Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: 7qBT88vpJx+9FcJDXzsaMY60nz6EwatsH7Nn0QmUtus=
Subject key identifier: 38:F2:36:44:34:4F:B6:A3:B7:29:FB:6E:8F:3C:04:08:18:91:6A:C7
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019D284E3CFE6C84C5213333A3CB7ADB9A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 151C
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: 2gZvi7tJtXgc3FCGCqJhOkK1OfayuTqqn13nLzJ8Y7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3c:fe:6c:84:c5:21:33:33:a3:cb:7a:db:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=38f23644344fb6a3b729fb6e8f3c040818916ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:0d:0e:8b:c8:c9:35:0a:77:0b:54:df:99:
dc:8d:fe:f0:89:32:d2:71:88:76:78:59:81:8c:75:
06:0d:2a:03:28:e4:0b:5a:dc:aa:aa:30:0b:76:76:
0e:b9:79:de:c3:5e:92:21:33:e2:8c:1f:2c:c5:e1:
a4:f0:48:7d:2d:68:77:4e:a6:c2:6b:28:10:fa:8e:
ea:16:05:13:b5:85:3b:90:26:29:98:aa:37:47:96:
08:76:64:1a:27:b2:b8:ae:27:ee:d3:9e:bd:88:7a:
f1:cb:28:29:ea:04:b6:9e:33:55:3a:26:09:eb:b6:
9e:db:e0:a0:c8:9a:16:21:e5:a5:42:d0:7d:ef:9d:
a7:3b:89:e8:5b:34:9e:e1:7e:9f:ae:6d:66:14:c9:
9f:33:4c:f9:c1:e2:33:23:d6:9a:28:b9:08:d9:23:
1f:04:ca:05:ec:3a:36:89:55:3f:51:ba:71:52:0a:
e8:5a:b6:94:d2:4d:a1:38:10:7b:39:44:dd:47:0b:
a6:20:be:1d:20:3c:96:49:12:4b:50:76:01:98:3b:
e7:e7:b1:53:77:53:9e:24:a3:f9:e1:26:37:6b:3d:
00:23:d0:d7:00:ea:72:df:3f:57:ee:5c:c7:1a:39:
c9:d7:4e:7e:91:e9:27:3b:85:e6:fa:06:32:fd:27:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:36:44:34:4F:B6:A3:B7:29:FB:6E:8F:3C:04:08:18:91:6A:C7
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:34:09:25:11:81:65:95:b9:ef:97:0e:40:dc:08:11:2f:
d1:0b:fe:c5:d6:e3:70:ba:3c:b9:f4:1d:dd:d4:b2:ca:4d:62:
10:48:4a:0d:02:4b:a6:09:54:c0:49:d5:ef:cf:dc:52:4f:8b:
7a:cc:27:7d:db:15:42:96:f8:c4:7c:bd:79:36:8f:9c:96:5a:
da:22:46:b2:0d:b5:9d:1b:cf:f0:86:1a:fe:8c:8c:5e:55:6d:
84:bf:6d:c4:96:41:2f:50:0e:9d:13:0f:36:f7:e3:d2:94:d6:
96:ba:1d:4c:0e:9d:f2:c5:51:4f:61:4d:ea:d7:19:16:b2:4b:
dc:1c:69:1d:71:a5:d9:26:f1:3b:27:63:b8:f6:b6:02:6c:aa:
14:fb:36:a6:0a:45:4b:61:e1:7f:c6:d2:3a:5e:43:52:99:57:
b1:ba:32:53:03:99:b8:a8:0b:ae:b1:97:4c:00:d1:78:88:13:
a1:bf:7d:4e:b8:46:ec:bc:fb:d6:dc:8d:4e:d5:a6:92:e6:3a:
05:05:18:93:a2:f8:b5:df:f0:3c:99:b6:27:03:84:a3:a1:43:
5d:bc:7b:a9:95:5d:f7:da:6d:c4:17:04:10:fd:e7:55:f5:66:
b1:42:a7:4c:a7:61:1f:c6:55:43:dc:42:47:19:27:b0:ed:d0:
fa:ba:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:41 2026 by rpki-client