Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: dPZozkiNQupygr6QWuqbOtnlBKMJOySeH1vWFxASvIc=
Subject key identifier: 09:A8:D5:05:5C:3E:FD:B1:51:BD:44:38:21:06:87:D2:24:8D:50:83
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019D2704023CEE6C2210ADC07806CF176656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0687
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: 12r5iDgWvwsfOuY62IZTikj8QKg.roa (hash: y5zUQQDYJqybKXwbKXQWR71NYli16e7rtRVTqKRI2pI=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: TUpsEYX3BqIes+WCsruIaHpXCIcgzlM/p3ci9SxyOg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:02:3c:ee:6c:22:10:ad:c0:78:06:cf:17:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=09a8d5055c3efdb151bd4438210687d2248d5083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:93:83:e9:2a:8a:10:2a:9c:f8:c3:f8:3a:
c3:10:b0:1c:f2:df:1d:d6:9d:a8:e9:b1:1b:81:fa:
dd:dc:2b:f5:03:6f:64:ab:07:cc:9c:6a:d8:f6:3c:
65:de:de:16:eb:1b:a4:8a:65:fb:f2:c0:3d:5a:99:
04:01:a6:bd:7f:ec:1f:2c:ec:97:69:58:f3:89:3b:
ea:03:c6:00:5b:73:c4:04:5b:3d:7a:65:42:ad:0e:
5a:cb:9a:19:1e:f6:19:c6:8b:9a:d0:87:5e:4d:63:
07:37:bd:b9:d8:8b:ce:cb:f3:b7:0a:cd:1b:75:05:
df:bb:67:87:e7:94:22:55:d5:31:79:81:37:db:6f:
89:a7:96:a8:3a:7e:81:f4:e1:dc:7f:67:15:4c:97:
dd:f6:79:32:81:21:52:f3:0e:29:15:2d:c6:c0:1b:
24:bf:d3:84:fd:a7:67:e1:fa:15:d9:54:dc:25:cc:
73:11:59:07:0a:0f:7b:c6:d9:0f:ad:26:f7:af:95:
18:7c:5a:3d:88:ce:39:7b:29:4b:d0:74:6d:8d:7e:
29:a5:ae:62:c6:af:8e:7c:32:2c:c1:fa:46:16:4a:
bc:1f:a5:d6:32:64:39:1b:42:ce:cf:68:34:ec:59:
bf:ab:a1:f1:3a:7f:a1:7b:41:4e:0f:2e:d1:0e:b6:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:D5:05:5C:3E:FD:B1:51:BD:44:38:21:06:87:D2:24:8D:50:83
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:2b:69:5d:69:a5:b8:62:f0:88:5f:c6:fb:9d:c2:5e:bb:
5a:6b:2e:4b:35:a1:8d:fd:0c:cc:0d:88:58:ac:b8:72:36:0c:
5e:be:47:83:ef:97:64:30:cd:b5:d8:5d:7b:39:86:05:cd:61:
09:76:44:d3:ce:3b:6c:95:b4:62:89:e0:79:d8:28:13:80:06:
70:64:15:b6:4f:46:2a:fe:a5:a8:4f:58:ab:a5:2b:86:a6:d6:
9c:09:6e:0b:c2:fc:a4:e8:de:a7:c7:f6:d2:27:bd:1d:0d:60:
05:b2:4e:26:47:ed:09:f3:7f:86:41:ed:5d:df:fd:fa:4d:70:
a7:8a:31:37:57:9f:9d:4a:ab:4c:b2:7f:72:32:8a:63:04:82:
f5:a4:5c:68:ec:ba:a2:47:d6:de:87:d5:50:42:39:96:1e:da:
4e:26:ab:39:7d:91:3a:3d:78:d3:7b:ed:73:00:40:c9:8f:44:
79:f4:eb:f4:80:c2:89:71:50:94:b3:e7:3f:ff:9d:fd:f7:bf:
9c:72:e7:b1:db:02:b5:45:87:27:2e:68:09:9e:15:eb:2c:3e:
5e:b6:b7:16:5a:93:81:02:8c:7f:03:1c:d6:2b:92:d2:3f:04:
c9:bd:40:62:8e:ad:75:39:45:0e:9b:85:36:ef:8a:bd:3c:b0:
1c:bb:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:37 2026 by rpki-client