Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: KWWge+aJ/Q+Vo+99FUhS6hNpbRCzz8Jk8pnUkziuI0c=
Subject key identifier: 75:36:39:45:FA:CC:96:42:F1:E5:FF:D9:AC:56:9F:7C:44:1E:66:81
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 019D262886902054FE9A5B89FC2AE65500A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 0902
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: 3u3vvSLQiRaEEflXytT+mgWuZBgX7a4BqyFB8QzpHRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:86:90:20:54:fe:9a:5b:89:fc:2a:e6:55:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=75363945facc9642f1e5ffd9ac569f7c441e6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:91:1b:d1:f0:6a:1b:6d:42:d5:bb:6f:45:
63:96:54:d1:32:00:f4:fb:1b:f8:bf:c7:b5:c7:e4:
aa:66:0a:ae:9a:ae:17:f0:b0:86:06:cc:ba:f5:a9:
b9:6a:ad:a5:8d:63:51:95:9d:a5:e3:d8:c5:95:c7:
a0:79:3d:74:ad:82:29:26:5a:7d:43:7b:3f:0b:13:
2b:aa:56:37:7d:fa:0c:45:ae:4b:99:41:b0:90:69:
f9:cb:a5:db:46:4b:42:7c:ad:41:07:cd:64:be:ec:
8e:5c:f2:ce:02:a1:68:59:f8:17:5f:31:aa:10:75:
d9:d6:67:dc:06:b2:99:20:c7:a8:22:b6:a7:3e:15:
35:f5:d4:98:3a:32:d0:f4:49:24:07:5b:91:7c:98:
1a:11:53:e6:b4:52:21:c9:e7:cf:48:c5:42:97:5f:
dc:bc:ba:23:a9:51:e3:92:65:67:f5:41:d7:e6:e0:
39:08:c1:80:9e:0b:69:5e:55:1d:4f:fb:bb:ba:09:
25:34:c2:1c:3a:52:50:a3:d8:52:02:62:a0:54:c0:
eb:e6:00:35:0e:73:fb:4f:1b:0d:cc:f2:29:46:f2:
b0:4e:1a:30:e7:28:dd:ab:e0:c6:d2:4e:2f:e2:1c:
7d:a0:54:49:06:0f:a1:81:8e:3b:7d:81:be:74:da:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:39:45:FA:CC:96:42:F1:E5:FF:D9:AC:56:9F:7C:44:1E:66:81
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:66:3c:10:62:63:93:a8:42:ca:30:fa:e8:f4:7f:a4:79:e9:
8b:21:d6:4a:b9:bb:64:3e:4e:ad:4e:d5:79:5b:e1:d2:82:ef:
7f:0b:90:47:c8:55:95:9e:99:df:d3:dc:54:5a:53:1c:33:cf:
49:2d:82:07:e7:0e:90:26:02:ef:dc:22:6c:36:ed:54:36:9d:
50:4d:36:3a:57:8d:59:c1:39:aa:2b:cd:8e:83:a4:b6:fc:91:
ac:af:24:c5:a3:13:f2:dc:0b:f9:d9:ce:90:eb:6d:d3:bf:1e:
d3:f6:28:7e:be:7b:2f:dd:fd:de:37:50:98:d7:12:74:36:5f:
b5:12:99:92:4e:d8:77:9b:c0:17:5b:76:e0:fd:64:96:11:a4:
d9:c5:53:9d:8b:34:37:86:f1:20:f3:6c:d5:d3:42:00:9f:7a:
25:df:db:44:49:bc:b4:65:2c:eb:5d:8b:fe:55:bf:20:7e:3e:
8c:7d:06:1b:df:78:5d:ed:74:03:0d:d0:98:a4:25:0f:c4:eb:
de:ca:c1:ed:ae:d6:c7:e9:00:50:15:4c:76:59:b7:8c:13:06:
3e:ce:4e:39:b3:eb:a4:e1:9e:d5:41:26:94:ce:d6:90:be:dc:
b5:29:38:4f:2e:7f:2c:ab:a4:d1:98:73:ca:b4:8e:f1:22:b4:
4c:20:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:13 2026 by rpki-client