Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: cT48ZgSVi/ipFfxxkRUlOkWhG+KxyzXci0X2SFGj4os=
Subject key identifier: 0F:2B:4F:08:2C:BE:F4:B2:B6:A6:C9:51:FF:67:E4:25:D7:D2:AD:4C
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 019D2703CFC46336EB35E33B5577C6DA32B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: 1niYCTo37xVei4gItN1jk_g0QcA.roa (hash: HSK+XzICMF5Uo1WOtOfQq0j3MWM/1FQtM7ZPlvUF5zs=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: kfB0/cUYpTD7p87kK9hqK+l3kt0BIw3eqpKHNnnkS3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cf:c4:63:36:eb:35:e3:3b:55:77:c6:da:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=0f2b4f082cbef4b2b6a6c951ff67e425d7d2ad4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:5e:fb:5b:ad:8c:47:9e:87:0d:d5:37:1f:
55:33:b4:79:41:6c:4d:3d:0e:ba:59:e7:f1:21:2c:
7b:47:8e:3b:6c:2d:30:ed:b4:6d:9a:3c:18:c6:95:
f2:a4:bf:64:9a:76:71:dd:b1:72:5e:4f:1a:2b:95:
7d:38:60:15:aa:dd:1e:30:b9:1b:d4:b3:d9:d9:d9:
cd:ed:8b:f0:35:00:31:9c:62:31:2b:c6:88:c9:cd:
ef:90:31:47:f6:59:b0:af:ee:aa:a5:dc:5f:9b:ad:
6b:10:b6:9e:c8:5b:d5:81:dc:b7:72:a6:b7:ef:46:
33:5c:c9:ea:02:d2:c0:37:b9:a6:83:07:5d:ee:8e:
4c:f3:d9:07:e2:26:5f:be:4f:a5:ea:7e:b5:47:22:
b1:f6:04:60:e6:95:a8:bc:fd:31:08:0a:b0:f7:24:
08:db:07:6e:bf:8a:da:00:00:ab:48:53:de:89:63:
05:c0:00:00:f5:7a:77:43:eb:57:03:45:f0:99:05:
b6:b0:56:9d:92:38:14:ae:27:f9:f8:70:50:df:a5:
74:35:7f:2e:bd:3c:cf:14:73:2c:59:5d:97:46:27:
65:c4:0d:50:e3:69:96:1c:ca:69:59:d1:06:44:c0:
16:9f:f9:ab:ec:d6:49:55:8a:6c:04:70:ef:a1:d4:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:4F:08:2C:BE:F4:B2:B6:A6:C9:51:FF:67:E4:25:D7:D2:AD:4C
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:9a:c0:f9:e0:3a:53:91:2e:79:a6:d8:e6:87:da:f4:03:
df:34:ce:e4:83:2f:e1:e7:2a:8c:f6:ad:de:3a:ea:21:91:ba:
14:45:0d:a5:90:6b:23:0e:c4:d6:00:dd:a2:72:cf:f5:1b:ac:
8d:c4:2b:78:0f:67:02:09:49:04:b7:ed:5c:7b:1e:82:ae:9a:
6a:ce:f0:d2:40:fc:db:37:53:1a:85:ff:fe:8d:66:35:cb:a9:
35:d2:4f:74:78:f9:5b:fa:0c:07:e0:3e:2e:39:99:22:29:f6:
93:96:af:b4:42:f8:4e:18:ae:0d:08:0a:73:0c:08:29:b6:a5:
0c:fd:aa:2a:21:60:cd:4f:d7:0b:f9:78:c1:17:db:72:6f:0c:
96:53:7b:74:85:cf:5c:e9:54:a5:10:3c:c9:0b:56:75:e6:af:
09:35:2f:4e:3d:84:e7:c3:19:2b:ee:16:60:63:3d:2e:fe:a7:
aa:03:13:26:fa:b0:da:06:06:ba:fd:8e:68:23:72:ad:4b:16:
f2:74:30:dd:c0:b9:13:6e:a4:98:a5:06:11:60:c3:2c:18:74:
6c:f5:9b:22:63:31:ff:b8:5a:9c:a6:37:cf:f0:66:4c:52:af:
f7:c1:b0:c0:7c:04:70:79:be:4b:96:5c:bb:e3:de:8a:0e:b0:
ab:6e:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:25 2026 by rpki-client