Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: B9UKt0TEA16j4nE2/DltUPSPjQvgOzpg/Dc3b+K7yME=
Subject key identifier: 21:B6:05:35:C3:43:76:01:5A:57:FC:9B:DC:C2:29:12:EF:BC:EB:A4
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019D29293439FD2343B718AD0CD74DEFEFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: DfbI5WW+o4sUlxHCgrA5TLHPTmJGMA2td974hGas4WA=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:34:39:fd:23:43:b7:18:ad:0c:d7:4d:ef:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=21b60535c34376015a57fc9bdcc22912efbceba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:78:9a:c3:83:1c:23:4e:6b:63:5c:0c:70:
93:d4:c2:22:f2:5e:1d:31:ae:51:52:02:6d:05:ee:
eb:a6:ce:ed:7f:3f:57:29:e7:41:49:90:f6:3f:dd:
d6:2f:4e:fb:19:f6:1a:a0:9f:9f:c3:7c:16:52:f7:
32:40:46:49:01:2d:3c:ae:e9:f2:db:f7:2f:be:76:
6f:42:5b:e3:6e:46:db:64:55:2b:fd:96:3e:17:c2:
5c:cf:b7:03:74:c5:fb:6f:4d:5a:1f:e0:5a:de:98:
0d:79:74:e6:58:4f:e9:57:6d:8d:74:22:14:41:7f:
f8:23:e1:4f:3b:31:3f:17:20:83:b4:27:2e:74:aa:
b0:b5:46:bd:8e:cf:c5:67:bc:1f:e5:f0:77:9e:1a:
e2:15:f3:ab:78:9b:08:54:ee:0d:a9:c0:78:37:c3:
4f:c2:0f:f5:8e:8f:4e:62:56:90:9a:62:55:aa:32:
07:26:4a:09:29:a2:d2:8e:9d:12:6b:e6:be:99:ca:
38:f1:27:04:16:81:93:92:1c:d6:3b:42:40:74:82:
dd:aa:0c:56:eb:65:31:51:28:99:e1:dc:2d:9b:3b:
4a:c3:89:3b:25:03:f6:5c:63:a0:32:b6:56:80:4d:
f5:d5:66:39:83:78:57:22:80:bd:7f:5c:3e:98:ca:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:05:35:C3:43:76:01:5A:57:FC:9B:DC:C2:29:12:EF:BC:EB:A4
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:73:1a:68:d2:94:46:14:25:b3:89:ef:1a:13:f2:7c:00:a2:
7a:75:7b:2c:af:c6:79:cd:1f:6f:a9:c0:60:52:6a:f0:fd:a7:
f0:3f:42:6f:d6:f6:c0:78:c3:c4:e8:d6:b3:49:26:5b:f2:30:
dd:6b:d3:07:fe:ac:b5:db:b5:9f:2d:ff:13:d3:15:32:53:0b:
d6:4f:ef:68:a2:98:59:56:42:43:fe:cf:b1:c4:48:9c:5f:b4:
33:2b:c3:50:30:3e:64:b0:aa:a9:f8:3e:96:74:bc:19:5a:96:
b7:00:d7:31:f6:1e:d2:b3:d5:1a:18:3d:77:44:ef:64:aa:f5:
34:cb:a2:d9:7e:51:ff:c5:35:26:48:f6:0d:98:e6:ad:ba:ea:
37:10:15:4c:ea:fa:72:28:ae:b3:3c:4e:c5:78:f4:8c:9d:63:
a1:29:f0:c7:36:ff:31:35:fb:ec:10:53:16:33:1e:d6:02:a5:
6e:62:55:5f:c7:5c:cc:e9:9c:8d:38:ff:ce:c0:64:b7:88:45:
e3:05:8c:a2:2f:f1:b9:bb:9c:44:3c:86:cd:20:4e:13:e6:a0:
8b:d1:23:9d:fc:2c:e3:74:f9:93:11:40:d6:8e:f2:57:14:f4:
4b:8e:2f:31:ae:72:a9:32:69:f1:6e:2b:f2:fb:29:46:a1:27:
30:b3:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:46 2026 by rpki-client