Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: Uk5aBNgDHmq5MygCdWxc/SrmE4jA3ecUcqAPJ96BBKk=
Subject key identifier: D1:67:73:6E:BC:FE:2F:8A:7B:48:BF:A4:FD:34:B0:4A:92:B4:0A:CD
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 019D29CE0455ADF690C2630786A11EF28C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 06B0
Signing time: Thu 26 Mar 2026 11:01:00 +0000
Manifest this update: Thu 26 Mar 2026 11:01:00 +0000
Manifest next update: Fri 27 Mar 2026 11:01:00 +0000
Files and hashes: 1: 1-wZ-dGJD7TkcwZp0aHH7GFaEZLg.roa (hash: mvCPOF4PLAlLp3trYs0EdaoYFPkfsfUwTcZFYIhMgoo=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: edSyNmDhg5kzhEuNoLVfFmtH8IYxSO8dhCNpUXduBNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:04:55:ad:f6:90:c2:63:07:86:a1:1e:f2:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Mar 26 11:01:00 2026 GMT
Not After : Mar 27 11:01:00 2026 GMT
Subject: CN=d167736ebcfe2f8a7b48bfa4fd34b04a92b40acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:33:0a:d7:07:fb:99:ca:d8:49:9e:89:bb:
cb:b5:b5:92:0b:13:58:ed:89:ec:14:4a:24:3e:16:
11:0f:46:0b:c7:14:cc:01:29:c7:58:3e:7f:f8:bf:
82:3e:ef:8c:23:4c:59:b4:9e:e7:ea:4f:15:95:fe:
0b:28:17:25:cf:31:2b:a7:52:45:b2:da:d4:a9:cb:
be:20:0b:d4:ce:e8:77:30:fe:fd:48:46:f4:53:35:
5c:93:b2:70:43:72:ed:44:da:79:fe:cc:c0:f2:86:
c1:69:04:c8:f9:11:eb:56:36:ff:70:37:a7:a7:be:
01:1d:61:e1:90:71:69:4a:5c:e1:2d:10:c8:f5:17:
92:7c:50:b3:d8:66:8a:a6:6b:8f:59:9a:83:a0:41:
84:9d:91:d9:58:d8:b0:72:87:b4:0a:65:7f:4f:4c:
16:1a:20:19:44:4f:3b:16:b3:92:86:f6:b1:68:5d:
c8:bb:0e:c3:17:7a:eb:11:fb:90:70:94:fe:0e:4e:
f5:d3:09:1a:4f:d8:f8:77:65:df:15:d7:4a:6f:99:
06:98:5f:35:8b:26:cc:51:c5:cd:20:10:9a:5c:32:
d7:89:22:66:b9:07:4d:84:85:d2:a2:35:ef:c8:fa:
34:f7:e7:92:16:c7:14:e7:4d:76:27:f4:6e:dc:b9:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:73:6E:BC:FE:2F:8A:7B:48:BF:A4:FD:34:B0:4A:92:B4:0A:CD
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:54:04:e7:84:fd:e7:01:65:0a:6c:5b:d0:71:ff:aa:43:
83:32:3a:ea:f2:28:93:fe:6d:fe:f1:43:ce:e2:2e:72:48:3a:
a7:fc:af:ad:07:9a:71:78:06:3a:79:17:96:f2:81:cc:95:d4:
fa:26:93:66:4e:3a:d4:20:a1:d4:22:28:1b:ce:b7:44:98:88:
0a:88:14:e8:3d:d8:44:3a:ff:e6:29:f9:08:0c:5b:fa:24:5a:
f4:88:74:2d:43:82:43:2e:04:7e:68:61:6c:d3:d2:4b:76:3e:
73:ce:14:bd:a0:e8:81:b8:c4:93:15:5c:39:3c:dc:8b:bd:81:
5e:9d:47:b1:b4:ae:22:73:34:b3:c0:32:11:38:78:d5:10:3c:
86:26:ef:0c:1d:61:76:6f:07:51:a6:3f:8d:9d:b7:c0:b3:62:
82:3f:df:ff:aa:1f:82:a4:d0:e9:a7:68:42:44:f1:12:52:12:
fd:d6:d1:b4:90:d0:ff:a6:5f:f4:0f:19:22:e6:2c:bc:74:99:
05:7c:5b:23:10:c5:6e:5c:35:d1:82:3d:02:f2:7b:6f:68:fa:
76:60:54:14:fd:cc:4d:08:7f:e6:e8:93:e3:ee:3e:02:91:5a:
34:a6:af:6a:b7:7f:eb:63:39:cc:fb:41:bb:4e:7e:9c:60:b1:
2a:d1:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:19 2026 by rpki-client