Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: J5lfWXa+D8BRFS5CJnE66zcQfnW7ILJ0cbfN+I1dKpw=
Subject key identifier: F7:EC:42:29:26:A8:64:82:B0:B0:54:A0:88:78:14:CC:B8:E2:DC:22
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 019D273AD8198BCA14430582B7DD59B9DE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0E17
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa (hash: IyBmvMwGXyKxvavxnC9QjTz8ueACKxET+moXjushzIA=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: 369xkHLLdBRP+Or1Zw3kTYBnRld/46aEqtnNYX2I/QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d8:19:8b:ca:14:43:05:82:b7:dd:59:b9:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=f7ec422926a86482b0b054a0887814ccb8e2dc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:01:8a:fd:0a:5e:9d:dc:97:ef:42:db:d4:
8c:7f:92:3a:d3:80:d1:5d:6a:c4:23:5c:52:f3:fd:
74:dd:40:7d:1e:ae:b6:d9:2b:8b:09:e5:8d:c4:74:
5c:09:ee:7c:3b:2c:43:8e:45:78:61:8f:44:e4:ad:
09:a8:23:af:e6:8c:47:08:a8:ed:a0:65:24:38:a6:
e6:6a:7d:92:9f:39:0d:26:91:f0:00:e6:7e:6f:74:
55:63:61:fe:c1:e9:fb:ad:fb:5c:b9:24:10:36:9d:
34:41:bd:43:f9:47:00:b1:f9:db:e4:a3:e7:f9:86:
0c:a2:f3:12:f1:35:26:d3:8b:88:99:04:93:32:8d:
a4:e0:b8:5a:f8:6b:c2:97:ea:53:90:f0:2b:e0:65:
69:e0:21:35:44:f4:0a:75:33:7f:6c:75:da:39:43:
40:4a:36:d1:3b:d4:02:e9:33:a2:d6:8d:45:40:e5:
e3:43:71:79:75:90:c8:29:6b:f8:08:50:03:ac:08:
ef:41:87:51:b3:89:6b:48:7b:00:2d:53:db:61:fb:
a5:3b:23:1d:c3:0e:42:36:4f:b3:04:54:95:9d:fd:
a6:46:52:2a:08:2e:fa:b0:71:37:e3:b8:fd:3d:59:
fd:4f:1c:66:8f:78:3e:48:66:ba:b5:71:0c:37:23:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:42:29:26:A8:64:82:B0:B0:54:A0:88:78:14:CC:B8:E2:DC:22
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:4c:92:1d:fc:6f:f1:cd:c6:9c:d3:ee:4e:65:30:ed:98:
6a:e9:79:03:75:ed:b6:dd:22:67:5f:aa:76:ad:e4:39:52:a4:
53:78:5b:a2:f9:14:99:0f:f9:c8:a0:59:5c:c0:28:f3:32:86:
99:cf:8d:9c:ab:32:9d:c3:86:46:e9:50:51:21:48:2a:44:24:
00:64:8f:a5:f9:fa:b8:53:df:f7:21:8d:c7:df:7e:e1:e0:74:
7f:5b:ed:e8:dd:69:10:56:d9:38:e0:ed:e4:e2:a9:6c:39:eb:
c6:7a:e9:c1:9f:2e:aa:0a:d5:e9:7a:e0:61:7f:c1:3f:26:a6:
e3:3f:e1:9d:9f:a6:cb:26:e1:f1:01:27:1f:26:55:4f:74:5c:
3f:8e:9d:a1:39:7e:bb:28:1a:a1:4e:a3:5d:bb:59:d8:40:6e:
bf:15:32:27:fa:3d:58:61:23:f1:ee:a7:d6:e2:07:63:fd:39:
d1:dc:f8:6c:b5:a9:d8:a4:87:03:f2:fa:2c:9c:92:68:66:61:
f3:05:6b:a8:0a:5c:9f:e3:47:e2:18:c2:d1:00:18:8f:bd:ef:
1a:35:0c:26:11:43:fb:3c:28:26:21:f8:ac:53:9a:a7:22:71:
46:35:c5:fb:90:b7:c2:b8:8c:59:db:14:36:62:7f:05:1a:80:
3c:ba:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:06 2026 by rpki-client