Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: DlwmjIM7AmjJqFs3I8wkGT3XuBCCSWX7Ef9EB7Xggk0=
Subject key identifier: 5C:24:35:F3:FE:7B:B9:3D:B7:72:3F:B5:01:96:A7:10:75:EB:CA:DD
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019D28BBFE124373409F94A2BFE3B34B96D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 0870
Signing time: Thu 26 Mar 2026 06:01:41 +0000
Manifest this update: Thu 26 Mar 2026 06:01:41 +0000
Manifest next update: Fri 27 Mar 2026 06:01:41 +0000
Files and hashes: 1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: O2P5n40tWDzYZ+UoxVsRCnHPmOmXfafDalfklEFRHu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:fe:12:43:73:40:9f:94:a2:bf:e3:b3:4b:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Mar 26 06:01:41 2026 GMT
Not After : Mar 27 06:01:41 2026 GMT
Subject: CN=5c2435f3fe7bb93db7723fb50196a71075ebcadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:0d:09:3d:33:fa:77:b6:23:ec:80:a3:8a:
79:fe:cb:98:52:91:3f:9c:4b:a8:57:bc:4b:6f:eb:
b2:96:7a:4b:1d:7a:65:c5:1c:d3:46:55:b4:fa:ac:
7d:80:ac:a9:cb:f1:4a:42:37:1e:b0:ea:09:89:f9:
cd:43:1e:04:dc:cf:54:b8:97:30:d4:9e:0e:19:29:
71:47:69:11:b0:a8:3e:bb:3d:c0:ae:3b:10:36:ef:
59:5a:2e:61:1a:42:d1:49:e1:92:d6:c3:cb:0c:f6:
c3:72:b8:9d:ca:18:bf:fc:92:70:b1:29:d5:88:26:
fa:52:6e:87:b4:ab:58:a4:f4:dc:ac:86:7b:a5:21:
d8:37:89:a0:28:fa:f2:3c:06:96:b6:72:ab:0a:b7:
cd:83:1b:88:5d:67:24:9e:81:62:9e:2c:1a:8a:b9:
e2:42:20:ef:9f:fb:aa:07:47:ae:4e:12:05:d4:cb:
e7:49:94:6c:ac:7a:3c:a3:ca:82:39:b9:45:dc:2f:
b7:4a:30:ea:71:4f:f2:6d:35:a2:f1:67:e5:48:73:
96:ee:a4:64:3c:99:1e:5d:04:95:ce:06:a9:08:e8:
44:41:68:91:68:2b:19:ce:ed:84:07:be:2d:2a:c0:
a9:6f:d0:b5:d1:0c:11:d1:53:e5:b2:50:57:2c:bb:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:35:F3:FE:7B:B9:3D:B7:72:3F:B5:01:96:A7:10:75:EB:CA:DD
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b7:92:77:f0:84:6e:5f:54:ef:01:61:bc:ff:27:fd:9e:a5:
a1:25:f6:82:9c:02:b9:9d:d3:10:5c:be:c7:92:11:05:1a:1f:
dc:4b:60:8a:9d:a4:21:06:66:8b:31:52:81:8f:be:e3:d0:c2:
1c:bd:9f:86:b2:b4:6f:d8:ba:0f:0d:5f:19:b0:0b:e8:8f:21:
32:44:a0:75:47:fa:d0:f7:e1:c9:09:45:95:71:fb:95:68:4f:
6e:f8:fe:0a:35:4f:62:fd:9c:3b:18:fc:25:8e:5c:52:70:60:
96:fa:ec:fd:8d:35:6c:0d:35:a5:6f:f2:12:0c:c8:75:b4:5a:
3e:de:94:dd:b2:22:86:85:82:8f:f9:ef:1e:fe:da:1b:ab:51:
6b:2a:0f:5a:21:84:54:e6:b0:bd:d7:72:40:86:72:e7:55:84:
61:85:31:12:b4:ca:6c:e9:c8:b3:ff:cb:20:ec:a3:c7:6d:84:
c3:e7:11:d7:51:e9:a9:02:20:48:55:10:7c:37:dd:8f:99:30:
7c:41:5f:0e:d5:4e:91:aa:4f:58:0d:19:e3:2b:a9:a3:5a:2a:
d6:e3:cc:40:02:68:8a:56:70:5a:a3:7d:f2:21:f4:f8:7c:0a:
6e:71:3d:d2:85:3a:3e:d2:ba:80:5f:08:82:99:41:68:f5:cc:
3c:ec:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:43 2026 by rpki-client