Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: WokRSaexX0FSTt4p3nXhZueB+c9AeJ49fywhbkEkQ3U=
Subject key identifier: 17:2B:D2:52:59:0D:BA:02:77:E8:45:5C:05:B4:48:BE:8B:AD:48:C4
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019D262820D832C3674B8B4254E872C1FD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 02FB
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: HH2Ibs5r1+bLUfeBcHACOcU0ehKNz/aMcX1Gw3jkBLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:20:d8:32:c3:67:4b:8b:42:54:e8:72:c1:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=172bd252590dba0277e8455c05b448be8bad48c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:a3:24:6b:f5:39:45:e7:d3:72:e8:b6:d6:
9a:ca:a8:75:e1:45:bd:5b:dc:59:b9:8a:7d:e4:e6:
52:e6:3d:34:27:eb:41:72:b8:ca:26:0b:de:a4:09:
35:f1:97:eb:42:8c:21:7b:5a:5d:74:aa:97:42:f6:
3d:b8:37:68:59:7d:d4:18:99:e3:d9:c4:37:f1:cc:
b1:2b:63:fd:a6:46:34:8b:d1:63:6c:74:6e:7d:c4:
5f:11:e6:50:5a:24:67:bf:5a:29:83:e3:e0:cd:65:
2a:5a:50:8b:f2:22:be:4d:54:72:5c:a6:22:5c:09:
39:4c:80:9c:5d:f7:be:2c:5e:87:00:be:13:6c:8d:
9a:97:7f:88:a9:66:57:68:6b:04:8a:99:77:0d:c4:
19:cf:6c:42:98:11:32:b4:db:ef:d3:0a:de:51:3e:
ba:7a:76:e3:5b:b6:42:27:f4:61:38:a4:f9:f8:57:
e0:97:ce:c8:14:d8:2b:08:78:b5:23:0b:3a:f9:bb:
b5:40:0d:ba:bd:18:4a:1d:80:01:ea:d0:68:29:3c:
e8:18:bf:a2:4b:33:67:a2:5a:30:b1:1e:5b:4f:46:
c2:16:f1:c9:81:b4:7e:5e:9a:be:9a:9c:c5:61:f7:
f7:be:6e:df:32:cc:83:0f:42:36:3c:e4:e5:59:c9:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2B:D2:52:59:0D:BA:02:77:E8:45:5C:05:B4:48:BE:8B:AD:48:C4
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ac:c5:63:b0:d5:cd:ae:5b:41:98:d9:8f:8a:b3:7e:b9:d4:
1e:6c:f7:93:df:09:bc:06:04:e3:2c:60:c8:d9:ff:db:b8:77:
3d:aa:73:1f:22:17:66:14:76:00:ae:cb:a7:de:37:7d:99:a2:
12:8f:94:eb:aa:05:b9:25:bd:e5:ba:99:23:4a:0e:aa:08:05:
cb:da:90:c7:9b:51:64:28:da:dd:3c:d2:13:5f:af:7a:22:97:
f7:05:39:88:8d:49:dc:9c:7a:27:ab:39:cb:5e:9a:6c:2b:90:
ca:32:0e:10:1b:8a:d1:f3:f2:82:73:3b:76:39:18:84:fe:6c:
0d:0a:bb:66:5a:1b:c4:f6:05:07:80:79:9e:13:59:e1:10:56:
3b:a8:69:67:c5:5b:0a:05:03:c9:13:0c:69:65:9b:41:13:14:
06:79:d1:8b:88:d5:81:aa:76:07:81:9a:93:3f:47:ed:7d:53:
2f:4d:11:ce:8e:28:e7:5b:11:16:57:01:6d:43:33:ce:f9:f2:
3c:3a:2b:51:c1:1f:bb:1b:cc:fa:f5:9e:4f:f2:33:28:7b:40:
5c:41:ab:e5:95:96:36:ab:80:cb:e2:c4:dd:3d:c6:f1:3c:70:
2d:3f:38:ca:ba:71:1d:26:5a:b5:fd:f9:7d:cb:6b:fb:55:34:
1a:47:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:28 2026 by rpki-client