Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 9jJoQkiAKd3Tws/y3fVu/ng80vpUrgd+G554CRUjdCc=
Subject key identifier: 73:7B:7B:66:00:7F:59:32:CB:6A:33:E3:A1:71:0C:36:C4:FA:8D:E7
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019D2B178CB21AB08198A1E8DECD9C3244A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 06D8
Signing time: Thu 26 Mar 2026 17:00:56 +0000
Manifest this update: Thu 26 Mar 2026 17:00:56 +0000
Manifest next update: Fri 27 Mar 2026 17:00:56 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: ro6Q+xqYmCUjL9n3vW3k9cs+5RbGPVdUsZ/WzQdaLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:8c:b2:1a:b0:81:98:a1:e8:de:cd:9c:32:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Mar 26 17:00:56 2026 GMT
Not After : Mar 27 17:00:56 2026 GMT
Subject: CN=737b7b66007f5932cb6a33e3a1710c36c4fa8de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:05:3f:d4:8b:6f:01:e3:6e:62:7b:b5:26:
1e:d5:87:9c:0d:5b:11:35:91:fd:17:17:ef:61:26:
e5:ae:ab:2a:1b:2f:cc:f0:bb:fb:32:43:af:93:a5:
af:ac:df:2a:6b:9f:37:53:d3:46:52:2b:dc:29:ab:
68:70:0e:b0:31:61:20:8a:37:d1:49:bf:d4:c0:bf:
2c:52:71:ee:ff:5a:9c:d1:4e:f2:f7:a4:5f:37:53:
cd:24:1f:d3:42:59:bd:99:ea:47:71:01:bb:5a:51:
c7:d6:7f:0c:12:dc:8b:aa:ac:61:1b:6c:25:7d:a5:
b7:24:34:4d:c1:d4:26:c3:03:59:d1:46:f4:c8:2e:
84:d5:9d:e8:d1:77:6a:cd:d0:ea:31:b4:f9:bb:8b:
d8:7f:88:11:ec:91:11:94:78:a7:d9:a7:5a:63:86:
08:48:7c:e6:ec:83:02:a0:47:0d:c1:5f:a6:c5:f8:
f9:17:2c:96:ce:1b:04:f4:42:a6:b1:73:3a:53:d3:
03:18:b2:d0:bd:4e:05:a1:2e:0a:e8:23:e7:a7:da:
59:81:0e:98:69:d7:a7:23:c4:6a:84:8c:5a:4b:6a:
fa:9a:de:bd:ad:42:71:71:8f:98:7b:91:89:e2:6e:
6f:2a:60:ff:a5:b1:a5:6f:a4:9c:ca:1e:71:20:49:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:7B:66:00:7F:59:32:CB:6A:33:E3:A1:71:0C:36:C4:FA:8D:E7
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:93:38:19:60:de:1e:40:82:f0:1b:f5:61:3d:2e:7e:8a:e3:
24:3d:ea:72:6a:ad:82:94:2e:a4:18:fc:c2:3b:72:25:03:8b:
58:62:d8:87:25:1b:46:8d:6f:59:cd:20:b3:42:1a:16:65:3d:
57:cc:90:39:a1:04:d1:b2:4e:8c:4f:03:f0:69:0b:c5:e0:51:
86:7e:bd:da:e9:22:52:62:29:88:49:ee:47:ce:b6:bd:78:e3:
10:c4:d0:b3:84:0b:12:e8:2f:a3:a1:c1:fc:2f:ce:64:98:46:
c7:84:0c:e1:cd:93:87:31:50:22:45:9e:f2:ef:8b:57:02:3b:
20:db:10:91:c0:34:0c:dd:46:94:86:ee:79:6b:aa:af:2c:7d:
97:a6:ce:0d:b5:0e:d9:bc:28:d0:b4:e4:1f:5f:5c:64:e2:17:
78:a1:ef:ad:4c:fb:b3:c0:3d:65:ac:e0:13:53:3b:44:2c:64:
82:db:37:9c:55:08:07:0d:d0:f9:5d:00:f7:7c:c2:55:43:37:
42:4d:7f:72:e9:dd:fb:b4:e8:f5:3a:71:9d:85:3f:f2:f1:81:
df:91:7a:66:ce:f0:1a:bd:b1:7d:98:c5:ea:30:63:36:2d:61:
fb:20:f3:80:8b:ad:eb:76:5c:53:1c:be:61:7c:2b:e9:78:67:
1c:5d:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:10:18 2026 by rpki-client