Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
File: yfoWHXofBQRhxb4pHp--B_5N1SQ.mft (raw, json)
Hash identifier: xS+wuiyXeHLe3brCQECNAyaWtDcTBJ/Ly/Tmjm+M5OU=
Subject key identifier: 53:79:EA:3E:08:1B:3D:A7:7A:4B:09:79:7C:B1:B1:CE:46:28:44:90
Authority key identifier: C9:FA:16:1D:7A:1F:05:04:61:C5:BE:29:1E:9F:BE:07:FE:4D:D5:24
Certificate issuer: /CN=c9fa161d7a1f050461c5be291e9fbe07fe4dd524
Certificate serial: 019D2772A901DB2C978775F4D61697C4B992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
Manifest number: 77
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: q9r5Sa2pF-LAaTI2zR7haz9jOHw.roa (hash: w1oiwYmUyslgOeSb1JpT0bOjSe/1ej94ia9AqsY8TDQ=)
2: yfoWHXofBQRhxb4pHp--B_5N1SQ.crl (hash: 7EQyUyn08ynCDBumjKe+AuCjtTrIv9zYoo4qWlYZWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a9:01:db:2c:97:87:75:f4:d6:16:97:c4:b9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fa161d7a1f050461c5be291e9fbe07fe4dd524
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=5379ea3e081b3da77a4b09797cb1b1ce46284490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:6e:87:f2:d9:dd:17:12:bc:83:ef:b6:b0:
48:55:ff:52:50:0c:80:55:e4:47:62:05:a9:be:f3:
df:f8:1c:88:1d:b9:fa:09:0d:84:ac:de:00:f8:b2:
89:3c:96:3c:72:c1:5b:0c:03:39:8b:a5:7c:31:bc:
f9:4f:5b:96:07:e8:cb:1d:7e:7c:d2:46:5a:47:61:
69:5a:6d:e5:f4:4c:9e:f5:76:68:38:73:ff:5d:bd:
8a:9c:a0:d5:37:b8:be:53:4f:ea:bd:c5:2e:04:77:
82:85:b9:fa:da:66:c2:d3:83:6f:52:d0:b4:03:c3:
bc:d0:d7:da:7b:83:bc:ff:92:77:2f:e2:ce:e6:02:
c1:1a:49:21:1d:b3:b8:c2:a5:7c:ad:b7:99:d0:3c:
a6:d3:c1:04:8e:48:a1:e1:f4:64:02:3a:49:7c:03:
dd:99:8e:7f:67:0e:fc:04:8b:e9:ae:3c:9f:89:76:
e6:25:3f:25:7e:62:21:5a:3d:64:3b:64:28:b5:cb:
de:43:4a:22:2e:91:80:dc:15:dd:5d:72:1c:92:e2:
6d:a9:e1:47:be:a1:fa:5e:53:2a:04:d2:90:f6:ac:
0c:52:9b:92:b8:26:31:44:3a:6a:2a:48:0a:16:74:
8a:4f:df:93:9c:2e:12:2c:f1:5b:f0:67:0f:16:12:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:EA:3E:08:1B:3D:A7:7A:4B:09:79:7C:B1:B1:CE:46:28:44:90
X509v3 Authority Key Identifier:
keyid:C9:FA:16:1D:7A:1F:05:04:61:C5:BE:29:1E:9F:BE:07:FE:4D:D5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfoWHXofBQRhxb4pHp--B_5N1SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c91f7f-c2fe-4e74-acf6-fbde3d7bb55c/1/yfoWHXofBQRhxb4pHp--B_5N1SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2a:af:c3:72:ae:9f:99:cf:ab:39:50:27:3f:d1:b5:b3:bb:
f0:33:50:37:37:67:5e:80:d5:14:1c:fb:fb:8a:62:0e:ca:72:
74:62:0d:4c:f6:1c:a7:32:c9:78:ba:80:1a:55:cb:d7:ad:98:
8e:6a:7d:7c:82:6e:d6:19:34:b3:cf:38:2a:d5:64:ba:09:f2:
c8:e7:36:a4:18:a5:f1:49:ac:85:f3:31:b0:c8:25:00:7f:03:
c2:35:9c:24:6d:17:ba:b2:72:cc:57:54:b6:86:2c:2e:68:6d:
b6:df:d9:68:a6:ce:52:44:bd:5d:5a:4c:6e:1a:ca:7d:e9:2e:
b0:5e:22:75:36:8f:f8:67:1b:38:27:c0:86:de:3b:91:0b:48:
91:8d:0c:c1:3f:cd:2d:d3:09:92:f8:7b:17:7c:c5:64:1a:f9:
8f:74:15:6a:99:ad:8c:1b:5a:42:7f:c0:d6:dc:fd:14:65:dc:
f9:ff:c7:63:90:ff:25:37:da:2a:02:ee:e1:ba:65:70:50:e4:
f6:94:ba:49:ba:ac:7a:7c:79:56:93:ea:78:67:2c:5e:80:be:
43:ba:cb:a2:63:1e:0e:b2:d4:02:da:09:ca:54:0c:7b:46:f9:
37:77:1f:de:8e:61:24:0d:7c:c5:ec:5f:47:54:0c:ac:06:94:
38:af:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:33 2026 by rpki-client