Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: jtFPQT8Lkszr1tWR/0GJlpeNgq5g61V/wJ3tCWIggCU=
Subject key identifier: 69:E3:3C:A3:0B:E0:CC:3A:8A:39:F7:91:1C:1B:A6:96:D7:4C:21:01
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019CABD9447DA92DEA3BA16DBF2ED297BE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0758
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: ZjE68UHCQ8tjbNZngmFPzGN0a8+NpKlbRyVwdGMjgeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:44:7d:a9:2d:ea:3b:a1:6d:bf:2e:d2:97:be:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=69e33ca30be0cc3a8a39f7911c1ba696d74c2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:67:a2:15:11:9d:f6:f7:eb:e9:a2:da:67:
42:9f:3e:1c:eb:f9:51:32:9d:4f:70:14:7d:84:a2:
c6:c4:ab:3f:6e:6a:86:2d:41:eb:62:f7:40:e9:4f:
b1:e9:1d:66:cb:4a:33:6a:7e:fe:bd:65:6c:f5:73:
7f:ad:8d:2f:4e:2e:ee:2f:18:32:2f:06:ce:d1:fb:
3c:36:9b:e1:4b:5f:28:0f:07:77:5d:fb:1f:ce:02:
c7:26:23:ac:0d:7f:b4:26:ea:e3:17:a1:fb:2e:89:
ff:1e:8f:d5:70:f3:d9:db:0b:cb:87:9d:92:2a:94:
66:5c:4f:26:4d:fd:77:c2:bd:be:1e:9f:2b:8b:07:
1f:6b:1f:5f:9c:43:38:55:c5:92:94:92:80:d1:16:
f9:ce:97:c0:b3:9a:1b:02:05:6b:8f:96:58:b2:14:
93:03:f0:57:b4:c4:30:ec:ce:bb:ed:27:a4:19:7f:
df:c1:c9:cc:04:04:66:fa:91:13:26:a9:f4:4d:79:
56:e8:a8:76:ca:9a:7d:fc:d3:41:2e:a8:20:5b:a5:
57:06:71:d5:2d:94:ad:6d:83:fb:f8:f0:ef:c0:81:
d1:af:d4:38:17:f2:5b:f2:a1:fe:21:75:5e:44:b5:
4c:e8:b1:dd:5c:70:c2:fb:9f:6e:85:87:f9:02:db:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:3C:A3:0B:E0:CC:3A:8A:39:F7:91:1C:1B:A6:96:D7:4C:21:01
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1e:5a:36:f1:f0:3b:18:6e:f8:a3:03:a6:f6:82:e5:6f:3a:
0c:c2:bb:35:77:8c:3a:90:3c:9b:63:d4:fa:a8:b4:77:1b:86:
3a:17:4a:87:f6:4f:3b:46:f9:ea:5b:63:5f:4d:b7:56:29:5e:
68:ce:ab:f2:32:ca:8f:93:40:91:26:e4:50:87:30:b2:e2:3a:
fc:91:56:c9:c1:8c:b7:96:86:c6:4b:2d:63:ca:2d:29:cb:83:
e5:22:e1:d5:29:1f:ca:02:88:19:f3:91:ff:f0:ec:49:f2:1d:
d9:c0:1b:d1:ee:d8:c5:40:45:80:ca:cc:5d:26:5d:bb:9a:80:
11:81:d9:7a:03:9a:38:ba:32:bc:6d:f7:8a:d4:d4:5c:72:ad:
02:d9:c8:37:2a:cc:9d:46:ea:72:78:26:06:97:df:81:ec:98:
73:92:f2:d5:ef:20:b3:14:58:49:fb:6a:62:3f:45:5f:96:b1:
94:4d:96:1c:87:af:ae:eb:c4:76:30:a9:25:7d:dd:06:40:1b:
38:25:bf:e3:ca:c1:ca:c7:55:15:59:a7:51:31:b1:be:5a:82:
4c:78:38:28:7c:99:76:91:6c:0e:d6:4b:0f:80:3c:41:1c:4e:
85:37:67:1b:ab:84:a8:53:f1:34:87:75:6e:89:53:4c:52:11:
35:6b:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:31 2026 by rpki-client