Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: LUufRpY3ScXWSDvlwvOtCwNMDocvPoAmXrVjdUE8vV8=
Subject key identifier: 8D:0E:35:65:79:35:AE:89:63:83:CF:D2:44:54:E7:6C:D4:43:3F:44
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019D25842DB8888CF3D1DC664104ECFEB8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 03F8
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: MNtjmen2MTCxpSfclh8/VFnTgKQucxPvXI25RqDEA+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2d:b8:88:8c:f3:d1:dc:66:41:04:ec:fe:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=8d0e35657935ae896383cfd24454e76cd4433f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:50:4a:7a:37:2d:67:02:9b:a2:91:77:b1:
88:1a:59:5a:6b:66:7c:b9:40:8c:94:49:da:d5:28:
8b:6e:de:db:16:f7:aa:9f:c8:38:af:b3:0e:ac:c9:
21:1d:84:26:54:e5:20:d4:01:bc:f0:ce:f8:4c:0d:
fa:a2:92:f9:f8:57:f6:87:62:3d:0f:00:ec:12:16:
29:37:86:9f:69:7b:27:58:33:5b:61:fd:ec:72:c5:
f6:3b:9c:36:52:03:ba:66:29:36:30:97:7c:86:21:
1d:9d:d8:82:b1:06:01:92:17:19:e3:e8:96:c8:70:
12:d6:10:13:2f:a9:fd:a7:ff:57:71:3d:1b:c3:71:
d1:6b:27:a0:9a:63:b1:70:52:59:8e:b7:4d:fe:3e:
88:2f:82:91:73:7f:29:7c:7b:b0:9b:98:c7:b9:0c:
22:dd:c4:32:d5:b2:2b:41:55:7d:75:c0:90:5e:4a:
67:fc:09:e1:92:ac:64:c9:8c:7b:a6:91:e4:78:89:
a5:cc:4d:12:d7:da:bb:36:3f:44:40:5f:ca:63:eb:
ad:0b:66:ba:8c:f0:f5:18:9d:2e:3d:e8:3e:ff:ce:
e3:00:e0:9a:89:65:17:20:33:28:fa:95:fb:01:09:
dd:78:9b:d8:60:7b:2d:04:a2:b8:b1:45:bd:51:c7:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:35:65:79:35:AE:89:63:83:CF:D2:44:54:E7:6C:D4:43:3F:44
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:f9:ed:10:1b:28:ea:96:46:a4:78:a4:1f:62:f3:f5:a4:
ab:92:77:3a:d9:2b:85:d5:40:2d:f6:6d:98:7f:a0:5e:95:30:
5e:23:6e:05:a5:42:08:47:90:c0:56:b4:c0:eb:2e:3b:8b:56:
ac:a9:8a:1a:f3:1f:f2:9f:1e:10:6b:3f:b1:0f:59:c6:ad:66:
1b:38:45:d1:9f:c8:cc:50:74:a2:fe:8f:93:92:a4:d2:fa:a6:
f1:06:a2:66:b7:ce:bc:b5:38:d4:dd:85:1b:53:be:ea:d1:19:
a2:35:71:0e:32:c9:17:b5:5d:91:20:b7:d1:7e:18:b2:0c:37:
98:bb:9e:89:45:dc:34:96:d1:ab:58:12:90:24:b8:5b:89:2a:
37:72:77:b7:1a:1d:b8:b9:ea:de:42:3f:ea:ac:55:24:c0:40:
e8:b6:c6:b5:5d:0a:10:1a:5b:cc:b5:b1:5f:b2:06:d1:df:bf:
0a:a1:81:6b:eb:e9:41:28:60:76:67:05:b4:a7:66:c9:4a:fe:
50:69:70:6f:95:ba:16:2d:b6:37:bc:23:31:a6:27:fe:94:10:
d2:67:70:d1:1e:00:81:22:19:c2:0e:0f:e1:74:38:ee:7a:67:
e9:89:69:61:33:56:d8:f5:ae:49:93:69:4b:2e:b4:a9:d6:fb:
64:b5:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:39 2026 by rpki-client