Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: ohfV6Y8BW0brUJMU4836Z4637rRlDp4EQgA8kGPC28I=
Subject key identifier: A5:DE:06:59:9B:CC:80:14:2A:82:18:EC:37:7E:EB:A4:B1:41:04:BD
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019CAAFD4965C8842C14D1DC96DAC66A6D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 0594
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: WdcwwVvHHM9XNKKDiv408pGW0_s.roa (hash: 8+/x9c3F4SvSIKBaDBTfqOk6wDn1R73L7fhpNgptXLw=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: xvEnbRejchPflfrz4NtQ9ANGIGvG7KPTaMjN40bvdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:49:65:c8:84:2c:14:d1:dc:96:da:c6:6a:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=a5de06599bcc80142a8218ec377eeba4b14104bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:bd:9d:82:4f:f4:c3:4f:8e:a2:ba:47:67:
b3:dc:15:1d:9b:6b:6f:b7:8b:cc:21:77:81:dd:60:
1f:96:89:34:41:c0:12:42:ca:ef:43:a1:99:57:77:
b6:df:7f:ef:5f:b3:06:bf:78:8e:c3:cf:5a:bf:3e:
a8:e9:c3:3b:8a:f7:aa:d9:f4:b0:66:e5:c0:08:85:
69:1b:b3:c4:1d:a0:e4:81:62:c4:0a:88:78:c6:4f:
c2:86:4a:b4:6f:1b:60:d5:5e:cf:92:8f:ab:9f:bb:
d9:6f:ea:86:f7:ab:ec:71:3d:e8:b7:24:81:fe:df:
f1:81:3f:10:f9:88:ce:5d:c3:58:96:dd:c2:97:24:
ff:ab:07:21:ea:22:ea:ce:66:e4:01:b9:4c:ec:56:
50:1a:b1:0e:7c:72:e1:a9:02:a3:8f:4d:26:34:de:
72:a7:54:64:2a:aa:34:af:55:9e:80:16:21:4c:f9:
6e:3f:f1:eb:26:6f:1a:ab:74:d0:b2:46:ff:00:b0:
aa:57:e1:33:91:ff:6a:10:65:4b:37:f2:95:df:30:
be:c3:7e:46:5a:6a:b5:7a:ec:64:3b:3b:6c:03:35:
21:eb:8e:ea:c8:8d:52:29:13:8f:69:30:f1:35:c8:
5e:01:d0:09:11:b7:68:b3:2d:d3:9c:40:cd:b1:f2:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:06:59:9B:CC:80:14:2A:82:18:EC:37:7E:EB:A4:B1:41:04:BD
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:b5:de:52:3b:37:19:66:5e:74:1b:54:be:1a:0c:11:e0:
85:db:23:51:eb:50:97:fe:e9:ba:d1:52:87:28:4f:ae:70:fc:
f7:77:73:81:c7:33:4e:32:c8:dd:94:30:76:41:cf:d5:69:80:
8a:4c:e5:6a:55:ae:dd:45:9c:06:0a:ec:63:41:e6:de:c0:66:
4b:31:70:ee:1e:4b:c8:ec:df:21:d8:5f:d3:20:7e:ba:b3:f7:
61:8f:40:e5:f2:43:df:40:0d:4f:23:ac:c4:4f:d9:03:c1:84:
f6:9f:b4:ce:d8:ff:f5:12:3c:b9:3a:27:b3:d2:d4:97:46:00:
78:97:da:db:11:b2:b8:5e:b6:f6:d2:9a:11:8d:e5:fc:c9:b2:
14:ae:e5:8d:b8:e2:2d:2f:e4:3d:a4:8b:a1:1e:b0:07:5f:ad:
cd:0f:36:05:66:57:93:1d:ff:f5:84:cb:d9:c4:f5:88:67:7a:
04:ae:db:dd:d9:9b:58:c1:93:b5:62:f7:8c:33:59:53:1a:30:
6f:8f:e4:e7:fb:45:6c:76:82:72:92:50:b8:ab:7e:aa:c2:1f:
af:d3:46:93:23:ee:e3:c7:b4:d3:51:60:8b:19:c5:5d:b1:a2:
7e:e7:ae:e7:9d:98:42:6b:eb:a6:6a:66:8d:6c:d7:af:6c:09:
40:e9:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:16 2026 by rpki-client