Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: YNQM+mo4W64te4yV6hCVSrknB0hGGbVAi/AxaBWBjRs=
Subject key identifier: EF:77:92:CB:33:8D:3E:86:5A:18:A3:CD:4F:3F:F5:2A:AF:38:5C:CE
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019D27E0517C66E87BF0850C8392A3413DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0C1A
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: yiCsE/xnkOhgQWHKz0vqb+AASBDAw3+ZgcjXgIvqRfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:51:7c:66:e8:7b:f0:85:0c:83:92:a3:41:3d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=ef7792cb338d3e865a18a3cd4f3ff52aaf385cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:53:8a:ba:d7:5f:a8:03:36:2c:66:b7:0b:
52:c6:d0:cc:56:08:da:be:ae:93:ba:37:e9:6e:8d:
8e:e6:b5:29:b2:1e:03:16:de:31:a3:c1:f0:c6:c7:
81:52:9b:da:21:be:7c:55:ae:82:70:89:76:dd:bc:
2f:20:c8:65:e1:89:13:9c:0e:4e:7e:08:ad:ba:b5:
ff:96:51:2f:4e:b3:f6:d6:f4:69:a2:3a:27:61:e3:
62:d4:3d:f6:cd:00:1c:32:5a:e2:1a:52:b0:8e:24:
2a:a1:dd:3d:b4:61:c1:d6:37:4e:55:8a:54:dd:2f:
60:e1:81:ba:a4:9e:13:73:ff:79:83:c1:ce:33:38:
02:18:a2:33:45:ef:fc:1d:ae:59:5b:43:c3:db:59:
a0:53:ea:07:9c:45:e0:d7:01:d6:7f:90:2c:c8:f8:
0e:e7:1b:a6:8d:53:97:85:f8:c5:6f:8f:da:29:f4:
e4:57:d3:cd:64:3c:ce:a5:82:30:54:20:2b:27:7f:
66:b2:04:51:5e:f4:c9:42:69:79:9d:7b:88:45:0b:
e7:7b:13:21:88:52:13:9c:b2:96:2e:e5:b5:be:91:
4b:14:2c:69:04:11:b3:cf:be:d6:4e:95:a5:9c:85:
80:1a:d2:55:84:9a:be:05:12:7f:70:93:23:dc:23:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:92:CB:33:8D:3E:86:5A:18:A3:CD:4F:3F:F5:2A:AF:38:5C:CE
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:db:30:cd:c7:bc:6b:6f:a9:c9:83:25:6f:f7:84:2d:eb:
f0:90:57:f3:a8:2b:c3:ac:23:29:92:99:2c:41:a1:49:6e:29:
f9:9d:2c:2d:f6:58:6e:74:0f:2f:d1:ad:b5:9b:a5:84:1c:07:
95:19:32:a9:b4:dc:cc:98:17:fc:a7:cf:44:da:4b:1a:92:4d:
27:ac:43:51:82:46:76:1d:c4:0f:ef:03:bc:96:57:72:d7:d9:
1c:c4:ee:fb:d8:2b:42:46:04:d5:9a:18:f0:1c:b7:31:2f:ab:
84:06:57:fd:94:5e:b9:5e:b7:b2:82:78:b3:a3:08:79:62:20:
95:29:90:17:a4:d5:11:9d:a5:e6:9e:db:3f:c2:db:4f:54:59:
01:78:bd:06:19:1b:a4:9a:51:b8:ef:53:00:8b:dd:fb:48:22:
6d:0f:89:e9:84:f9:2b:0f:95:24:d6:53:ae:fe:29:04:44:b7:
08:01:ac:16:7e:46:2e:5f:fb:1a:c0:88:b5:8e:13:77:1b:9a:
9e:32:3e:6e:ed:cb:05:fc:91:27:9b:bd:58:d0:b0:a0:02:18:
a0:97:c7:1b:b3:be:f7:fd:74:3a:7b:94:9a:2b:af:ca:2b:a8:
ad:37:7a:05:35:28:a4:ae:2a:a3:ff:c0:00:8d:4d:5a:bc:6f:
21:12:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:58 2026 by rpki-client