Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
File: y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft (raw, json)
Hash identifier: e9XVx0Z6zE8biwsHsByUgV38RB21hbipOmwqLToiJ+s=
Subject key identifier: 1F:17:FB:BE:70:F9:55:65:72:81:C0:D3:9B:00:BE:9C:63:65:B6:23
Authority key identifier: CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3
Certificate issuer: /CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3
Certificate serial: 019D2703E35A275BB9375ED2C22C4C8BD283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: 1-vhU_JsxCJpqpWHaHS6_hs-zIJ4.roa (hash: Hq+dP+btQbNrYBQSTsx2CRpU6VIf7Y+oZgutJKi72PA=)
2: y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl (hash: 3nFJQf9KTI22qCwLBNbxMizlNS5NNO+ctQKpmPDoOYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e3:5a:27:5b:b9:37:5e:d2:c2:2c:4c:8b:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7aebc4e85b8cb9824ae487aa1444eef43826a3
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=1f17fbbe70f955657281c0d39b00be9c6365b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:48:4c:42:3b:64:24:3b:8f:88:c4:45:fd:
18:d1:fe:c8:66:61:d6:74:84:f4:2b:ef:40:8c:c9:
d1:b8:f3:20:17:7e:df:3a:a8:3a:67:47:90:62:bc:
38:28:68:9f:d3:e2:af:50:0b:e2:7d:a7:a4:89:46:
7b:f9:40:90:5f:d9:18:1e:22:eb:f1:0e:ba:5a:d8:
c8:4d:fd:e4:5d:61:74:05:a3:70:86:5c:26:e0:1e:
d2:f1:ef:c6:e3:7c:5e:d7:de:0a:d6:3f:26:58:9d:
7b:d6:37:7c:fb:bc:13:97:75:60:49:ab:16:6d:5d:
43:00:7d:7f:cc:e5:c3:43:a4:08:36:2b:0d:56:0e:
5f:af:da:be:8d:2d:e4:5b:c2:85:cd:b3:91:b6:44:
50:bc:5f:1f:e4:2e:13:c9:b6:69:9e:6f:71:84:34:
12:ff:32:8f:d8:56:b2:04:bb:84:86:b7:f4:23:fe:
5b:33:d8:a4:ec:08:43:be:d6:8f:95:f2:5b:5c:5a:
e4:7f:ec:0a:ec:47:ac:34:e2:99:98:8b:b6:71:69:
2d:8b:50:90:a1:f9:13:31:6e:e3:fd:4b:fd:b3:c8:
71:c3:28:88:23:29:55:5e:6b:c7:65:40:26:79:57:
4b:b9:c0:b4:14:1c:78:7f:74:d2:e8:a1:6e:4c:67:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:FB:BE:70:F9:55:65:72:81:C0:D3:9B:00:BE:9C:63:65:B6:23
X509v3 Authority Key Identifier:
keyid:CB:7A:EB:C4:E8:5B:8C:B9:82:4A:E4:87:AA:14:44:EE:F4:38:26:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/25b79a-4c62-4418-b2cb-7773fde3fa7a/1/y3rrxOhbjLmCSuSHqhRE7vQ4JqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e1:c5:19:eb:12:97:6e:0c:dd:ad:a6:39:a6:4a:8c:21:08:
dc:07:f4:f6:41:dc:df:66:88:df:8d:b1:57:34:4b:af:3f:e6:
43:0f:bf:be:db:b9:9a:3f:e4:4f:6a:2a:72:ac:fc:36:f5:bf:
45:38:49:2b:9e:2d:aa:ad:89:95:3b:e6:36:d6:b5:2b:76:17:
8a:02:10:7a:98:9d:d1:d5:7a:28:cf:a5:df:e3:72:65:e6:29:
78:19:65:58:66:bb:a1:03:4d:2d:9a:6f:d1:bf:03:ce:53:41:
f7:ce:3f:ed:87:ff:b3:c7:0f:90:dd:5a:a9:3c:41:30:63:1d:
15:13:d4:8b:07:78:e5:bc:28:8b:e1:27:b7:2b:11:2c:0e:af:
04:f0:e4:3d:47:a4:e4:11:2a:10:f9:f4:d2:07:bb:21:6d:b8:
41:5d:1b:73:3b:5a:7c:48:81:6b:51:55:fb:55:cd:71:13:95:
a5:87:b3:ea:62:0e:c1:76:03:b0:f9:7b:1c:ab:c7:9a:1c:2d:
78:aa:77:f0:86:0c:bd:ed:58:16:d9:e9:7a:8e:11:65:4e:86:
1e:ae:06:cd:4a:e9:8f:99:a7:59:c7:e1:ec:4e:1c:b9:69:25:
71:7b:67:fe:20:3b:22:8f:bf:60:43:b0:30:7a:e3:c9:34:bd:
0c:89:db:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+NaJ1u5N17SwixMi9KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2FlYmM0ZTg1YjhjYjk4MjRhZTQ4N2FhMTQ0NGVlZjQz
ODI2YTMwHhcNMjYwMzI1MjIwMDU5WhcNMjYwMzI2MjIwMDU5WjAzMTEwLwYDVQQD
EygxZjE3ZmJiZTcwZjk1NTY1NzI4MWMwZDM5YjAwYmU5YzYzNjViNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OJITEI7ZCQ7j4jERf0Y0f7IZmHW
dIT0K+9AjMnRuPMgF37fOqg6Z0eQYrw4KGif0+KvUAvifaekiUZ7+UCQX9kYHiLr
8Q66WtjITf3kXWF0BaNwhlwm4B7S8e/G43xe194K1j8mWJ171jd8+7wTl3VgSasW
bV1DAH1/zOXDQ6QINisNVg5fr9q+jS3kW8KFzbORtkRQvF8f5C4TybZpnm9xhDQS
/zKP2FayBLuEhrf0I/5bM9ik7AhDvtaPlfJbXFrkf+wK7EesNOKZmIu2cWkti1CQ
ofkTMW7j/Uv9s8hxwyiIIylVXmvHZUAmeVdLucC0FBx4f3TS6KFuTGf4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8X+75w+VVlcoHA05sAvpxjZbYjMB8GA1UdIwQY
MBaAFMt668ToW4y5gkrkh6oURO70OCajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNWI3OWEtNGM2Mi00NDE4LWIyY2It
Nzc3M2ZkZTNmYTdhLzEveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNWI3OWEtNGM2Mi00NDE4LWIyY2ItNzc3M2ZkZTNmYTdh
LzEveTNycnhPaGJqTG1DU3VTSHFoUkU3dlE0SnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOHFGesS
l24M3a2mOaZKjCEI3Af09kHc32aI342xVzRLrz/mQw+/vtu5mj/kT2oqcqz8NvW/
RThJK54tqq2JlTvmNta1K3YXigIQepid0dV6KM+l3+NyZeYpeBllWGa7oQNNLZpv
0b8DzlNB984/7Yf/s8cPkN1aqTxBMGMdFRPUiwd45bwoi+EntysRLA6vBPDkPUek
5BEqEPn00ge7IW24QV0bcztafEiBa1FV+1XNcROVpYez6mIOwXYDsPl7HKvHmhwt
eKp38IYMve1YFtnpeo4RZU6GHq4GzUrpj5mnWcfh7E4cuWklcXtn/iA7Io+/YEOw
MHrjyTS9DInbFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:56 2026 by rpki-client