Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: MwXiJXBnHBrUeudPNsmBUzTywId5yvpmaVHIWKnHfaY=
Subject key identifier: 13:DE:4A:59:D4:49:EA:06:0D:3D:A5:CD:FB:59:53:FA:E0:FE:BF:DB
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 019D27DFD99ED78282B55487AD4BF20CFA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0E80
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: bASaPMddFZ0xzXPjyJWvi7y6me3HKDo8wOXvtWQdUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d9:9e:d7:82:82:b5:54:87:ad:4b:f2:0c:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=13de4a59d449ea060d3da5cdfb5953fae0febfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:97:b1:b4:40:94:18:be:03:f9:19:69:c0:
48:7a:bb:fe:13:df:49:fd:85:e2:1e:ab:74:5a:49:
37:80:35:17:52:14:cf:a4:04:63:ce:15:ca:a5:67:
31:14:80:73:47:e2:ab:16:a4:e9:85:fb:cc:89:f0:
1f:e2:86:da:b9:18:b8:94:40:f9:b0:53:ac:a9:52:
57:8f:cd:1a:db:54:be:04:4e:ae:21:19:a3:64:43:
bf:2b:62:a4:7c:78:15:7a:3f:52:62:09:88:95:9c:
c8:be:8d:42:a9:1d:07:dd:0f:18:fa:3a:9c:3c:a6:
4f:51:90:26:61:18:76:1b:ac:47:ec:66:7e:1c:a0:
b9:6d:c1:6a:16:28:0c:3e:59:ca:97:6f:27:49:83:
35:91:ec:4c:36:e5:c2:9d:0f:ae:1c:f2:5c:be:66:
ab:fb:d5:42:33:16:69:dd:37:d3:54:be:35:ce:ab:
3a:a2:b4:ab:e2:e0:a3:33:5b:8f:c9:27:f1:b0:a0:
15:3a:b0:7b:f9:41:0f:82:0d:1f:81:98:94:e9:48:
9b:19:57:6e:4b:1a:2f:01:1f:1a:40:9a:e8:04:05:
00:e6:f1:f6:de:41:cd:f8:1c:80:6b:07:74:67:fa:
35:5d:89:07:66:e5:56:ac:37:0a:98:3b:a9:dc:6c:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:4A:59:D4:49:EA:06:0D:3D:A5:CD:FB:59:53:FA:E0:FE:BF:DB
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:89:8e:73:16:05:06:26:d5:d5:43:3a:0e:d1:ab:45:7c:
ff:44:bc:fe:e2:74:5a:f2:be:52:a1:38:5c:1d:39:ac:bb:ac:
68:4c:48:f6:5e:e2:b1:1d:c9:19:77:18:4a:18:a5:10:f8:42:
06:cd:5d:14:32:87:32:4f:c5:53:f1:12:3a:5d:9c:ce:3e:86:
0e:dc:8e:63:73:64:13:6b:fa:e6:9e:8f:cd:28:e5:b4:2f:ea:
a3:ec:24:e8:64:23:ad:ee:80:41:57:3a:7c:25:15:70:69:9c:
6f:66:a1:1e:54:d9:8e:d1:1d:50:98:86:8e:f6:0c:13:23:4e:
56:4b:b8:52:73:5e:9a:9a:5c:e5:68:d8:d8:09:08:b2:0d:62:
63:32:86:8f:22:98:eb:8c:e2:29:1d:63:3b:89:7c:ca:87:40:
02:f2:70:eb:62:6d:96:bf:48:32:98:be:01:31:9f:73:ff:0b:
46:55:9b:e2:81:16:bd:48:bf:da:eb:81:ed:ae:5b:b3:3e:7f:
db:5f:a8:59:aa:05:ae:53:8a:3f:1e:04:97:b1:54:6b:5a:f7:
cb:54:3e:13:84:44:ef:1c:e3:b5:0e:a7:e5:02:18:d5:81:8d:
e8:52:f4:85:85:de:cf:48:f2:ea:1c:80:63:2d:4a:6b:26:99:
a6:87:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:17 2026 by rpki-client