Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: LdUxgaBP5nqnSG8lTeeGxouHsa6wte0Eln4EBdRwstE=
Subject key identifier: 19:CC:C4:30:3F:C4:19:6A:C4:E8:AE:C9:D9:F5:7E:D3:14:0D:2C:85
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019D29295DD5752FBD895D3B571879F7134D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1325
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 9lmPUxckZ5PKr5KBio045f5bcRuV8B7kGoOYO1jO99w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5d:d5:75:2f:bd:89:5d:3b:57:18:79:f7:13:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=19ccc4303fc4196ac4e8aec9d9f57ed3140d2c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:6f:4b:2e:04:87:f2:f9:a4:3d:98:4c:22:
c7:06:cf:3b:dc:55:48:5e:a0:ab:00:f6:8d:fe:21:
04:b4:b7:6d:09:c0:31:5c:49:cf:87:e0:35:16:ad:
ac:04:6b:a7:fc:6f:cf:45:45:b5:3b:25:52:2d:be:
16:26:e2:4b:0f:b3:e3:31:1f:18:c1:e8:ef:03:f7:
f8:2b:01:cd:de:6b:e6:0a:ee:99:51:c7:ee:a8:cf:
65:48:75:64:20:96:7d:82:f3:82:b7:be:9c:a6:a5:
79:ea:d9:21:0f:38:09:09:9e:84:c5:16:54:63:88:
30:4a:ef:ce:93:75:a2:67:08:2f:f6:dc:ba:1b:ff:
1d:a8:cb:6f:90:e7:ba:9b:49:94:db:7e:55:1e:c6:
64:22:79:6e:7f:a8:76:a6:0a:d7:8a:13:48:32:b4:
0b:26:88:97:35:3d:a8:74:52:1a:2a:63:03:7c:e4:
63:1a:76:8f:75:93:03:ed:51:ca:d6:5e:29:b1:e9:
9a:ed:7f:d3:48:58:86:f3:e4:64:b0:8d:c1:fd:a6:
12:69:c6:97:4f:c2:ef:1c:ea:d4:12:49:b9:6f:2a:
42:8f:d6:65:9e:b7:1c:8e:25:4f:90:0b:3f:70:03:
5b:dd:f5:3d:6f:22:63:14:45:f0:7c:0c:e9:f8:37:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:C4:30:3F:C4:19:6A:C4:E8:AE:C9:D9:F5:7E:D3:14:0D:2C:85
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:12:1e:69:0f:fd:45:53:75:25:3e:fe:e9:22:cc:39:a2:a6:
ea:24:9d:c5:92:c5:93:a7:0f:0e:81:5f:ea:03:d1:12:86:43:
42:db:0b:93:c7:19:e5:e7:00:79:ab:4a:8d:28:43:7e:1b:d4:
c6:24:c6:48:da:9b:9b:80:05:1e:bf:6d:0e:65:de:21:81:f3:
25:39:30:90:81:9e:ae:c5:cf:5c:87:12:2d:1a:90:5d:c5:b5:
24:4a:08:fc:f1:d1:4d:a7:c6:95:45:d5:77:16:86:b9:4c:54:
34:83:4a:0e:eb:9a:96:36:53:ae:56:5c:45:14:b4:72:94:d3:
dc:3a:09:fd:99:98:b0:9e:e9:f0:c8:b9:30:c7:8c:c1:58:54:
e9:83:ee:f4:eb:45:97:e6:20:f8:ed:10:4d:25:d4:7e:ee:da:
4a:99:82:95:eb:4e:c7:83:47:ff:5a:18:fe:0c:d9:74:5d:78:
fa:f5:df:07:76:cd:e7:48:13:83:57:87:ce:3d:61:8c:3d:99:
a5:c0:ed:8e:0c:c3:d1:36:15:7a:f6:9d:cd:ce:48:01:c5:f8:
c2:46:a7:52:f3:69:ce:c1:f5:49:32:19:2d:a8:ce:5d:a1:74:
7d:f3:b1:cd:f6:03:a5:b4:37:a5:96:bf:0f:a3:06:a8:e6:77:
3f:46:ed:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKV3VdS+9iV07Vxh59xNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjYwMzI2MDgwMTEwWhcNMjYwMzI3MDgwMTEwWjAzMTEwLwYDVQQD
EygxOWNjYzQzMDNmYzQxOTZhYzRlOGFlYzlkOWY1N2VkMzE0MGQyYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEFvSy4Eh/L5pD2YTCLHBs873FVI
XqCrAPaN/iEEtLdtCcAxXEnPh+A1Fq2sBGun/G/PRUW1OyVSLb4WJuJLD7PjMR8Y
wejvA/f4KwHN3mvmCu6ZUcfuqM9lSHVkIJZ9gvOCt76cpqV56tkhDzgJCZ6ExRZU
Y4gwSu/Ok3WiZwgv9ty6G/8dqMtvkOe6m0mU235VHsZkInluf6h2pgrXihNIMrQL
JoiXNT2odFIaKmMDfORjGnaPdZMD7VHK1l4psema7X/TSFiG8+RksI3B/aYSacaX
T8LvHOrUEkm5bypCj9ZlnrccjiVPkAs/cANb3fU9byJjFEXwfAzp+Ddc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnMxDA/xBlqxOiuydn1ftMUDSyFMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRIeaQ/9
RVN1JT7+6SLMOaKm6iSdxZLFk6cPDoFf6gPREoZDQtsLk8cZ5ecAeatKjShDfhvU
xiTGSNqbm4AFHr9tDmXeIYHzJTkwkIGersXPXIcSLRqQXcW1JEoI/PHRTafGlUXV
dxaGuUxUNINKDuualjZTrlZcRRS0cpTT3DoJ/ZmYsJ7p8Mi5MMeMwVhU6YPu9OtF
l+Yg+O0QTSXUfu7aSpmCletOx4NH/1oY/gzZdF14+vXfB3bN50gTg1eHzj1hjD2Z
pcDtjgzD0TYVevadzc5IAcX4wkanUvNpzsH1STIZLajOXaF0ffOxzfYDpbQ3pZa/
D6MGqOZ3P0bthQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:35 2026 by rpki-client