Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: sGOXNJlYd/8ynF0TU3gn+sTbY5ruPz8fx/jHTgNnOAY=
Subject key identifier: 04:E7:28:90:7D:44:D2:C6:D8:63:06:A4:0C:92:EC:9D:04:83:5E:D3
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019D29CED24B797163FE6BE73DA5D25D0332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 18EB
Signing time: Thu 26 Mar 2026 11:01:53 +0000
Manifest this update: Thu 26 Mar 2026 11:01:53 +0000
Manifest next update: Fri 27 Mar 2026 11:01:53 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: gHLsxBC7Niq4QMs1doTktzZgWHQT7PU6eJRHzUMHcLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d2:4b:79:71:63:fe:6b:e7:3d:a5:d2:5d:03:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Mar 26 11:01:53 2026 GMT
Not After : Mar 27 11:01:53 2026 GMT
Subject: CN=04e728907d44d2c6d86306a40c92ec9d04835ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:b5:91:f1:26:76:65:7f:ee:94:74:f3:89:
1e:2b:62:70:35:fd:14:11:4b:5d:f2:aa:56:9b:7d:
c3:49:c4:9e:91:11:8b:2b:0d:4d:64:0c:37:dd:32:
61:6a:9b:5f:82:af:10:5f:f9:ff:43:42:8a:f4:05:
fa:31:c0:f8:5e:86:b1:cd:7d:8a:72:39:16:1e:eb:
0c:61:d2:2a:2a:03:ba:7d:92:3f:1b:a2:8b:b6:c8:
3e:f2:80:5d:d3:13:50:1e:f8:39:b5:77:1e:2e:56:
ef:f5:e9:ae:3f:2b:74:23:d4:56:07:e4:69:83:bb:
b4:37:d1:d9:93:bb:9f:8f:c8:5f:af:41:c3:ca:bd:
9b:f3:40:54:db:98:e3:65:7f:72:5e:c3:ef:6c:71:
59:3f:25:8c:77:3e:eb:8c:e2:c9:65:43:22:92:d4:
1e:6b:f8:03:3a:d7:3c:cd:10:69:8c:55:ab:cf:2e:
d5:41:3e:6e:10:73:f1:28:ec:09:48:15:ff:5f:0a:
fe:94:1d:88:00:20:f7:17:90:7a:6f:bf:d8:5f:be:
de:89:cc:f2:28:69:a7:39:c6:25:30:23:6f:75:6e:
60:66:2c:06:cf:93:81:2e:0d:c0:2c:d4:b4:e3:22:
ed:7d:86:89:bd:e8:c3:08:83:0a:f3:21:82:27:13:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E7:28:90:7D:44:D2:C6:D8:63:06:A4:0C:92:EC:9D:04:83:5E:D3
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8c:a3:f6:a4:f6:88:a6:7b:1b:f6:1d:bb:f0:6d:3e:bd:6c:
a4:bd:50:ce:ae:00:35:7c:0a:61:88:74:99:35:d1:21:56:d7:
a9:fd:75:39:ee:11:91:73:21:3c:cc:63:fb:d7:50:a0:9f:18:
d2:58:0e:d4:79:cc:57:0d:60:a7:6c:ca:1b:55:14:9d:03:cf:
74:d7:23:cc:62:36:4f:ed:87:fc:d2:b4:e9:df:17:5e:da:4a:
84:4c:2c:20:56:fc:b3:35:1b:ae:ba:6e:19:28:8f:c1:8d:4b:
55:c6:3a:5e:32:f0:e1:80:eb:31:68:a2:3d:02:d0:32:3a:4b:
58:b9:75:73:ff:6e:3d:33:6d:64:47:9e:e7:a8:13:d2:dd:01:
7d:1e:9d:81:63:fa:d4:34:59:ed:e3:75:15:17:39:ed:c1:d8:
6e:fc:96:cc:c5:1e:a3:28:96:08:15:79:09:ca:5b:6a:f8:e2:
0a:10:95:fe:08:7f:e4:e3:ca:85:e7:36:bd:2d:d4:1c:69:46:
d4:17:15:6f:91:24:d2:54:39:f6:54:86:d3:9b:37:26:ca:d5:
b9:54:a3:a3:b3:45:1b:96:0c:34:cc:d0:de:c1:62:7c:c9:f7:
93:e7:2a:c5:9e:a8:66:26:ca:eb:66:e2:a1:fc:bc:a9:72:d6:
70:21:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:07 2026 by rpki-client