Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: 2w0MplZk1Hw408nzz4oOzHeeOc2Q8NybdluW+Wd3MKA=
Subject key identifier: 9E:8D:E3:7E:19:A5:54:AE:EA:40:45:C5:A9:41:7C:E0:DC:89:63:C1
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019D2AE0B9AA93C83C9E8FAC3F2EAC6CF04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 12D0
Signing time: Thu 26 Mar 2026 16:01:03 +0000
Manifest this update: Thu 26 Mar 2026 16:01:03 +0000
Manifest next update: Fri 27 Mar 2026 16:01:03 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: L+xLy53J2exXQLRJmYKKbap+A3scEN3AsHdFsAMRL+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b9:aa:93:c8:3c:9e:8f:ac:3f:2e:ac:6c:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Mar 26 16:01:03 2026 GMT
Not After : Mar 27 16:01:03 2026 GMT
Subject: CN=9e8de37e19a554aeea4045c5a9417ce0dc8963c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:7c:25:56:a4:d9:31:6c:16:e9:cb:82:0b:
9b:10:69:bc:29:ab:c8:bd:3a:9c:3b:0a:b8:bf:26:
b9:d3:38:85:37:75:68:10:1f:e5:5b:7f:96:86:74:
5c:c2:98:60:af:08:af:6c:ce:35:ef:af:a8:6d:4e:
a1:83:1d:97:9b:88:f9:06:b5:f7:93:a6:b1:fb:6c:
d0:87:6c:32:d2:6f:ed:1f:83:32:f9:0e:aa:b1:bb:
c2:23:32:66:c0:b4:42:6f:99:df:03:a3:0e:06:2f:
05:dc:f6:85:24:73:2b:96:72:26:11:7a:f0:1f:b0:
36:2c:7f:75:cd:ef:ca:8b:95:c2:67:bb:b6:ab:b0:
31:91:7d:04:5f:e6:5e:96:34:16:a0:a8:c6:c7:af:
2d:33:99:e7:a8:db:5f:38:e3:0c:86:df:b4:ce:15:
c1:59:1b:72:dc:a7:e9:a1:48:da:29:7e:e5:01:e2:
bc:b8:0e:7b:f3:27:9f:c3:b3:61:9d:f4:6f:b8:a2:
59:f6:96:38:55:94:a2:c6:65:3a:47:aa:7b:42:41:
5c:4e:dc:cf:b5:f7:f4:13:fb:96:91:f4:5f:73:70:
b2:f3:47:df:38:cb:c3:f7:0e:73:d6:05:ef:84:65:
79:b3:55:67:bd:66:64:cc:fc:f9:79:60:c2:25:77:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:E3:7E:19:A5:54:AE:EA:40:45:C5:A9:41:7C:E0:DC:89:63:C1
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fe:f6:76:96:8c:04:3a:e9:9c:0c:5c:7a:6b:83:c0:81:40:
97:ec:a4:4a:5c:60:cf:69:c9:91:34:b9:41:ec:d1:2d:77:24:
72:a0:bd:09:9f:d2:26:f1:72:ed:f9:38:f1:f3:84:b0:47:a7:
56:62:de:db:40:d2:63:ad:a3:cd:90:61:7a:1a:f0:db:2b:c5:
9f:87:38:a5:4a:51:aa:64:e6:83:fb:10:ba:43:49:6f:23:97:
29:1f:01:80:13:a8:1f:1a:f0:e4:e9:7b:e7:93:0c:d8:92:97:
e5:58:70:5c:23:24:84:aa:b5:17:4d:e5:51:69:ce:37:0d:79:
44:ed:88:9f:54:d5:26:5e:6e:c3:a0:ad:dd:6c:35:19:8d:5a:
a7:b9:41:ad:cf:b8:f6:23:e3:c7:bf:9e:63:37:7d:91:49:b8:
27:80:d1:95:e0:cb:67:d2:3f:7b:83:46:35:b9:40:25:3e:04:
08:9a:f8:84:86:bc:f9:42:b8:2a:60:da:d9:12:bd:61:f4:f8:
35:8c:50:b0:9c:b3:40:81:b4:bb:73:c8:86:78:1b:9e:02:cd:
98:67:3e:a9:c8:ef:9e:0d:2b:21:6d:e7:32:2b:24:d3:cd:af:
6a:93:3c:a9:f7:c6:ad:ff:c3:93:a5:2d:3d:d4:8b:86:5f:46:
60:39:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:03:24 2026 by rpki-client