Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File: y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier: IA1m/RWwttQ6P+qDmS+GE2gUm7XWziNuyizkB3PvVe0=
Subject key identifier: 8F:07:AA:3F:34:3F:56:6C:1D:07:DF:01:B3:72:0E:7D:77:8F:54:DC
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial: 019D25BA30E4ED756D4518EFFEADBBCB5163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number: 0EF4
Signing time: Wed 25 Mar 2026 16:00:52 +0000
Manifest this update: Wed 25 Mar 2026 16:00:52 +0000
Manifest next update: Thu 26 Mar 2026 16:00:52 +0000
Files and hashes: 1: o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa (hash: HuIvoJlDnjzT1p9vthorLP3YOQAv0oGxz+pUKFAvCsk=)
2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: /tLbdmoh/yZmj0sfoq0x6LroxYzkF7MlG+gQ4uSo+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:30:e4:ed:75:6d:45:18:ef:fe:ad:bb:cb:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Validity
Not Before: Mar 25 16:00:52 2026 GMT
Not After : Mar 26 16:00:52 2026 GMT
Subject: CN=8f07aa3f343f566c1d07df01b3720e7d778f54dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:ee:d8:78:0a:f9:5b:c3:63:f5:45:e1:0c:
7e:46:29:b5:34:09:d0:ca:f8:86:fd:43:79:b9:0d:
80:a1:05:e2:b4:8c:21:ff:4a:1a:91:42:87:7d:77:
2f:8c:62:61:53:41:a0:12:74:30:d3:72:32:a5:45:
33:08:66:f6:23:ca:39:29:b4:f4:5d:55:85:42:c0:
87:a6:5f:2b:e7:fb:8f:f9:7d:a1:48:46:93:78:70:
92:08:93:af:f8:2b:42:85:53:7d:69:d6:eb:74:f0:
41:e6:8a:c0:91:eb:76:1f:41:95:71:6e:51:8f:96:
a3:df:8c:42:93:f0:8e:7f:1b:77:b5:cf:14:f4:22:
9d:3a:90:56:05:a7:a1:93:df:30:da:9b:73:33:53:
53:01:52:73:36:60:0b:67:7b:99:0c:6e:3c:44:28:
4a:16:82:a0:fc:61:b0:a6:ee:24:5d:c6:50:17:43:
6b:9f:88:f7:89:62:f6:84:1a:33:76:1b:40:77:c6:
91:23:65:d8:4c:30:1b:f3:e3:f4:bb:c6:05:3a:6a:
ac:ff:6e:5c:7a:62:37:86:19:9c:c4:e3:90:7c:64:
0a:97:15:7b:07:08:db:fb:0b:92:43:62:1c:23:41:
24:30:3e:c0:49:12:2c:72:d5:61:af:d1:d7:75:84:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:AA:3F:34:3F:56:6C:1D:07:DF:01:B3:72:0E:7D:77:8F:54:DC
X509v3 Authority Key Identifier:
keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:29:6b:50:70:38:ac:a4:39:a5:dd:af:bf:47:be:da:2a:3b:
7c:cd:a3:41:fe:75:d1:0d:27:cf:7c:df:aa:38:36:61:d7:02:
e3:c0:ae:3b:cc:0f:c0:c0:f3:e1:bf:7e:11:c1:54:e2:b4:81:
20:ae:49:ad:f8:b2:ed:57:ff:4c:14:25:14:d4:0e:6d:30:49:
13:b2:ee:00:8f:93:b6:b4:c8:f8:53:33:82:30:ec:4a:54:33:
7a:7c:2f:67:01:c5:b4:3a:1f:91:1b:d9:e2:33:61:d1:64:d6:
2f:86:e9:08:ea:45:74:f8:85:92:4f:97:ac:f6:7c:95:0c:75:
28:17:52:f6:03:26:5f:7b:b2:e5:45:f9:99:e4:cf:a2:dc:41:
09:07:dc:f5:6c:77:26:c1:01:99:34:7d:f1:f0:10:fe:bc:76:
4c:9b:e4:9e:c3:f0:f0:20:9d:18:c5:ef:9d:74:d4:9f:f6:52:
99:2d:ae:22:af:d4:1c:f8:65:ad:f3:f3:0f:55:38:44:78:5f:
fb:d3:af:ff:fd:c5:5a:01:2d:bc:dd:4e:13:d3:f4:68:82:8e:
8a:36:a9:b9:6b:3d:4f:80:47:55:68:e1:7c:b1:5c:b9:0a:a7:
10:a8:34:49:44:67:1e:80:88:f9:d3:d4:ce:0b:06:49:d5:2f:
14:a4:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:02 2026 by rpki-client