Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: yO6Av8hKKi0HXpL70CieTrOJ71qr6zLTeilj+nJU1Hw=
Subject key identifier: 15:BB:7C:9B:47:52:07:52:4D:A9:C3:D4:C8:71:5D:E4:9E:34:DE:E5
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 019D273ADB6D9DCE1B9625FAD54FC1608096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0CF8
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: 3PHsGvndvUMdTyhDtmVLlK99X2o.roa (hash: XXO+YxJiac8k9zXDW+uVmg5TKsFstSl40o0fTf5KuC4=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: 5tHBurBijNXILT6xx4bPEHb6U9Rlya5WZim0rIGZ4rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:db:6d:9d:ce:1b:96:25:fa:d5:4f:c1:60:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=15bb7c9b475207524da9c3d4c8715de49e34dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:27:bf:27:b4:cb:d8:c9:01:43:e3:b2:57:
b7:f7:2d:6c:66:59:c9:dc:39:03:b9:51:9e:b5:c0:
7d:56:20:94:4e:24:55:72:a5:2f:7c:20:d6:ae:dc:
76:9e:19:be:fe:98:82:c3:47:cf:53:2d:32:fe:23:
18:e2:4f:cc:c8:6f:aa:fd:03:dc:f7:63:05:0a:82:
a7:55:4f:86:b8:ea:22:21:55:28:83:4c:89:b9:c4:
b6:9c:97:6c:9c:6c:03:11:5e:ca:94:63:c5:a5:1e:
2b:ac:c7:27:f7:78:ac:27:cf:10:b9:3c:03:19:84:
e5:ea:f0:42:c9:dd:a5:45:8b:ba:b7:99:68:46:b3:
eb:11:d9:bf:cc:41:f9:93:e0:6a:5d:c5:ee:cf:74:
44:d3:8f:e9:3a:f9:f0:dc:d4:98:b8:df:64:b8:26:
43:30:ae:50:53:ec:f2:ec:2e:51:1a:69:2c:c0:9e:
36:7e:ad:fb:cb:33:f2:ff:8b:e5:3d:d6:a5:16:81:
74:fb:e4:3a:6b:eb:ad:9f:cb:ee:46:0a:27:44:8a:
c3:88:70:d8:21:4e:30:3a:d3:eb:65:a3:4a:55:42:
cc:d6:73:00:9f:c3:e3:ea:7a:29:dc:c7:29:e6:2d:
70:fc:33:02:32:d2:04:18:b3:3a:ae:3d:57:e3:ee:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:7C:9B:47:52:07:52:4D:A9:C3:D4:C8:71:5D:E4:9E:34:DE:E5
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6d:00:1c:94:09:1a:86:2e:8a:87:6e:d8:de:f1:13:eb:bb:
bb:ef:38:3b:00:b5:e7:32:29:5f:95:42:95:61:31:26:9f:e7:
84:91:e7:20:5a:23:c4:e0:11:5b:49:a8:6d:b6:60:5d:40:4c:
e9:e0:68:50:93:4d:79:f5:b2:35:93:2f:6e:12:68:3b:fb:03:
84:e4:3a:19:e3:9d:76:77:15:0e:63:1b:54:95:16:1b:a4:a3:
01:bd:e5:be:75:da:11:44:be:6f:16:c5:66:42:4e:e5:82:f2:
ab:97:98:3d:ad:b9:01:07:53:a4:f7:2b:19:38:5b:3b:6b:f5:
c7:47:b7:d5:b6:a5:04:71:3e:4d:af:1f:d8:e5:f7:78:16:43:
22:1e:28:3f:b5:06:57:95:88:93:62:77:1b:9d:8f:0f:89:50:
c3:e6:13:20:db:07:3b:fc:85:0c:d3:a1:3c:a5:94:28:6a:14:
3c:96:5d:2b:25:80:03:94:ab:17:84:a6:b4:29:92:36:07:f9:
ca:b7:69:36:36:e3:3d:3b:f0:d3:4d:ae:34:bc:1b:26:35:32:
15:11:6b:5a:91:11:71:dd:29:19:66:97:52:cf:a2:5d:59:8a:
c6:f8:d8:ee:3d:f8:0e:af:46:3f:06:7c:3e:b1:c5:08:9c:58:
24:a7:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:59 2026 by rpki-client