Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: 1a2XydB2Qxg3vFEj4cB7/9BjHH16jS0nuzXEsSqr9BI=
Subject key identifier: 0A:07:00:AD:76:34:BA:CC:54:CD:55:8E:97:F3:17:88:84:1E:B6:90
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 019D270485DCF2973654E9A041AADB9F9EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 05DA
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: m4uDMy0fQRJIKR63emaSI3OxnyBi+P4Hp/AVhrkbfuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:85:dc:f2:97:36:54:e9:a0:41:aa:db:9f:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=0a0700ad7634bacc54cd558e97f31788841eb690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:3e:d8:7f:65:8c:a6:91:70:f6:c0:0b:d1:
d6:0c:88:52:bc:03:fa:cd:46:82:2d:5e:d4:2d:d8:
52:a3:0e:5c:91:f9:c7:4c:b2:42:42:94:87:9e:98:
ff:62:11:40:3d:9f:71:6d:74:9b:e7:0f:12:0a:5c:
48:1b:dc:42:57:4c:56:3e:2b:f8:5c:13:96:90:57:
f6:60:58:e8:8d:f4:da:8a:20:0c:09:42:00:49:6d:
1a:c4:ba:c8:4f:07:8f:19:e4:85:01:d8:63:6c:2f:
09:d8:37:2b:de:ab:d2:67:d8:9e:87:95:73:a4:47:
03:94:ea:10:70:79:84:b9:30:4f:bc:d4:1b:4e:8d:
c6:ed:ec:69:7e:24:c3:36:76:f3:9c:a8:5c:b8:9e:
0a:2e:ce:c8:a1:00:36:48:91:9d:64:e1:16:4f:97:
76:bf:dc:cb:c7:30:98:7b:e7:54:cd:19:50:24:e6:
3c:2a:a5:f6:77:78:fc:96:24:9c:ed:2a:f3:fe:bd:
64:40:2a:d1:84:d1:c2:1e:ea:eb:f1:f1:a6:41:61:
07:e6:08:7f:42:37:8b:28:3f:ed:3e:6b:9b:7e:1b:
de:b7:2d:e7:76:3a:1a:bd:ae:31:67:5e:91:ec:a7:
4f:78:4d:96:96:5f:ae:7e:e2:2c:f2:c2:1e:39:3d:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:00:AD:76:34:BA:CC:54:CD:55:8E:97:F3:17:88:84:1E:B6:90
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:0e:59:8c:88:d6:48:9e:fa:94:15:d0:91:53:79:a9:7a:
a6:fd:68:65:31:6f:a8:82:f9:14:af:f9:b4:27:3e:81:3a:29:
00:41:93:46:b7:a7:1e:ea:cf:dd:ba:9b:33:70:20:05:fc:57:
62:27:14:55:e8:1e:48:72:7b:5a:da:27:d4:10:bd:32:73:91:
dd:6e:38:f6:86:eb:a3:dd:26:93:e2:e9:e3:0f:5c:87:c2:ff:
5a:4a:f9:45:ef:a9:fa:02:71:2c:83:8a:93:29:38:1f:e0:be:
da:ce:c4:b3:0b:18:3e:2c:fd:4c:6e:77:a2:d2:ec:4d:0d:9b:
46:ea:86:38:ef:48:1a:74:60:3f:e5:8a:9d:7f:67:5c:2f:5a:
20:60:3d:b2:51:94:09:45:0a:a9:ce:e2:e0:68:e2:73:8f:92:
be:63:22:2e:3c:cb:5a:f6:98:da:35:17:03:0f:68:44:88:2a:
b2:ed:dc:76:3b:34:f9:ad:19:fa:ce:8e:db:b3:d1:ef:92:25:
09:68:d3:f1:d5:03:2a:52:a2:ef:87:01:ca:84:f0:72:97:40:
0a:96:20:d0:e8:e3:06:6f:15:33:ce:65:de:a9:da:21:37:bd:
6c:6e:18:66:a5:07:31:0f:a9:92:07:28:21:23:09:db:5c:d9:
ac:ac:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:26 2026 by rpki-client