Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: 50BmeYqj95DQJyURV9FT94ZutNIeq0v0CHzSrHTPfiE=
Subject key identifier: B5:A9:99:2A:1C:B6:63:79:22:25:18:6C:04:A1:27:D7:AA:DB:36:4E
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019D28BB9FE5629EF8E0D30BD14D5F6355F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0BF7
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: 4rq9mSrInfg2EPvfBpZO4b0Q8snDiWm3IbWQjRB1Td0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9f:e5:62:9e:f8:e0:d3:0b:d1:4d:5f:63:55:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=b5a9992a1cb663792225186c04a127d7aadb364e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:d3:1a:46:3e:8f:91:0b:db:84:36:e7:7f:
af:f6:cc:03:28:fa:2e:1b:f6:cc:c1:6e:a4:d1:3d:
fa:fd:ee:90:bc:d3:fc:9b:2b:29:35:db:3d:31:ab:
6f:eb:d9:ce:24:12:6e:24:0d:2b:8a:8e:62:db:2b:
56:10:6e:bb:79:87:d1:de:ad:44:84:7f:57:fe:db:
31:12:77:7e:6b:95:ef:b4:58:a9:ac:31:fa:84:0a:
1f:e4:8b:e0:79:dd:a8:fe:9f:5a:fb:be:c4:17:8b:
e0:7c:fe:99:fd:52:8f:5d:4c:f9:99:a0:f2:dd:c7:
82:cd:af:00:68:b4:1c:ce:63:4c:99:a3:bb:99:a3:
8f:c4:f1:42:6f:8e:7e:b0:df:aa:dc:d2:64:c3:60:
ac:6f:0f:2b:05:16:7a:49:02:d4:9d:73:63:6c:2b:
de:6e:66:61:d2:37:f7:17:63:27:07:9b:71:e0:aa:
83:10:99:70:ff:3b:be:51:36:c4:19:5f:6b:bf:d2:
f4:f6:46:4b:b8:00:4d:44:cf:29:3a:22:f3:72:c3:
27:17:0e:f1:92:c9:1e:18:c9:43:97:df:2a:af:4f:
55:83:d5:79:6d:e3:79:a3:a3:05:9a:2a:84:8c:25:
c8:bc:b3:12:62:e8:df:97:01:6a:3b:63:d7:c0:6c:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:99:2A:1C:B6:63:79:22:25:18:6C:04:A1:27:D7:AA:DB:36:4E
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:c0:c6:b5:af:33:78:7a:02:9f:5d:e2:9f:d4:22:80:10:
cc:78:59:6b:09:9f:19:67:3a:1c:99:16:01:51:77:75:80:14:
fd:eb:54:70:b8:ec:09:55:a8:7f:4f:28:a1:a7:a3:a1:9a:ca:
50:06:06:ee:aa:5b:4b:9a:8b:23:c8:5b:16:27:c0:07:da:ae:
94:05:77:28:2e:69:ed:64:5d:15:ed:94:67:34:41:cd:1a:d3:
42:37:67:4e:e1:c6:b1:db:50:42:2e:14:46:fb:4d:99:4d:b6:
50:e0:82:a6:bd:cf:3f:ab:e8:1e:27:07:36:ee:9e:30:03:86:
f0:ea:0e:48:10:2b:06:88:35:96:f3:eb:43:99:67:56:2f:23:
a4:a2:e2:e6:f2:c1:7e:ec:cf:bb:1f:5b:4c:d8:79:21:4c:1a:
24:51:18:b7:ad:ca:2e:ff:7b:66:e5:e5:31:a6:d9:0c:ea:f7:
9b:55:45:23:3e:83:ca:df:7f:0c:ed:dc:ea:c3:fd:f7:0a:a4:
c7:6d:09:fb:58:ab:85:0a:5d:ac:e2:cf:90:90:e9:e5:f9:b0:
37:91:22:6a:f5:28:af:51:a2:d0:78:d1:ca:1e:e1:80:bd:80:
4c:7b:51:9c:cc:12:bd:79:9b:c7:db:48:0a:a3:c6:5d:34:76:
fd:bd:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:16 2026 by rpki-client