Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: tlDo6byntUA8axnVhCsNm5h6LxBn8ylXqpoFGZZ2WcE=
Subject key identifier: 1C:3A:72:1F:03:AF:47:83:84:53:FD:92:00:91:01:A5:DA:14:DD:42
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019D27A915E40348CDBF13FCEECCF3B9A2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 0916
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: BwXbiOo4RjFVj5Dj5ubs0OzhTEg.roa (hash: D/nZqGZDiargJ1WjN4WGCYH05fUuLBJs9tc1eSlRvy8=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: uv8sPHaMJdmwZyRfrBVjHfktbAuaIton8ggCsb98Usc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:15:e4:03:48:cd:bf:13:fc:ee:cc:f3:b9:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=1c3a721f03af47838453fd92009101a5da14dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:d2:f3:2f:b9:10:87:64:70:10:fc:8e:01:
b3:c0:b4:63:fa:45:d8:79:74:8f:86:30:08:a5:09:
74:b5:dc:22:0e:81:60:f2:b3:43:15:c1:76:b6:70:
63:09:d5:51:ca:c5:42:14:13:d7:04:ea:e1:e6:2a:
c5:e6:93:a8:f8:45:73:1c:62:42:86:0b:87:8a:ff:
68:03:f7:03:ad:06:43:c9:b4:4f:71:63:21:a2:1f:
33:19:85:c7:c1:cf:55:17:91:2d:72:36:81:67:d1:
5b:19:ef:de:35:18:55:45:78:f9:2e:41:4a:68:4e:
7c:13:65:56:52:b3:c8:a8:80:44:59:18:a4:b9:2f:
f7:56:ea:25:1a:0d:1f:b1:1f:ba:98:53:0d:d0:a0:
3d:af:78:4f:4e:a9:97:67:8b:3f:c3:d8:bb:74:17:
bd:1f:d9:65:cc:71:34:66:62:28:6b:44:90:b8:e8:
c4:ae:7c:74:bd:26:63:6f:d5:a9:d7:fc:ae:20:cd:
5b:20:95:74:c8:0e:ae:d5:34:92:a2:a8:a4:47:0f:
40:28:f9:e3:1b:81:3a:5f:5c:e6:f1:a3:a8:67:50:
36:d6:87:c3:74:9c:51:5f:38:d6:45:c0:6d:7c:e0:
63:0e:10:7b:b4:f1:c5:fb:8c:95:4f:25:7c:6a:df:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:72:1F:03:AF:47:83:84:53:FD:92:00:91:01:A5:DA:14:DD:42
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d7:37:a0:1e:5c:08:dc:77:37:7c:83:f2:66:14:2e:07:73:
f0:7e:09:57:16:c6:84:f5:cf:92:aa:ca:2c:dc:83:83:1e:1d:
fa:68:8b:bf:d9:b7:eb:ea:7d:eb:c6:ee:b7:de:8f:c2:b8:79:
26:db:90:47:dc:38:c6:e8:66:9e:27:16:61:e7:85:57:3f:c5:
75:d1:9e:08:cc:fc:5d:22:b0:6f:94:3f:5b:74:09:24:44:d0:
20:ee:c5:a1:62:1b:35:fd:2b:54:ae:57:d4:11:28:69:43:02:
24:15:98:3d:88:31:3a:45:2f:ee:d4:29:6e:70:d9:25:d0:dd:
e9:73:87:56:69:97:cd:eb:d9:72:b5:51:8c:c2:24:b3:62:b7:
52:40:41:54:24:a7:80:21:2e:ad:ff:75:0b:e2:9c:62:03:be:
8d:f7:5e:4a:8f:1b:5b:fc:6e:1d:48:2c:2d:2c:4f:80:3f:d4:
2f:d8:ae:2c:91:ef:f2:f2:88:2b:0a:19:ca:ba:b8:ff:35:f6:
94:6f:2d:10:47:a7:e8:ab:f1:a5:ed:09:9c:bc:2a:a9:df:da:
d8:15:98:1d:8f:7e:65:73:dd:45:dc:83:24:c8:18:bf:6f:74:
06:9c:38:7f:35:69:82:7f:8e:d2:ac:6a:13:11:e3:45:2a:d8:
ba:c0:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:11 2026 by rpki-client