Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: NaOuXWZ1M/f/JdrQtRYGwZfLQucSXX55zKF1kPHA5ts=
Subject key identifier: 89:52:66:D8:27:D1:03:FA:DD:57:9C:69:3B:AA:8B:F7:02:5A:19:AE
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019D265FA247F5105160234F8E222E908143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 07F7
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: sjtpbbeMrP///yKk0wKVa3rWqRz55SWOSNlY+vIO6Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a2:47:f5:10:51:60:23:4f:8e:22:2e:90:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=895266d827d103fadd579c693baa8bf7025a19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:29:51:31:00:21:22:44:8c:d1:2d:07:fc:
26:16:4c:b7:f7:bc:71:76:2e:c8:15:a9:d3:a9:c8:
3a:57:5e:49:0b:40:81:d7:e9:85:ad:4d:4d:3d:54:
f9:06:9e:f6:06:f2:30:af:46:99:e0:23:ed:bc:91:
9d:cc:20:b7:37:cc:f2:2a:c8:95:8e:50:f4:84:94:
e1:6a:24:96:e2:08:3b:e1:be:e9:e5:f3:e0:a5:15:
fb:96:3f:0a:75:fe:08:27:53:a8:f5:89:11:86:c9:
55:c8:fc:4f:12:72:0c:48:26:86:71:f0:43:26:64:
90:35:de:20:63:07:8b:01:8e:59:09:01:7d:ab:b8:
d1:c6:3b:ad:0c:45:e8:0a:67:9d:61:54:29:84:a4:
82:45:ff:a7:27:ca:8c:1b:04:4e:b3:c2:b9:c4:e7:
90:77:e4:5c:dd:ed:9a:c5:a6:25:fb:c8:8b:c9:32:
34:60:50:7f:20:d7:9f:5d:34:e3:54:14:1a:4d:81:
1f:c0:91:33:d2:ea:e0:29:7d:53:53:98:25:fd:ee:
ec:03:99:12:28:b8:c2:de:0f:1d:c7:9f:4c:c9:93:
29:11:51:46:09:2b:ed:b3:b6:e0:d4:f2:d1:fd:ff:
dc:91:2e:57:08:5b:e5:66:0b:92:20:64:18:0c:86:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:66:D8:27:D1:03:FA:DD:57:9C:69:3B:AA:8B:F7:02:5A:19:AE
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3d:1c:51:ce:44:86:ca:5f:e6:f8:83:23:d7:63:15:93:c7:
c9:d0:32:52:b8:66:84:4d:cd:e9:0e:cf:42:31:ee:22:18:f4:
e7:e3:c0:a4:31:39:b2:72:3e:e4:39:ce:8f:f1:83:37:70:c0:
1b:f0:46:9a:bb:8b:21:e5:08:ff:c3:9f:c8:6f:20:b7:13:9a:
33:fe:8a:2e:41:6b:60:c6:6e:44:dd:90:8d:55:1c:36:71:8d:
9e:09:2c:f3:e9:b7:4c:75:5a:7b:38:c1:5a:5f:82:76:b3:38:
cf:a9:04:a3:a6:a3:e3:33:8c:cd:89:32:69:8b:5c:4f:14:70:
c6:6e:96:51:14:a2:12:a9:07:a9:77:b6:b7:77:cd:db:18:2f:
42:21:b2:88:77:4f:97:c0:85:3b:2e:b5:7a:77:ef:a4:74:f3:
bd:9e:b4:a7:89:3d:cd:d1:52:d7:f7:42:8c:60:d5:69:ad:32:
14:f0:59:9c:83:b8:85:41:64:8a:f3:06:75:39:93:1c:ed:92:
cd:99:95:19:a6:56:34:48:e7:c1:91:49:a6:41:35:67:c3:8a:
46:63:09:9b:a8:6d:dd:4a:6f:95:db:35:cf:1c:f0:8f:d8:8e:
6a:1c:68:b8:d0:2d:9b:99:20:48:19:8e:a5:35:d2:1d:20:d2:
05:5a:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:05 2026 by rpki-client