Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: a/W/UnN12pQ8Sav2KjAueWlf+xuNr1ynYl7LRp2qLKc=
Subject key identifier: 43:CE:CB:F6:19:C2:9F:00:B1:A2:D8:96:96:9B:EF:AE:3C:14:EA:C6
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019D26CCDBABB19189B66CF02C3402CF3422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 081C
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: R8Si3lqXzzzwLHqgFZye4r2NuQC2dzJNdZUSNIYPAUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:db:ab:b1:91:89:b6:6c:f0:2c:34:02:cf:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=43cecbf619c29f00b1a2d896969befae3c14eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:da:8b:b3:7a:2a:c9:36:03:5e:4f:62:7a:
ac:40:7b:15:83:c6:50:dd:16:fd:d3:1f:d0:f2:33:
cd:b8:af:ca:4b:36:8f:89:93:27:df:1f:ce:54:54:
8f:ea:42:35:f8:4a:64:d2:c1:a1:5e:f3:ae:bb:55:
d4:f8:84:90:84:49:90:02:fd:31:61:59:e0:f5:32:
30:dc:84:2e:bd:97:3e:87:90:0a:5d:d5:23:e4:4f:
c4:e8:09:f2:f7:4b:db:15:97:9c:f3:fb:37:92:49:
65:15:8d:a3:47:55:66:b8:6e:e7:f5:a0:2e:76:90:
d3:4f:db:6f:f8:10:86:70:2a:04:3c:6b:75:14:d0:
a8:54:b3:3d:48:80:a1:56:4b:3c:27:f0:d7:df:be:
44:9e:f5:97:72:04:6b:ed:44:9e:69:54:7a:e1:a0:
e9:3d:64:60:0f:1d:93:4e:fb:5e:3e:1f:12:08:91:
20:96:99:d3:63:57:cd:87:94:6b:1d:89:0e:ad:27:
f0:ba:11:49:77:5c:ba:78:ff:3c:1c:e6:29:71:8b:
89:57:3e:ce:4a:d8:f1:af:72:e2:a5:d5:ab:9d:16:
16:d5:85:71:d9:0c:5a:7d:cb:f3:2a:e0:46:8c:b7:
28:49:e6:8f:0f:b4:b6:5c:a4:b4:cb:10:8e:00:40:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:CB:F6:19:C2:9F:00:B1:A2:D8:96:96:9B:EF:AE:3C:14:EA:C6
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:00:bb:87:d7:67:ac:7e:f7:a4:be:e8:9c:2c:5d:6b:52:
f9:fc:3f:ae:6e:51:d2:4d:c1:99:1c:5b:0f:37:79:fe:8b:83:
2d:ad:8e:66:cd:54:87:00:e3:0c:a6:21:07:16:78:49:00:44:
bf:64:72:65:f1:d4:3d:d2:9f:26:aa:7c:51:1d:ae:99:56:f4:
5a:e0:70:03:b6:50:27:95:96:1c:42:86:98:89:04:7f:0a:c8:
89:a0:ab:44:97:e5:47:e5:6e:68:98:67:d7:6e:47:db:1b:fd:
ff:48:35:f1:85:f1:3a:bf:f8:73:46:17:9a:af:54:38:c6:30:
dd:de:09:30:9f:95:20:e7:65:3b:99:47:4e:a0:3e:a3:e1:74:
7e:1b:63:d8:93:f0:76:19:f6:0e:62:ba:58:26:64:b0:e0:df:
a3:f4:1a:a3:b1:bc:5c:48:ba:c4:ed:fe:ce:8e:2e:59:1a:ad:
cd:4e:4a:6e:bd:e2:5b:eb:3c:42:59:ee:f3:5b:bb:16:48:f4:
56:1b:15:c0:98:04:45:1e:9f:e8:06:df:ba:19:72:00:f4:99:
0f:99:88:b8:85:17:0a:5c:de:5a:d2:90:22:73:20:16:86:3f:
ca:34:87:0b:1e:76:42:4d:3d:2f:96:5b:72:a8:df:a4:f6:56:
bb:6d:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client