Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: FvBpsgryJGLqwNOplfislRb7K9/TfrRugmsU894XLrU=
Subject key identifier: BD:F2:67:9D:52:09:E4:B3:E9:EA:58:59:BF:38:1D:C8:2B:33:B7:97
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019D2A72699AC1F11D50D3DA229235A56479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 14:00:34 +0000
Manifest this update: Thu 26 Mar 2026 14:00:34 +0000
Manifest next update: Fri 27 Mar 2026 14:00:34 +0000
Files and hashes: 1: X3ZQenpvE8l1hGo8jarjWIZlEHg.roa (hash: z2dHWQocjAT7eQBvB40EN/2l3Ks2v71LcjzkY2camiw=)
2: ko8WrvZomBgcI3Hqp37PqXOWiSI.roa (hash: 8LPZPPU2MH1K+TEuOxL4YKzpLJKTkh0MI1eoRloRcik=)
3: p5uygMovU567H0ml5c8C_ZDtiZY.roa (hash: PWQLRe33NpLQ7v5TkzLMs7Rxm+rn1zWzKAt3r3JdpTc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: 7AamTDaChr+pzLKvaOsmvty+Dz+Erwq41pBe8TYuwXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:69:9a:c1:f1:1d:50:d3:da:22:92:35:a5:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Mar 26 14:00:34 2026 GMT
Not After : Mar 27 14:00:34 2026 GMT
Subject: CN=bdf2679d5209e4b3e9ea5859bf381dc82b33b797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:e4:4c:fe:e6:a2:c5:e0:d7:45:a3:f0:2c:
20:a4:17:41:02:47:22:7d:6a:c9:47:c1:c3:15:34:
e8:b0:8f:f2:23:c8:8e:2a:57:16:39:1e:4c:ca:f9:
ad:69:c1:c3:75:e6:34:85:35:c7:47:91:9f:58:c6:
75:10:eb:3e:a6:67:18:03:4b:d3:87:e7:e2:35:6c:
26:1b:40:2b:e3:7a:41:0c:e3:41:c9:0c:7b:59:49:
cb:c0:79:5a:38:be:05:7d:7f:d5:ae:cc:e6:d8:0c:
74:0f:1b:73:56:f9:14:86:ef:85:93:eb:28:14:b1:
50:42:24:87:99:c2:14:92:2f:d6:c6:f6:ac:8a:b2:
20:d7:6e:20:44:b3:6f:a4:d1:6a:ad:fe:c7:cf:05:
87:a1:8b:1a:ec:4e:1e:4b:a5:4b:3e:94:1a:8b:aa:
75:c1:80:29:c1:34:17:4a:22:a9:b0:4a:87:35:91:
90:83:b2:30:b0:69:9a:c1:01:7b:35:90:ff:33:8d:
60:af:8f:3e:7f:2e:db:d7:e7:0e:75:b6:7f:eb:ff:
32:7c:7f:7a:c6:c3:b3:af:8e:5f:33:ac:b6:41:e2:
77:1a:3c:36:b2:c4:4c:c8:5f:c5:78:20:9b:89:86:
23:ef:41:83:ac:0f:12:e5:81:a5:45:c6:37:21:99:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F2:67:9D:52:09:E4:B3:E9:EA:58:59:BF:38:1D:C8:2B:33:B7:97
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c3:d2:23:94:07:5c:5a:a0:db:e1:70:c0:8a:35:ed:bd:ff:
b7:cd:32:9f:ec:d7:9e:47:d2:e3:a7:4e:fd:bb:da:c6:ff:43:
84:76:81:e0:84:4f:36:af:a0:83:2a:06:32:9d:15:4e:ce:1e:
dd:62:55:ce:d7:8b:96:ae:7d:17:44:5e:45:7b:11:5d:03:6a:
e4:42:94:88:8b:25:ec:2e:0c:e0:76:9a:d0:d7:1f:6b:44:f5:
f6:88:de:84:95:cf:87:4f:cf:17:8e:41:9b:9b:ef:01:b1:31:
7f:b5:20:4c:ec:78:7b:77:19:a2:cc:3e:d6:04:2b:a6:16:27:
89:69:3b:75:70:65:d4:bc:06:24:06:70:fd:3d:ae:34:b5:56:
21:af:71:19:a2:b0:4a:de:2e:38:e8:2a:7b:d8:12:ed:da:6a:
db:54:2a:70:b7:34:77:60:b3:01:f6:ac:2e:12:fc:47:fd:24:
a5:dd:ac:72:85:5a:44:2b:b8:2b:7b:52:e2:dd:27:b9:7d:43:
a2:f0:2b:c0:91:a9:9c:33:bf:14:c4:80:7f:86:fe:a8:1e:78:
13:b1:23:b1:e1:e3:25:04:e5:a7:c5:6e:b6:29:94:4e:4b:f4:
6f:28:47:4b:82:b1:37:05:14:a6:d1:fc:59:9a:f2:de:75:45:
79:0b:a2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:21 2026 by rpki-client