Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: b2PDhr2w/rcwND2GEXv+vNPru7VZoXqVrurqH2nolQA=
Subject key identifier: 95:74:7F:B6:26:FB:A3:A5:E4:44:81:2A:B6:A3:5D:FA:96:62:99:1D
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019D27DFCE34FADFA729465F11823EB8017F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: S30cK1T7wzb/XcP2ycD/N3jndrNvt4BhEW8/vAwIsC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ce:34:fa:df:a7:29:46:5f:11:82:3e:b8:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=95747fb626fba3a5e444812ab6a35dfa9662991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:67:bd:c5:2b:86:ea:8d:10:d1:d7:2d:10:
d6:48:3c:e5:4e:2b:ad:e2:1e:cc:d3:fe:eb:97:cb:
20:5b:d5:d3:b5:a4:66:ca:cc:08:d4:29:29:ce:4b:
0b:84:90:4a:95:47:58:72:a3:4b:84:33:57:fd:70:
e4:6e:ff:90:f2:2c:26:6f:59:c4:39:ea:d1:17:56:
c4:2e:ae:ca:10:35:14:01:28:38:f3:2b:aa:5b:0f:
5d:44:0a:a6:b0:cc:b1:fd:76:ed:c7:aa:67:ea:53:
c3:ed:ee:16:f4:cb:97:6d:57:90:28:06:17:5f:63:
19:08:c5:bb:3c:03:75:aa:86:04:be:c6:56:e4:46:
a0:e4:c7:8a:4e:f1:02:a1:c3:5f:a2:4a:ff:e8:e5:
2b:de:24:8b:0e:0f:f7:47:2f:cd:2d:df:81:60:1d:
33:72:bc:a7:cc:e9:82:0f:32:a6:ae:7d:33:75:1b:
49:62:3b:79:97:a1:3d:0e:8e:16:20:8f:97:f4:50:
8f:5b:d8:9b:91:eb:41:62:b0:02:d6:02:21:d4:c0:
56:42:67:d6:b5:e1:fe:49:aa:75:8b:20:17:77:4b:
54:69:3a:f9:8d:aa:f1:8c:68:08:0c:65:7d:70:72:
65:9a:5c:d8:6d:92:8d:06:a0:3c:e3:b2:ce:53:01:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:7F:B6:26:FB:A3:A5:E4:44:81:2A:B6:A3:5D:FA:96:62:99:1D
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:ef:e7:30:5b:8a:3c:c5:f6:ff:eb:c8:28:f0:b4:7d:98:
ed:01:57:7f:05:15:3c:93:4c:c4:74:83:4a:64:97:c1:1a:34:
d7:0d:0e:66:a7:e7:00:8a:ef:d3:57:c2:6e:85:20:09:9c:79:
82:e9:bb:69:a6:b3:68:ce:81:b9:f8:4a:f8:41:27:94:ce:39:
b0:de:1e:09:f1:79:71:d8:72:d0:6d:18:cd:4f:0f:ab:c9:dc:
4e:fc:85:36:70:ee:d4:51:72:24:7f:32:bf:b4:95:c8:bd:ce:
ba:78:af:39:55:80:20:13:98:83:e9:23:c7:86:33:b3:d8:37:
4b:cc:55:e4:d5:85:c6:c1:01:39:92:39:e3:17:9a:cf:3a:f0:
44:46:69:17:bc:7d:f1:c2:3f:5b:b2:3b:29:cf:ba:c2:74:92:
99:71:ea:4d:ef:b3:d5:d3:9d:8c:03:01:5c:17:93:b4:f7:4e:
1d:93:bc:1e:4f:a6:0d:1c:2c:97:26:24:19:42:0c:b7:65:4e:
58:14:85:cf:ab:09:f0:4d:b8:64:db:83:92:b8:8c:52:2c:2a:
66:c1:a2:b5:c2:b7:27:34:0e:25:f4:80:79:b9:64:17:74:47:
80:a3:d3:da:8e:15:61:29:18:3b:41:6a:45:f1:ff:6e:99:99:
99:7a:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:06 2026 by rpki-client