Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: XFIk5ZTPu506Kd7qo6faGwfS+PFzvrlIHXg1e7+HmmA=
Subject key identifier: 59:C6:39:46:D4:26:8A:02:BB:04:D9:A0:8F:A3:3A:C3:A1:26:02:C2
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019D2816C51ED92F60AA358F680AC4F12A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 09BF
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: XIKhOwSgknzHmDabKMH1JkoVOKhwqWih79wJHisLYXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c5:1e:d9:2f:60:aa:35:8f:68:0a:c4:f1:2a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=59c63946d4268a02bb04d9a08fa33ac3a12602c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:e7:b6:26:ad:a5:8c:6b:a1:c9:94:7e:8e:
6c:2e:bf:5a:c1:54:ea:d6:5f:b6:80:d6:c4:cf:bc:
05:5c:9b:ac:cc:5f:69:eb:c8:10:1e:9c:c9:64:89:
e4:c4:0b:cb:4b:b2:b3:57:67:8f:60:8b:b7:79:2e:
dd:f3:0c:23:03:8e:74:01:41:68:fa:bf:e7:19:84:
1b:bd:88:51:d4:f3:1c:0a:c5:08:f9:63:cc:7e:a8:
0c:8c:7c:d9:21:66:23:91:4d:31:6f:e5:5b:4c:d9:
09:f9:87:06:dc:fe:7a:1e:c8:aa:92:37:1a:7b:cc:
07:93:1b:90:1b:64:b6:5e:97:9f:94:52:c4:32:4e:
74:4b:98:e4:8e:c4:e0:3d:fa:d5:29:f9:f1:9c:25:
e1:4f:bf:37:43:09:6f:4f:66:19:a3:28:0e:53:37:
fe:3e:67:bb:8d:fa:3e:76:44:aa:35:da:a0:a2:ff:
79:7d:f1:7a:1a:e6:d8:87:40:87:c4:e0:f2:9a:39:
af:ba:9a:2e:c6:82:41:31:db:59:b8:5a:79:0c:9e:
1b:d9:52:37:76:1c:ea:90:05:4a:2f:f4:7b:17:bf:
b0:ba:23:fc:3c:3a:ec:22:45:c8:af:e1:75:c4:b5:
83:8b:36:06:98:a1:31:10:de:93:62:a1:55:fd:4b:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:39:46:D4:26:8A:02:BB:04:D9:A0:8F:A3:3A:C3:A1:26:02:C2
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ad:5d:91:a4:c6:40:29:c4:57:04:51:9b:de:cf:73:60:4f:
19:fa:8f:0e:3e:ca:52:c2:bd:49:a6:cb:0b:f7:69:9f:04:5d:
e5:a0:2f:a3:c6:78:ac:a8:d4:91:5b:24:9d:51:52:7d:e7:54:
6b:d5:bc:c7:19:b3:6a:6b:48:70:4d:b8:9e:6d:6d:b1:f2:c4:
57:56:d6:0c:6f:da:06:2e:31:56:c4:89:66:ec:59:87:9a:ff:
fa:e7:d0:1e:f7:e2:a5:cc:96:5e:ba:b5:94:02:8c:23:b2:36:
0a:c5:eb:20:a0:16:e1:47:e1:93:d4:20:ad:05:6c:69:b5:e4:
de:5c:f3:29:40:e9:27:c8:1d:8f:ec:d1:7d:c3:60:f3:14:d2:
8c:a9:52:98:22:58:ac:d1:7f:33:82:f5:49:9b:96:27:1a:44:
35:90:09:0f:77:96:1f:7b:35:ea:e5:19:b0:e1:d8:b7:46:b0:
27:4c:25:66:67:50:c5:c1:c8:10:d3:57:a0:82:ec:fc:0b:4a:
32:50:15:0e:46:14:64:22:8d:29:c9:c6:65:23:66:0d:b4:28:
ae:e2:41:da:9f:86:c1:8b:48:4d:a0:e6:6b:6f:58:64:91:3d:
a1:9a:d1:9c:00:b6:73:ad:36:3d:3f:e9:4a:3d:71:fd:76:08:
7e:33:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:21 2026 by rpki-client