Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: vSFpPvEbyYWB9zKR49sTVAOGEtz9ChFuaU0Eo6x2YJU=
Subject key identifier: A5:3F:F2:24:DB:1A:80:9F:4D:54:57:6A:73:35:D0:B9:12:9A:34:7B
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019D254CBA449D0D7452C2BC4D9279EB527C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0D78
Signing time: Wed 25 Mar 2026 14:01:18 +0000
Manifest this update: Wed 25 Mar 2026 14:01:18 +0000
Manifest next update: Thu 26 Mar 2026 14:01:18 +0000
Files and hashes: 1: ED9fPzOepDgkuJo-elslIFPUuoE.roa (hash: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE=)
2: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (hash: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s=)
3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: yEZTmx8lVqkaRBha77GrnKf14IsMn02uFxssBruhvR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ba:44:9d:0d:74:52:c2:bc:4d:92:79:eb:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Mar 25 14:01:18 2026 GMT
Not After : Mar 26 14:01:18 2026 GMT
Subject: CN=a53ff224db1a809f4d54576a7335d0b9129a347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:44:7e:80:2b:da:f3:81:7f:6a:35:32:7b:
47:a1:fa:16:31:76:dc:bd:db:4b:58:99:be:39:c2:
64:b3:98:b5:ac:c5:84:27:41:f5:7c:2b:10:f9:e5:
74:b5:83:dd:ad:bd:a2:a5:73:b8:1c:b7:0d:17:9c:
78:5c:59:bc:79:0f:7e:23:96:87:c8:43:48:22:b5:
ad:ce:6f:fe:33:89:fb:1d:2e:24:f0:e9:75:d2:c6:
8f:c7:ba:30:b7:84:71:fb:14:77:a0:d5:ff:f5:af:
f2:26:d0:89:89:a5:92:29:7e:28:54:b1:2f:dc:6a:
31:8b:85:e5:a4:14:18:fe:49:36:4b:69:4f:14:d4:
de:18:ed:4f:19:d0:f9:25:dd:cb:cd:73:43:9a:74:
0f:44:97:ad:02:1a:7d:7d:76:81:9f:c7:7d:cb:b1:
2e:04:10:bc:e8:7f:5a:ed:e0:d0:a4:aa:fe:2a:ba:
88:d0:84:36:dc:0e:66:84:60:6c:58:49:4f:54:ba:
b4:34:49:7c:51:d8:72:52:83:cb:e0:f9:28:bd:ff:
3a:a5:b1:8a:18:d2:b0:72:7a:58:65:e5:fd:62:92:
cb:9d:58:4d:e6:50:44:cf:f6:a4:d1:df:9b:34:56:
fd:48:f2:ec:cd:f3:23:ba:14:51:7b:f0:06:bf:89:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:F2:24:DB:1A:80:9F:4D:54:57:6A:73:35:D0:B9:12:9A:34:7B
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:ed:72:d7:45:74:5a:3b:f5:9c:2e:12:ae:0d:0a:57:8a:
5d:ef:a5:a9:3f:1d:d5:e6:a5:e1:65:b4:ad:37:14:10:08:2c:
6a:10:31:71:49:49:a6:1c:11:e8:e5:d8:2e:da:bd:d1:43:ea:
06:a5:b0:48:cb:3b:f2:ed:36:ad:92:c5:d2:d5:95:d3:53:27:
76:c4:57:6d:18:f4:1b:3e:0b:a7:d2:6b:e6:d8:a6:5e:4f:f9:
12:43:8e:d3:54:56:3a:08:40:c3:84:ff:1b:41:bb:ce:0d:5d:
78:1c:83:04:cf:5b:87:29:11:57:85:de:26:d9:ba:de:d4:66:
a5:a7:93:1d:c2:a6:e8:13:57:c4:f5:1d:7a:2b:2f:a5:46:76:
12:8c:f0:22:c2:2d:56:b2:f3:e2:51:12:91:bb:e6:2e:af:e5:
c3:b6:34:dd:8c:1e:38:a8:a1:cb:e0:de:f8:ea:28:7e:b4:92:
7e:cf:68:cf:c4:d4:83:8a:73:b2:27:6b:19:e2:34:7a:74:99:
97:0f:66:16:99:70:c3:b2:bd:bd:6e:e8:26:66:19:27:2a:d8:
62:2a:d8:db:74:04:8d:e0:8e:fa:43:01:44:1e:ff:9f:31:9e:
4d:f3:1d:c4:03:6d:86:59:b8:73:bc:fd:8c:e6:41:0e:38:d6:
e9:03:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:49 2026 by rpki-client