Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: oWa4vxfHDH6vmpSGrdSg3aO7YOFn++7RsvVBfRZJSLs=
Subject key identifier: B0:08:87:32:67:E6:D1:17:53:35:CC:D4:C7:F6:B5:13:BE:5F:D5:1A
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019D24DF099B899D617A11B4855CA6E43613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 97
Signing time: Wed 25 Mar 2026 12:01:29 +0000
Manifest this update: Wed 25 Mar 2026 12:01:29 +0000
Manifest next update: Thu 26 Mar 2026 12:01:29 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: MqiVyt/eBDeYW79xiCvRboSXTMTIKZUcWucWC7W6kVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:09:9b:89:9d:61:7a:11:b4:85:5c:a6:e4:36:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Mar 25 12:01:29 2026 GMT
Not After : Mar 26 12:01:29 2026 GMT
Subject: CN=b008873267e6d1175335ccd4c7f6b513be5fd51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:06:fb:f5:04:78:5b:44:3a:28:5b:e2:90:
a4:f9:ea:eb:0b:73:3f:e9:b8:15:a8:64:2c:0d:c9:
f4:1d:47:72:61:35:02:e5:b1:8a:3f:28:43:25:93:
e8:5f:77:e6:31:31:57:57:a0:ce:59:43:c0:58:fc:
1b:0c:f7:51:66:8e:70:2a:99:b2:74:44:49:48:20:
00:91:f2:2c:14:c7:49:5e:89:8b:57:18:8a:a9:42:
64:47:a3:b5:48:90:b2:28:de:f6:be:08:da:2d:1a:
98:3c:c5:d5:67:ad:b5:a4:7b:3f:ff:60:8e:07:48:
6f:5f:46:1c:87:11:27:ca:2a:2d:ad:bb:e4:eb:36:
51:76:19:ad:e9:d1:09:30:ba:3a:fd:cb:da:b4:29:
60:46:45:85:a3:37:5a:7e:eb:d8:b0:47:ae:5e:4a:
e4:dd:30:10:61:01:7b:f7:b1:07:51:51:c5:1f:c8:
49:10:64:b0:5c:b5:5b:5b:24:fa:78:f7:a9:45:f0:
c9:a5:8e:50:3e:cc:34:22:24:c4:87:b8:d3:8f:1f:
c5:77:82:09:2e:57:1e:e7:9a:9f:ef:b0:bc:20:18:
3b:60:04:b0:2d:c5:b7:de:ab:dd:ae:7c:25:85:0a:
4b:ec:79:d5:5a:81:71:50:7d:51:4c:fd:dc:a3:7a:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:08:87:32:67:E6:D1:17:53:35:CC:D4:C7:F6:B5:13:BE:5F:D5:1A
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:aa:66:a6:59:ab:69:ef:8a:d0:b7:43:bc:5c:69:be:b1:
08:a0:21:d0:30:62:76:a3:6c:99:4c:f0:2f:45:31:33:33:0d:
06:d8:b2:90:95:e0:02:ef:4e:2b:4a:f0:89:c2:bc:de:2d:c6:
93:62:5c:23:cc:34:9a:ba:d7:73:db:08:df:d7:02:66:d3:6d:
a7:6a:b7:e3:13:ee:93:cb:51:0c:da:06:b0:51:d3:7f:39:25:
3e:a9:7a:94:6e:83:96:62:29:b9:5a:40:ab:0d:85:a2:cd:9f:
79:89:bc:ed:78:13:57:62:c3:45:19:fe:45:fc:ab:a4:eb:3d:
99:5d:6b:ff:9c:22:00:c1:df:f4:1e:60:df:29:7b:28:cc:5d:
ff:1d:77:0f:c9:66:e6:f1:6d:cd:70:54:2b:c9:9c:87:a3:eb:
98:e3:e3:33:dc:b0:ca:90:1c:47:3c:e1:68:a9:08:1b:a5:f2:
24:f6:fd:95:0d:7f:de:8a:7a:2d:30:cc:c3:48:34:10:30:5a:
d4:07:50:6c:55:0d:b3:d6:8e:56:f2:97:3b:b9:0e:21:6d:e7:
d5:74:d5:b6:03:bf:83:20:55:60:f3:57:d0:98:82:04:70:4f:
92:3f:0f:fe:3d:1e:f2:30:99:a9:b2:08:3a:59:fd:b4:68:7b:
7f:66:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:45 2026 by rpki-client