Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: 8RsoxuOo6LB1zHeSCaAZZeJVjI9Vfu6eOFKihC11suM=
Subject key identifier: 98:57:F7:81:8F:E8:E0:A7:BA:59:4F:A9:88:29:52:AD:D8:66:2B:E5
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019D29974A56F04231BD8FA5BC39859A1BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 043B
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: TTkQKdIVAajG9H4rWme+1493tGAWdlG7NjQFfXoxDHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4a:56:f0:42:31:bd:8f:a5:bc:39:85:9a:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=9857f7818fe8e0a7ba594fa9882952add8662be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:e0:2a:dc:3a:ca:4e:14:f5:35:db:cd:45:
1e:f2:d4:8d:77:4e:cf:1a:54:ac:7a:8a:c3:15:f4:
72:35:4d:af:48:49:b4:b6:93:1a:ff:71:51:16:7f:
d1:7f:77:0d:ae:6f:41:3b:74:1b:e9:91:ef:1b:7a:
2d:48:fc:90:34:bc:c3:f8:3b:cf:5d:6d:0a:fb:b0:
15:f7:b9:0f:5e:a7:ce:d1:98:b0:29:7f:5a:de:d4:
b5:c5:7c:ea:8d:be:ba:e7:38:14:22:d4:91:bf:c9:
1e:ed:11:66:c2:8f:06:15:95:45:ce:84:c2:f2:14:
72:86:4f:4a:01:78:39:b9:50:55:8b:1a:35:a8:d7:
50:77:22:26:77:73:1f:42:33:05:b8:a1:38:47:af:
85:12:d5:0d:57:5e:7d:73:e5:44:85:29:e6:c7:fb:
e9:9f:03:c5:97:21:30:76:f8:2e:4f:7f:5f:ee:d8:
cf:78:85:41:4b:56:ee:14:3e:fe:b5:18:83:16:d0:
d0:bc:5b:61:07:a5:22:3c:2b:dd:1e:7b:8e:48:0c:
f8:9d:d2:70:74:8d:47:95:d6:7e:c4:0a:2f:fb:15:
e7:09:61:75:36:d4:c4:d3:91:53:ee:73:36:69:66:
19:8b:52:f4:90:34:69:d0:de:1a:f2:d8:44:93:1c:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:F7:81:8F:E8:E0:A7:BA:59:4F:A9:88:29:52:AD:D8:66:2B:E5
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e5:3a:12:a1:29:f2:59:5f:08:da:f2:ac:10:d7:6e:fb:62:
c6:1b:41:c1:c4:87:f6:9f:1c:35:75:4e:c5:71:ff:5b:14:98:
1f:86:f8:c8:83:3b:7e:8b:5b:5f:28:52:d9:07:ab:e7:1f:5b:
bd:53:69:a6:94:4e:73:ee:cd:7d:50:ee:c3:9b:40:a9:dc:b2:
f2:06:68:0e:9e:4f:df:98:fd:27:e9:10:31:26:55:1d:08:a0:
b9:07:15:af:28:44:f8:41:41:34:ce:99:67:45:82:04:96:34:
1f:b1:56:e3:cd:36:fb:fa:00:fc:ee:ca:d0:cd:c9:0b:ec:7a:
44:1c:2f:2c:ca:45:8c:7a:cf:9d:5a:66:53:4f:50:64:fd:ff:
3d:7a:0a:62:dc:c2:1c:20:e0:10:b3:6d:0c:1e:b8:6f:c9:ec:
4a:3f:07:8c:b9:64:28:64:e6:22:fd:e3:1e:70:16:e8:fa:02:
69:0f:a1:30:6e:f6:97:f0:43:a3:c6:1f:ea:99:41:a3:8d:0f:
78:5b:9c:b2:42:34:54:49:4e:ee:eb:5c:ff:dd:c2:cb:9c:f1:
b1:f6:97:15:45:aa:aa:0e:87:37:47:9f:48:92:8f:f4:47:3b:
87:58:44:10:12:7b:01:05:e4:ef:30:e8:13:02:44:93:fa:ac:
26:4b:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:01 2026 by rpki-client