Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: 5S5XVOxW2lJWECKUa/a/Zc2ZMy2O2casQhR/1OHv8vg=
Subject key identifier: 2C:8D:E4:8B:D0:78:1B:59:61:1E:6B:6E:32:30:3C:77:70:30:DC:16
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 019D2A3C7C98020D60062976650FB0A714CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 0990
Signing time: Thu 26 Mar 2026 13:01:40 +0000
Manifest this update: Thu 26 Mar 2026 13:01:40 +0000
Manifest next update: Fri 27 Mar 2026 13:01:40 +0000
Files and hashes: 1: Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa (hash: GlJGpBWeWcsOeO74Qp/VHrmeF+iq8Z/F3boS8FvHYJQ=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: k+lh+wa/xiVkfS6v8akvelBLshcpJAJA4MEpUX4ni2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:7c:98:02:0d:60:06:29:76:65:0f:b0:a7:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Mar 26 13:01:40 2026 GMT
Not After : Mar 27 13:01:40 2026 GMT
Subject: CN=2c8de48bd0781b59611e6b6e32303c777030dc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:c6:ec:ff:ce:79:f3:53:4a:7c:64:79:37:
9b:2f:a1:13:68:30:3f:d6:ad:65:72:c4:eb:6a:a7:
99:b7:b3:a0:62:85:63:e1:71:a9:c2:e3:c7:3d:5f:
9b:da:c0:6b:6e:ef:9c:c3:cb:d0:a0:56:53:f6:21:
5c:9d:c2:c7:60:20:f7:5a:dd:08:2e:da:f0:a5:24:
8a:b3:d2:29:1d:01:d4:d3:5c:66:44:03:b2:7d:be:
96:1d:f3:14:f1:13:87:46:25:96:b0:7f:e9:a4:f8:
3d:5c:f8:c2:bf:c0:6c:55:35:e2:bb:25:2d:b6:88:
6b:df:23:62:71:e3:69:e0:dd:e8:11:54:27:dd:c1:
63:ab:b9:56:1e:3e:eb:f0:75:ed:22:92:df:f4:1c:
23:7a:64:a1:e2:d0:3e:8d:4b:c6:5c:11:17:3f:b5:
4b:ec:30:93:34:37:92:61:a7:b5:8c:5e:64:f5:3e:
a4:2c:7c:bc:9f:87:7c:d2:30:fc:57:be:59:fe:58:
0d:57:7f:6a:7c:b8:4c:d9:af:3d:68:6e:e5:c7:40:
a6:75:8b:e7:4e:c0:7a:76:97:17:16:8f:e7:64:b2:
60:9d:a7:36:0f:3a:ee:90:57:49:44:41:df:31:5b:
17:79:b0:fa:a5:ce:32:a0:eb:05:e8:48:be:76:0e:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:E4:8B:D0:78:1B:59:61:1E:6B:6E:32:30:3C:77:70:30:DC:16
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:6d:e4:2f:0c:0a:08:a7:a8:56:18:76:8f:ef:80:6e:a1:
0c:08:8b:1d:f9:8e:13:e6:29:5f:63:93:b6:d0:95:16:a0:88:
41:51:65:b6:c3:d6:5f:bc:fd:44:6d:c2:ad:3a:a4:0c:5e:59:
df:6d:5f:f9:14:f1:45:9e:2d:e3:ce:18:59:ff:74:65:4e:04:
a8:6b:64:e4:0a:1b:a3:c6:bf:f3:a5:50:7b:2b:f7:36:35:fc:
13:c1:33:c0:30:5f:06:52:a0:d0:98:05:3c:6a:8b:f8:e9:db:
06:32:ee:2c:28:6e:3e:02:88:fc:c0:fc:f9:a6:9c:55:f1:00:
30:7f:41:6a:b5:0d:20:21:66:ad:0f:e6:1f:af:a9:e0:0a:e7:
3f:71:b4:e1:88:49:c9:12:69:ab:e8:3c:df:b7:d0:0e:4f:f3:
12:4f:98:e6:4f:8d:ab:73:e9:9c:e3:9e:ff:ce:b8:29:95:96:
db:ca:1f:0d:6d:89:75:a4:e0:c1:7e:e5:cf:27:f6:d5:8b:85:
32:2a:29:f7:79:ed:3c:2e:6f:38:c3:d4:6f:44:b5:f7:bc:b3:
05:a8:22:d2:44:d9:5a:66:c9:9d:73:e7:f9:20:60:d4:73:2a:
ff:95:0f:d4:02:c5:c4:08:4b:fc:57:4e:b9:5b:bb:8a:df:ee:
c7:0f:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:34 2026 by rpki-client