Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: OzMPYkPGmkHHjdDgZV0BJRBgGuhJGV9kyFvPSRksaqM=
Subject key identifier: 10:44:2D:06:8D:62:0A:94:F6:B7:6B:72:17:8C:7A:F3:DB:D4:51:BA
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019D2703AD5ECF216B9F59B14840236CB7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 120B
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: gds6PspPIzuZOdonw7/Rd0kBK/eUJfSFWNjEpJtMTrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ad:5e:cf:21:6b:9f:59:b1:48:40:23:6c:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=10442d068d620a94f6b76b72178c7af3dbd451ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:2c:58:51:fb:bd:23:ed:34:91:cf:6d:04:
82:8b:a9:44:6c:bf:b6:c7:64:31:50:32:bf:7c:37:
76:bc:4e:a2:32:a9:bf:ae:35:31:24:bb:01:dd:96:
27:5e:8b:76:1d:37:78:3b:a9:d7:0c:4c:fd:3b:71:
16:b2:a3:2b:8b:92:90:54:6e:8b:23:77:89:8a:67:
4e:a6:bd:94:22:0f:78:cd:a7:44:31:9c:89:f0:00:
f2:fb:f0:ce:d7:93:49:51:d7:6a:78:d0:c5:34:2f:
c4:06:16:0c:ca:15:f6:19:a1:6a:c2:3f:75:79:1a:
b4:c4:9b:bc:c5:02:1a:bc:94:1d:5d:3a:4b:1f:95:
19:41:46:51:8d:7e:90:50:51:75:ff:e0:45:83:db:
20:f0:fe:32:35:a6:2a:81:f5:58:b2:3b:17:95:d3:
8d:97:0d:de:90:a6:2b:8c:7e:6f:c4:8d:76:13:fd:
d8:1c:64:09:ab:6a:6f:a4:68:d3:71:db:06:30:5e:
41:ec:15:f2:aa:59:1a:17:ef:18:fa:48:03:d3:4b:
d4:7b:36:60:fa:03:90:91:54:c8:31:cf:ea:95:a0:
da:8d:15:ef:7e:04:7b:8e:95:c5:5b:14:31:40:6f:
be:2a:ee:bb:7a:80:df:51:49:c5:1b:46:87:ce:f7:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:2D:06:8D:62:0A:94:F6:B7:6B:72:17:8C:7A:F3:DB:D4:51:BA
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:e2:6e:6b:88:96:a0:76:c7:8b:03:8d:08:7e:4b:90:9c:
3c:09:4d:68:c0:ac:f6:4a:a3:8d:4b:13:16:13:55:f9:f8:5c:
a9:37:94:ef:d3:e3:22:e8:72:60:59:20:58:1f:99:b0:ad:33:
63:90:47:e2:c0:38:d5:d4:10:57:2e:50:44:31:cf:e2:7c:bf:
06:20:4d:41:03:31:93:af:60:cd:19:80:e8:39:f6:a3:c4:97:
73:65:4f:9c:34:74:5e:22:09:b7:0a:46:90:7e:aa:00:9a:ce:
f5:77:f8:2e:64:7f:30:9f:3f:29:f7:22:b2:b6:46:13:04:91:
4c:6a:d0:96:ba:62:d8:32:48:aa:d5:eb:47:14:2f:26:d5:bf:
cd:28:2d:20:5f:31:d8:e7:95:60:ee:ad:0a:59:57:27:5f:cd:
01:b6:bb:7c:17:56:f0:d7:d5:27:97:4a:56:a6:41:5a:07:c8:
e7:f1:9e:b5:21:4b:a5:b6:6f:a4:e3:92:c1:87:2c:14:d0:75:
c7:33:a6:80:c9:b4:97:7e:52:ac:01:26:46:bf:21:ec:c4:65:
e6:83:de:a2:a6:58:18:2b:d8:a4:10:7f:13:4e:63:7b:35:1e:
52:ce:7f:5b:fb:8a:97:38:d7:dc:2d:db:96:02:97:6a:d6:5c:
df:26:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:52 2026 by rpki-client