Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: 5cBEJRR5yNZKQtanwakzrElG2jPMAN33Ut3VA5fwwlc=
Subject key identifier: 76:BD:1C:EE:60:1F:58:39:F8:7B:94:BD:AE:25:69:F3:F4:5D:1C:5E
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019CABD90D1935C8F51E3FBD9004D87C2FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 1206
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (hash: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: E0XszqUeUSAyvpDYHTPzf/OWJBn477UV5wtk8EWpoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0d:19:35:c8:f5:1e:3f:bd:90:04:d8:7c:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=76bd1cee601f5839f87b94bdae2569f3f45d1c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:d4:de:89:0f:b0:e2:21:b0:57:37:73:40:
a5:4a:a6:53:60:e5:ce:29:5d:44:58:00:45:33:dc:
86:e6:87:cb:7a:a8:43:b2:86:32:e8:33:5e:05:9d:
9f:35:f9:00:36:2a:19:73:9d:22:6b:c1:37:03:ec:
10:ce:28:89:82:cb:27:f0:05:45:63:71:11:ad:1f:
dc:30:3f:1c:e2:ad:83:fa:cb:3b:16:c7:d4:f6:c3:
11:27:a4:4c:d6:b0:65:78:07:60:f9:7d:21:3b:90:
60:2f:52:28:1e:ae:b7:92:7b:4c:c4:74:41:9f:f2:
23:56:a8:de:d8:25:b9:e6:ce:87:55:72:73:d2:71:
cb:86:55:e8:06:0b:47:55:be:2e:c0:62:49:8c:f0:
0c:1c:71:84:c7:b6:55:b8:aa:11:c8:ac:e4:06:47:
4b:81:c6:55:9a:d6:1b:4e:60:d4:cf:68:4d:75:09:
ae:2a:d8:40:a6:bc:63:fb:9e:5d:2d:68:9d:34:04:
72:e8:6d:40:91:46:2d:fc:3f:95:73:73:ce:a4:6a:
30:78:b6:24:6c:83:fa:f8:08:c6:81:9e:1c:46:9c:
35:5c:92:de:61:5d:4c:11:63:10:bf:eb:88:d0:d0:
29:f8:d3:9a:9f:15:bb:b7:22:67:e6:4e:49:31:98:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:1C:EE:60:1F:58:39:F8:7B:94:BD:AE:25:69:F3:F4:5D:1C:5E
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:c4:8a:5c:4b:cf:b2:cf:f7:e8:95:5c:a8:59:e3:8d:66:
e4:53:8c:c3:3b:cb:09:87:24:2d:a8:d0:43:a7:a0:33:0b:da:
1b:5a:15:fc:64:9d:f2:6a:2a:2c:d8:30:4b:56:06:a0:bf:b5:
60:f0:13:2a:70:ed:20:1a:9e:c1:bc:f6:5a:71:b5:58:1e:65:
94:6f:5b:fa:3c:e5:09:91:1c:33:e7:ee:a9:d0:d0:f0:dc:d3:
e0:6c:85:cf:59:88:35:6b:3d:cb:f0:19:91:db:ce:98:aa:b7:
12:45:55:70:e4:aa:90:5e:11:a8:09:37:20:76:f3:4d:b7:f5:
01:79:4b:70:de:84:cf:e3:0f:82:70:fb:ba:7e:1c:4d:99:b1:
22:90:1e:93:db:09:83:da:d4:de:c2:a9:a3:67:40:58:9e:a9:
7b:48:83:12:4a:ed:4a:7a:4a:c7:3a:fc:a4:36:c6:78:fb:57:
4a:6c:82:d7:bc:ef:ee:b2:b9:c1:b3:18:17:01:92:31:dd:5d:
ba:12:04:6b:e7:ee:45:68:6b:f7:cc:65:42:69:85:01:9d:7f:
d7:0a:3a:49:02:57:10:c2:99:4c:b3:8c:86:8e:c7:e3:86:8e:
c4:f1:d2:f4:85:71:fe:7c:0d:3c:5b:31:0e:ec:ef:7d:08:56:
0a:18:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:20 2026 by rpki-client