Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
File: _yNu-MNnK1qw0si3J_fkUU6EV0s.mft (raw, json)
Hash identifier: HXh9+5H4D1/Hwp65ElQ0LoH0hm1Hmd8VbVS/mW+MCgA=
Subject key identifier: 08:18:03:01:AE:9F:5F:0C:4F:7D:C9:7F:FE:87:78:41:0C:4F:50:CA
Authority key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
Certificate issuer: /CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Certificate serial: 019D2771B99690B53E2F7FD52DBE5C224F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
Manifest number: 97
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: X_T0FWjs8sv99TO96Nigw_PWdoI.roa (hash: IF+H0gvY6TuEuAilrDvZ1qnXKE+yBwSYsjOx1dwn1C8=)
2: _yNu-MNnK1qw0si3J_fkUU6EV0s.crl (hash: Uy3ZwOFoaeY4qz3zjsXVZN1Pl0PMqQUdgTKxFmuzXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b9:96:90:b5:3e:2f:7f:d5:2d:be:5c:22:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=08180301ae9f5f0c4f7dc97ffe8778410c4f50ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:b5:73:9d:30:24:f2:9c:ff:6a:dc:c9:03:
6c:45:09:b6:17:7f:cd:ae:7f:d1:71:32:52:5b:9c:
4b:c4:ed:6d:54:69:4f:cf:3c:5d:9d:f2:ab:fa:89:
af:9a:ec:de:08:7e:c3:4e:f6:c5:05:93:d2:45:93:
da:2b:d5:91:55:85:a8:cd:ae:ff:1c:a5:2d:fa:69:
82:ee:c1:ff:f4:73:1d:9a:97:2b:4f:29:36:48:ac:
1f:59:71:ec:55:ce:45:c0:1d:88:17:0a:f4:98:9b:
5a:ed:d8:a5:ed:bc:6b:73:80:b9:d8:e0:6f:f2:26:
77:20:95:f9:8e:63:15:fc:5e:35:13:80:87:71:00:
9b:76:f1:78:e4:b0:38:c6:d0:0b:80:83:ee:2c:fb:
7d:68:0a:e3:90:33:cb:ac:a6:32:51:93:5a:c0:fa:
31:c9:48:c0:15:3e:26:bb:a4:52:31:42:15:4c:ca:
ca:ed:88:8f:bf:55:a3:1e:df:13:b4:9c:2c:02:42:
ea:b7:b2:10:a0:08:63:34:15:7a:6f:5c:9b:96:9b:
a6:5e:4f:ac:71:8e:b2:48:c2:66:0c:8e:d6:37:45:
1f:59:9e:46:c2:24:3b:03:02:69:bb:56:68:9b:d4:
30:bc:5c:02:d9:72:08:d9:26:fb:bb:c2:db:d2:38:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:03:01:AE:9F:5F:0C:4F:7D:C9:7F:FE:87:78:41:0C:4F:50:CA
X509v3 Authority Key Identifier:
keyid:FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ef:00:b6:0f:be:9c:f0:2c:85:f5:b4:ec:c9:07:b1:4d:80:
b6:37:a9:3e:29:42:75:24:f9:00:b3:ec:8d:71:97:0e:a4:68:
c2:dc:9c:e5:53:ed:9d:22:44:32:84:b1:91:0c:7e:a4:ed:15:
15:2f:75:14:62:68:77:a9:00:07:dc:23:1a:5b:e8:84:b2:1d:
33:cf:e0:d5:34:9e:48:cc:cb:76:c1:cc:ba:38:b2:7b:37:e7:
3f:ca:08:a4:31:f0:14:d7:c6:94:aa:99:d0:19:26:f2:98:ef:
8d:99:b0:2b:c3:f5:5c:34:e9:d2:62:12:7f:41:5d:59:a8:c3:
bd:51:df:21:8a:23:05:02:30:e2:15:ee:d5:3b:0c:61:11:b6:
5f:60:e6:af:0f:9b:03:73:b6:04:25:72:a1:68:1b:f4:6e:ee:
28:1d:0a:32:c9:47:63:a3:66:c5:eb:52:7b:55:c5:b9:2d:10:
ff:2c:9e:cb:9c:53:28:f8:98:60:01:93:31:aa:c3:22:64:e7:
02:36:44:83:54:20:a5:ab:4e:84:10:8c:3b:30:7c:4a:e9:58:
23:8c:3b:3e:5d:84:28:44:a2:84:e9:8c:61:19:b2:f7:fb:71:
f1:c6:e4:32:28:27:8f:6e:a7:14:4f:f5:65:c3:fc:50:96:3e:
36:53:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:31 2026 by rpki-client