
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: NsAow204yRtXWwxe/HRmThl8wAXxELecllssjloq25I=
Subject key identifier: 5B:BA:FB:EC:A2:1E:DF:BF:A2:5A:F1:B5:1A:A7:AD:28:B1:60:95:18
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019D270461A32196BD96606AB5C0D57D1C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 11F0
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: 0Xm+Q1Q26G97gkjKnOmyxPMrMy1GoQLKXqM5cgEX6n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:61:a3:21:96:bd:96:60:6a:b5:c0:d5:7d:1c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=5bbafbeca21edfbfa25af1b51aa7ad28b1609518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:80:3b:fd:65:4c:99:4a:cc:51:bc:52:86:
f2:a0:b1:cb:c4:dd:71:3f:df:2b:3a:89:be:c6:ad:
e7:2e:ce:79:a1:96:fa:48:31:df:3e:fe:8e:b2:ad:
d5:67:56:38:08:8a:9e:08:ae:6a:d0:6b:0a:ab:e4:
01:b0:88:c8:cf:95:42:2c:d2:d4:0c:02:f3:e6:01:
23:48:7d:2e:6a:a5:0a:38:ae:28:19:bb:68:06:7a:
fd:6c:6e:d4:b8:59:5a:fc:34:44:60:cb:30:39:f3:
17:03:4c:5c:af:ac:57:6e:9c:ae:96:a1:4e:19:95:
1e:a4:c1:2c:36:9b:4e:32:59:42:a8:75:3f:f8:c4:
61:8f:51:ad:50:f5:83:67:0a:8f:52:98:57:b4:be:
16:79:f1:9c:a6:e6:a3:18:9f:fc:c2:4a:b9:df:f1:
89:b8:7f:ee:e4:f7:df:96:dc:4c:89:42:a8:e2:b6:
c4:d6:da:6e:50:03:b9:55:79:a1:9d:7c:35:7d:c4:
84:7c:cb:7a:2c:57:89:35:1d:0e:b4:5d:02:b3:9d:
ff:c3:08:cc:94:79:23:32:db:fb:62:6f:6f:61:5c:
67:cb:ee:c7:a1:2d:42:c1:1a:44:1f:0b:48:92:51:
2e:03:51:28:05:47:34:cc:1f:1e:90:2b:2f:61:5b:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:FB:EC:A2:1E:DF:BF:A2:5A:F1:B5:1A:A7:AD:28:B1:60:95:18
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:d9:bf:ed:37:8d:c4:46:88:2d:b2:02:4d:cc:4d:b0:65:9d:
54:79:d1:0b:35:5e:a6:bc:10:5f:a3:12:3b:29:77:71:05:24:
33:29:34:1d:81:5e:c1:ba:d4:24:3e:46:a0:2b:f1:8f:28:6e:
37:0e:c6:ae:51:09:5a:ed:aa:41:4c:4d:d5:3f:b3:04:2d:69:
01:b4:7c:3f:aa:3e:15:56:55:60:78:37:af:73:84:b9:22:b3:
ab:a1:17:d8:6f:dd:3f:a4:f3:ab:e9:47:ce:f4:8d:d2:b0:46:
89:17:02:f7:37:eb:f4:07:67:1b:d4:ea:1e:34:c5:ae:f4:0d:
dd:8e:c6:13:78:a7:5c:46:9d:e8:67:76:4d:17:6d:10:27:e9:
fe:e6:6a:84:e8:41:d9:9d:1d:1f:b5:b2:11:f7:39:f5:f2:f5:
7b:86:ca:08:8e:d0:2c:ff:7a:3f:e4:3b:f9:cf:6a:e1:f2:d3:
5f:a0:49:88:14:64:16:17:df:e8:56:24:e8:49:41:0c:02:a8:
31:ad:81:26:1a:c9:7b:14:ec:83:ed:9e:98:1b:74:ec:85:50:
7e:67:f3:0b:9e:c1:4f:fe:d1:6b:63:80:8e:b3:19:a9:fb:2a:
3c:56:08:19:69:07:ce:55:c3:4f:eb:e2:66:29:68:43:10:74:
a8:33:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:00 2026 by rpki-client