Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: aEDXGfwzXirpy0w9CAIkz7Gn0e8OJbT0jn29sFlw124=
Subject key identifier: 5D:67:7A:31:71:3D:DC:7E:87:2E:A6:14:F0:35:34:F0:21:66:D3:D7
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 01A0E218B167779E2FC6B22416D9C4C87E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 18BC
Signing time: Sun 27 Sep 2026 09:01:04 +0000
Manifest this update: Sun 27 Sep 2026 09:01:04 +0000
Manifest next update: Mon 28 Sep 2026 09:01:04 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: 84HopnsXiLB6g51crEorcDcZzruZBHYbzDCce28wd5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:b1:67:77:9e:2f:c6:b2:24:16:d9:c4:c8:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Sep 27 09:01:04 2026 GMT
Not After : Sep 28 09:01:04 2026 GMT
Subject: CN=5d677a31713ddc7e872ea614f03534f02166d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:70:dc:87:f2:2a:82:44:87:94:3a:9a:14:
dd:5a:ba:64:1f:42:74:f9:59:e3:ee:6e:33:55:37:
55:1d:5e:bf:2a:fd:7e:2f:e8:c0:fc:e7:f3:42:0d:
46:50:6f:56:88:c5:be:ae:a8:03:45:12:38:d5:ef:
12:a0:3a:15:f4:89:db:7d:85:d6:57:49:3d:4d:6c:
c8:43:40:96:d1:39:2c:69:5e:41:62:fd:09:e3:33:
91:7e:28:4d:95:42:1d:75:dd:f4:d3:44:ad:a7:6b:
46:32:86:15:59:a9:85:bd:0b:c9:aa:3f:5c:83:e0:
9f:f5:53:eb:a2:0c:a0:02:02:20:a6:b3:f3:51:2e:
b5:33:65:3c:b6:b6:9e:6a:af:96:5e:53:be:f3:e5:
9b:d1:e4:d3:b1:b0:d1:b7:39:ce:03:a5:03:88:21:
3a:db:bb:f1:47:a5:ae:77:4c:4f:52:dc:9b:be:e9:
8f:dd:ee:92:fb:52:b0:c1:cc:05:0c:29:d2:ce:35:
68:d8:b3:23:ce:f9:b4:9a:24:1b:83:88:73:25:73:
8c:0c:b5:f5:6f:fa:db:52:c0:a7:ca:44:03:70:af:
53:d8:3d:d1:60:86:b3:78:27:3e:06:ea:4d:7e:f4:
e1:26:20:f0:56:f2:18:a2:9b:8e:c0:f9:0c:18:c4:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:7A:31:71:3D:DC:7E:87:2E:A6:14:F0:35:34:F0:21:66:D3:D7
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:64:c1:7d:6a:0e:f5:e0:14:4d:02:25:5b:68:c2:78:6a:
a8:b0:6f:bd:1a:4c:4d:73:26:fe:12:c1:89:b8:3a:3f:69:58:
b4:af:22:0c:3b:e8:ba:43:ea:97:b4:3e:25:c6:b0:7d:34:50:
25:bb:a0:7f:32:e3:91:81:dd:bb:e9:78:05:86:57:40:87:66:
46:f4:ec:78:cc:97:49:07:31:41:13:d2:a3:78:41:11:81:af:
6f:b8:b4:f1:d1:78:50:f4:88:19:de:b9:a1:a5:f7:e6:eb:c2:
06:4c:f5:fe:81:fe:a5:b7:17:99:c2:69:21:3b:69:79:c0:c8:
6c:04:3d:cc:ed:2f:2d:fc:81:e0:1e:97:c4:64:e5:34:29:52:
36:6c:43:ae:f9:55:3f:a6:42:bf:1b:b2:4e:8f:40:9f:7c:45:
65:a2:ae:a0:26:4c:93:e3:b9:c2:5b:53:5e:ce:5b:e4:72:56:
48:f2:fd:3a:64:ae:50:a0:69:41:2a:65:3b:32:6e:07:f3:32:
1c:34:f1:85:88:99:8e:7b:e2:ad:cf:cd:59:23:55:a6:df:47:
d4:1a:cc:f4:9a:69:e5:ba:a1:aa:ec:b6:70:64:86:63:c9:30:
3c:45:88:50:4e:34:81:f2:48:4e:0b:b8:0a:fc:87:16:47:2e:
cd:5e:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:09:27 2026 by rpki-client