Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 8eZXkDwxivnaoBozaD5udr3ZKRBes10dSQfF0kMPYY0=
Subject key identifier: 5D:08:7C:63:CC:6E:BC:BC:17:51:0F:E2:7D:6D:93:AC:69:A3:C1:10
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019D29290B083D3961A7B5CDBF2D4F53E8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1593
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: PfjuEO5SIav2yfA+hF1SGgIDKl/8xWyu3/s1tfXFKdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:0b:08:3d:39:61:a7:b5:cd:bf:2d:4f:53:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=5d087c63cc6ebcbc17510fe27d6d93ac69a3c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:ef:0b:d9:b6:6e:b7:b0:d5:fc:86:39:75:
66:20:33:70:4b:c0:63:fd:ce:2b:93:17:5d:72:18:
2d:5f:4c:c8:16:32:bf:80:58:6c:8b:e0:e1:19:bd:
80:f2:97:7b:e6:5f:0c:bc:a3:35:f1:17:42:92:3b:
14:5e:bc:eb:3a:6c:51:2d:86:79:16:e9:02:ec:a0:
0b:53:9c:33:bc:96:ea:60:aa:cc:56:73:e1:38:b9:
aa:b5:25:3a:f5:e9:3c:a6:c2:21:f1:6f:38:d1:7f:
e4:15:8b:b2:09:31:0b:28:40:71:5f:94:21:8a:d0:
b2:0c:45:fe:af:3e:17:e8:a5:07:8e:55:78:6a:80:
ea:19:c9:6b:27:19:b4:11:18:a5:18:1a:4d:89:71:
8c:5d:41:86:c6:94:31:c9:5d:4e:9c:39:bf:2c:33:
f4:e1:07:86:68:ea:31:59:a1:19:88:d4:2b:e9:44:
f0:e1:5b:66:7d:68:b6:15:e4:b9:a0:83:53:17:86:
d1:2e:86:41:15:59:48:81:a6:9e:7d:81:f2:1e:7e:
dd:07:6a:89:8c:d9:58:0b:8b:bf:8d:98:90:bb:4c:
b3:e1:d8:b6:25:c5:65:da:0e:97:cb:06:36:86:88:
fa:cb:9a:2d:e3:89:24:12:c6:5c:41:3e:dd:e2:88:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:7C:63:CC:6E:BC:BC:17:51:0F:E2:7D:6D:93:AC:69:A3:C1:10
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:5c:60:d5:e3:b4:c5:e1:b0:77:54:01:9f:39:a1:34:44:
ca:da:ba:c5:77:78:ca:0f:9e:0a:ea:9a:b4:85:3b:4e:73:ad:
f9:70:d2:66:8d:9c:ad:ea:94:57:66:99:11:d4:d8:91:3b:0c:
16:79:6a:48:50:75:da:c8:28:33:72:e9:23:8d:b4:b5:69:4b:
d2:7e:3a:36:f2:39:72:26:51:59:53:d9:89:07:ac:1b:77:b5:
8c:ac:6b:0f:1b:14:3c:d5:1b:3f:72:f7:42:13:98:a2:df:a8:
fb:30:04:43:25:68:dc:d2:09:a0:f7:b8:a1:54:0d:fd:41:b1:
a3:57:27:00:4c:14:44:a3:01:4e:c4:6c:77:89:3f:fa:83:99:
2c:7f:7b:6b:ea:cf:82:ac:43:c1:14:b7:4a:20:e2:38:1a:6f:
f5:ed:87:14:36:60:7e:4f:6d:b2:7e:46:07:17:2c:0b:fe:59:
81:56:2d:3b:48:81:48:7d:c3:be:e8:4c:77:af:77:8f:8c:90:
f3:27:47:99:e8:aa:1e:ad:36:ff:30:af:29:40:e8:29:34:9e:
e9:0d:24:20:ae:3e:b6:7e:52:85:bb:2d:c4:dc:1b:9e:1b:0d:
dd:c3:75:00:02:21:15:bc:39:ac:1e:35:30:e0:3a:0b:fe:70:
49:c6:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:43 2026 by rpki-client