Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: I4s/iITDLyIhnwLPwmOhJfXpcIy5O0eHHoaTpnfhubE=
Subject key identifier: 0B:30:D6:BF:38:EA:F4:EF:3F:15:22:23:B1:2C:02:DD:D5:2B:77:A0
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019D9BBE5805BD55392120E0DF75A8DE0C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 031A
Signing time: Fri 17 Apr 2026 14:00:35 +0000
Manifest this update: Fri 17 Apr 2026 14:00:35 +0000
Manifest next update: Sat 18 Apr 2026 14:00:35 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: wga+oVdzoe8WPg6HxNr/yMfEZZct7U4xohErYuR0y30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:58:05:bd:55:39:21:20:e0:df:75:a8:de:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Apr 17 14:00:35 2026 GMT
Not After : Apr 18 14:00:35 2026 GMT
Subject: CN=0b30d6bf38eaf4ef3f152223b12c02ddd52b77a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:b7:77:91:68:ef:9b:36:6a:70:29:97:fe:
bb:8c:fa:11:24:ac:70:10:33:24:ab:2c:d5:47:18:
65:e2:bb:b2:bc:aa:e9:11:a0:b1:e9:a0:01:f7:8b:
b1:d2:42:3a:6c:15:63:24:c7:b3:9d:29:e0:a5:99:
ef:a2:00:6c:a0:f8:d1:76:44:05:81:31:28:dc:3d:
fc:f1:67:91:2c:ec:d4:cd:62:ff:a5:53:5a:11:65:
83:d4:4a:28:c5:2b:6e:94:e1:35:5f:0f:da:f8:06:
b1:15:84:76:60:ab:52:2e:d2:92:9d:87:16:54:52:
ff:45:9f:f5:ed:1d:1b:2f:01:ab:9b:99:72:dc:dc:
64:e8:ed:eb:c2:ce:bf:aa:bc:a5:05:51:a5:43:2c:
63:0a:0b:7c:46:72:5b:2f:40:c8:60:bf:f9:3c:24:
9b:c3:29:d6:d6:40:a6:d7:86:9f:5f:1d:6a:8d:b4:
94:a2:44:5f:71:0a:a6:5b:65:f2:f7:36:1c:53:47:
78:8b:e2:80:26:f9:2e:00:9f:e5:06:0f:1f:76:4f:
39:ef:e9:46:80:92:b3:32:bc:6c:c1:ed:26:fd:f2:
7a:4c:b1:aa:95:bf:70:f0:0b:d0:31:c1:75:12:66:
45:21:47:8d:95:0d:cc:d3:10:34:f5:e3:6f:3e:e8:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:D6:BF:38:EA:F4:EF:3F:15:22:23:B1:2C:02:DD:D5:2B:77:A0
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:26:59:4e:6f:23:c7:41:5d:1b:0b:b6:f4:7e:a3:87:b8:
e6:19:ea:8b:79:e4:4d:e2:0e:0c:46:14:96:15:9c:85:25:85:
ce:bd:a4:c8:e7:ec:c8:1d:1f:e0:5c:7f:99:31:ae:05:cf:b2:
9b:71:f7:d4:16:28:e4:3d:93:1b:ac:e2:df:41:ad:7c:bb:51:
3a:7b:96:22:09:2c:41:14:84:3e:0b:09:17:30:56:98:22:c4:
ef:61:08:b7:3f:41:7f:71:1e:0f:f6:82:82:fe:af:0a:16:6d:
d5:9a:d9:f9:8d:e0:fb:62:a6:40:dc:b4:98:8c:fd:dd:9a:7e:
26:bd:b8:11:d8:49:c7:b9:58:d1:f0:ed:e2:c0:0c:07:4c:f1:
0a:07:f7:dc:3a:94:07:49:14:21:5a:96:f1:fb:3c:ad:53:ad:
bf:0c:69:d8:8b:2a:95:52:13:43:2e:89:31:ec:6b:e0:a0:e7:
64:a5:b7:e8:90:56:be:a4:92:6f:34:bf:57:21:47:87:47:72:
73:56:e4:f1:05:32:13:6d:15:90:25:cc:56:d5:d1:06:8c:81:
43:60:da:07:45:b1:e5:c0:18:5d:c1:e1:f2:57:45:a7:bc:8b:
29:4a:89:2e:76:fe:2b:ac:1f:bf:c2:5b:8a:e7:a9:45:88:b8:
24:1d:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:21 2026 by rpki-client