Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: WltrM8+/INK2hQE2Trou48mbYxTKx0MlThzTVILN5DA=
Subject key identifier: F2:CC:52:A4:55:DB:B2:C4:4A:CF:B0:23:B7:82:6A:F3:92:7F:94:F5
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019D2B4E62BA3C057C0F87F46EFB9AA060B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 18:00:50 +0000
Manifest this update: Thu 26 Mar 2026 18:00:50 +0000
Manifest next update: Fri 27 Mar 2026 18:00:50 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: aYU7OYCRFHnTLxdN0VnCQ8jXCRFIeVA0CcOcNhvIjNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:62:ba:3c:05:7c:0f:87:f4:6e:fb:9a:a0:60:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Mar 26 18:00:50 2026 GMT
Not After : Mar 27 18:00:50 2026 GMT
Subject: CN=f2cc52a455dbb2c44acfb023b7826af3927f94f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:8b:03:69:6c:41:c4:2e:05:23:c4:99:62:
65:0e:37:c1:7a:cf:8e:06:1f:09:8c:59:af:c3:a1:
3f:e4:87:2f:92:c5:6a:f3:79:a2:e2:81:51:30:5d:
54:36:bb:5a:85:64:88:3a:a9:34:6b:57:9f:8f:fc:
ec:77:b3:a9:c6:35:d4:f8:e8:3d:1c:e7:55:1c:90:
da:d5:ae:27:64:9e:ff:00:bc:93:05:2f:9d:c5:20:
43:cd:63:93:90:3a:ef:5a:bb:e1:62:e7:61:cd:de:
32:45:47:81:35:0d:45:46:9e:d2:43:7a:d8:0d:12:
a5:aa:bf:e2:19:93:bb:a2:a9:80:73:c4:a2:87:ef:
f2:bf:d9:e6:14:b3:9a:42:43:ac:2f:26:f9:a4:64:
b6:73:a3:c0:5b:aa:3c:86:95:56:f4:ad:88:00:1a:
61:ad:6e:b4:a6:25:57:45:ba:2e:e5:7b:af:44:b2:
9e:5a:64:4a:60:99:21:55:f0:aa:52:13:cc:4b:34:
61:4b:4e:e3:e1:08:88:a2:67:bd:9a:c7:b2:e1:37:
0b:6d:3e:ef:30:79:12:e6:9b:cf:29:3a:d1:49:7f:
1c:3b:44:2d:8a:90:6e:73:1d:ea:f2:1a:b6:29:e2:
3d:5f:10:9b:c5:b5:e3:03:7e:2a:23:d0:09:ce:2c:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:52:A4:55:DB:B2:C4:4A:CF:B0:23:B7:82:6A:F3:92:7F:94:F5
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6a:89:4e:35:32:8c:cb:a1:f2:0f:17:5a:a5:42:c0:f4:10:
45:d3:ee:7f:2b:60:f8:23:8f:3c:0d:32:bf:cd:1f:80:55:21:
a5:17:c2:a1:b1:0e:54:c0:2f:04:5d:66:6f:51:a7:0d:c6:1e:
59:80:1c:2f:30:23:8c:db:5f:79:ca:24:5b:3d:11:ad:7b:d2:
93:c8:a4:88:f4:82:51:10:5b:33:13:6a:72:cd:32:f6:39:16:
46:33:65:1c:7c:c5:c2:b8:bc:d9:09:51:a3:88:e1:bd:3c:e3:
c1:f6:28:83:6a:98:45:47:05:46:67:fa:f7:19:13:aa:e8:cb:
c5:d3:52:d6:98:ca:b3:ec:37:07:1c:df:1e:19:07:84:32:01:
6c:c4:cd:e0:c8:f9:01:38:c4:f1:78:86:ca:e0:23:62:e6:d0:
cd:a8:21:1f:65:84:6f:79:99:ff:22:a7:0c:9b:a8:4a:e7:c8:
42:3f:0e:81:64:da:52:1f:6e:a2:b6:86:a8:84:5c:3b:05:a2:
be:8c:98:c5:c2:44:f1:50:d2:ea:9d:cb:0e:8a:48:6b:2c:1d:
4c:78:ee:11:23:1f:80:b2:a2:8b:80:78:5c:b7:16:ee:e0:15:
d2:7e:56:67:e0:75:2f:2d:41:75:a3:e9:2f:2f:ee:31:cc:8c:
f4:ab:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:34 2026 by rpki-client