Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: ZQGFYarBTDGa1Ae+SKS7GJVt738L8znhZyODg5yXVSk=
Subject key identifier: 24:EC:CF:6C:8F:B6:1D:BE:E0:A7:F3:16:DF:61:8D:E6:71:D3:87:31
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019D27A92BC75E8AF282FBC801FD1A70C2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 080B
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: aYS1Hf4tzVxWidGGIUmN3ruIsBMm5iWwKCBfjtx2Z8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2b:c7:5e:8a:f2:82:fb:c8:01:fd:1a:70:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=24eccf6c8fb61dbee0a7f316df618de671d38731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:e6:fa:be:61:d1:ed:f7:4b:a1:7f:cb:e9:
99:13:5d:03:ec:0e:c5:d7:31:42:93:f3:a6:e0:c3:
3d:17:af:1d:74:45:63:26:3f:d5:a5:49:f8:36:f4:
35:14:2f:7d:7e:c6:ec:5c:b4:35:62:59:ad:f4:d1:
b4:47:79:98:66:79:87:54:d7:09:1c:0d:9d:eb:4e:
3b:9f:29:76:c7:36:16:c4:c0:f7:4f:6f:ae:2f:bf:
d4:8e:13:18:45:d7:6b:39:fe:87:9b:60:20:89:71:
89:44:dd:3f:2b:d1:87:56:f9:fc:72:c2:13:00:b2:
eb:91:22:e7:08:2b:18:15:a8:f5:43:9c:b1:69:13:
6a:87:06:a4:90:25:d7:77:c1:9b:d4:87:8f:19:b3:
c8:1f:da:b4:d6:bd:ef:05:38:09:6c:24:52:5e:02:
52:39:56:69:28:57:09:1a:41:0d:ee:dc:8b:ad:e4:
48:75:b1:00:59:04:27:38:3d:af:ec:19:b7:20:54:
b7:11:fa:f7:56:6d:57:34:ff:df:0f:08:c8:c9:24:
62:81:bd:12:aa:c4:3a:b8:1b:d9:ad:08:d3:b7:d5:
05:17:00:8c:77:04:79:33:91:da:18:c5:9b:d0:d9:
55:43:6e:05:04:c8:46:de:dd:41:6b:ec:0b:f7:8b:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:CF:6C:8F:B6:1D:BE:E0:A7:F3:16:DF:61:8D:E6:71:D3:87:31
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:e4:e1:ab:c7:74:cd:bb:be:59:ed:7f:fe:6d:40:b6:c4:
17:c9:6f:55:28:75:4d:48:eb:94:bd:db:1b:6b:38:f4:34:c0:
a3:41:47:a9:ff:94:dc:3a:2a:72:1e:07:b7:68:19:85:00:f8:
56:cc:1e:69:df:5a:3a:8f:81:bf:b4:d9:46:f0:f2:9f:51:2d:
cb:41:5c:56:97:e9:d4:45:d6:e6:00:9e:5b:db:96:e1:9a:74:
bf:d0:0d:8d:67:42:8e:c3:90:4d:7d:2f:4e:82:16:7d:c3:15:
94:08:19:23:b5:50:7b:d4:db:6f:2e:20:8b:79:3b:7f:a4:a9:
9b:02:9c:d8:1b:f4:63:f2:e2:4f:0b:a8:01:3c:43:a4:0a:9b:
4c:a9:1d:fe:5e:80:b4:bc:18:74:46:d9:7e:26:4b:59:4c:12:
79:ba:7d:46:34:0e:df:af:fe:4b:e3:40:a4:d9:ef:e9:8f:65:
9f:43:f3:06:96:6b:19:ad:f9:72:cd:d9:bf:8b:af:6b:12:1a:
28:dc:82:4a:1f:c8:66:8e:06:db:0d:2c:45:13:de:0e:fe:25:
04:9c:10:f3:b8:f1:7c:d1:91:c2:cf:f2:65:69:a0:6e:d4:d8:
6b:7b:9b:42:9c:ca:44:30:5c:6c:48:ae:3f:af:13:77:98:38:
30:b0:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:25 2026 by rpki-client