:44:94:90:85:2b:d1:f5:97:
8e:bd:7f:f4:71:cf:49:91:14:bf:ef:35:8a:3b:5a:83:99:10:
99:60:b2:9b:12:d7:5f:cf:59:89:e9:41:61:12:af:ae:2b:3a:
90:3c:26:45:2f:66:99:0c:bb:6f:4d:f7:24:4d:ae:db:18:52:
95:a7:47:e4:91:ae:60:73:4d:86:d1:9d:04:37:9b:20:e9:35:
4d:5e:3e:da:2a:9b:e4:5a:bd:d0:aa:64:f8:26:0b:d7:18:79:
5a:88:b2:fa:d3:6c:ec:0b:c5:97:e8:76:75:c0:89:8f:1d:b7:
71:dd:80:9b:b2:e8:5f:11:79:c4:91:fd:c3:cc:17:0b:d1:74:
dc:0b:55:16:a5:a5:6f:c4:b3:2f:d5:8e:2b:97:89:a5:6e:24:
aa:93:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:17 2026 by rpki-client