Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: B66l2k1YcgmdvcuyDP2GeOi+K2Tx1ts2Jo0WUlxUvd8=
Subject key identifier: 34:30:0E:11:05:70:78:6A:43:59:0D:6F:D5:60:87:3D:86:D1:4B:57
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 019D2772C7DD2FE9B139DB475C2FE6AFE94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0C68
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: ghGc2Lv7TcfrmuH9YITRm12nsM0.roa (hash: qhSH7nSb+oaxjGNhsFsYHQ6vShtNbUb1gAOSPr8PZts=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: ymhJsoDpq17lt1mNFcUrFFZ97griso2WASuvxYUrxUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c7:dd:2f:e9:b1:39:db:47:5c:2f:e6:af:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=34300e110570786a43590d6fd560873d86d14b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:0d:6c:c8:1d:1e:32:5f:31:64:46:ed:1b:
2e:da:7a:be:29:6f:31:f3:10:7b:2c:9e:5c:d9:95:
30:02:af:ac:12:4a:e5:fd:1f:d7:47:09:a7:9c:c3:
6d:f7:99:8d:6d:24:a0:da:9f:9b:27:8c:50:5e:28:
9e:50:8a:5a:d8:1f:06:61:f1:07:eb:e5:0d:b6:75:
74:9c:ef:d8:13:68:cd:fd:f1:c4:ac:03:c8:07:bf:
fb:8f:48:93:f9:03:00:61:ba:08:eb:d8:bd:19:55:
88:f9:67:63:69:b5:97:6a:94:5f:c5:ea:1f:64:90:
96:08:18:09:72:dc:b9:1a:22:8a:6e:cc:2e:19:14:
b7:b0:8e:12:4f:d4:66:41:fc:89:c5:14:6e:fc:64:
15:af:d7:0b:cc:2d:f5:5b:0c:9a:f8:5d:02:ee:45:
ba:52:80:fb:d1:bc:af:a6:f9:fc:35:fd:a9:4a:8d:
51:ef:74:19:cd:ce:22:5c:95:cc:c4:49:7d:e2:80:
5f:92:17:a0:fe:e4:c2:f3:ee:5d:9a:fd:22:44:93:
cc:97:32:70:4f:50:3f:2e:1e:a5:1a:ed:16:5d:28:
f5:75:22:22:f4:69:d0:27:68:7b:b5:dd:6e:56:eb:
bf:77:90:ec:6c:65:52:56:18:84:1f:37:d0:86:f5:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:0E:11:05:70:78:6A:43:59:0D:6F:D5:60:87:3D:86:D1:4B:57
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:3b:f1:82:4b:6a:7f:84:ca:47:9b:13:7e:06:bb:27:96:
a6:78:eb:5f:7a:c9:bd:44:d6:b2:de:92:08:1a:6a:ef:54:00:
b7:73:cd:4b:82:fc:0e:8b:bd:04:ab:cc:7f:a3:b8:01:b8:4c:
00:63:ca:8f:10:12:46:be:df:b4:36:09:0b:1e:41:d6:1c:21:
4d:d0:da:9e:69:7a:5f:e2:e4:6d:77:ff:2c:a9:74:10:b6:bb:
66:cb:3f:17:32:0f:74:df:03:57:18:9b:1a:07:b5:68:1e:a5:
43:04:95:5c:e1:9c:5f:04:db:c8:84:39:f2:e6:dd:37:3d:3d:
3a:58:e0:a9:b2:b6:fb:fb:69:1e:bc:da:c4:2a:46:d0:5c:81:
cd:c6:d2:0a:02:9b:46:d6:6a:e8:bd:6b:89:58:8b:42:2d:ac:
01:74:b7:79:3a:68:44:ff:9f:69:2f:ca:e5:4a:01:25:cc:78:
72:1a:c4:85:2c:a2:dc:3f:07:0c:3d:ec:29:88:7b:4b:65:86:
f8:8a:89:d0:da:43:5d:43:23:67:22:fc:fd:19:11:b9:d0:31:
27:fa:b0:2d:e6:1c:d9:3f:60:27:f0:10:c0:f0:7c:c8:f4:6e:
74:52:f3:7b:33:55:f4:24:53:a1:fd:75:e3:00:31:33:e3:b9:
ec:59:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:25 2026 by rpki-client