Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: s6k8ZGyLxJE/oxmGDicf7GQ9AQl2Kkc1k2vq7fZ/rEM=
Subject key identifier: 51:6A:15:22:A7:50:6A:92:65:77:2D:3E:A8:80:9A:BF:FF:3A:F0:13
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 019CAC7DC2FD8F6E9E23577C273A6C1D0BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 05A7
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: xAwC9v2pDzbNDsLMQHKskO70xoQ.roa (hash: pNouLSLbbOHtlI8iLu58m9dwfp4hUJRS+ezdGScljvg=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: abpEC3cLEybXlyBWI48A3BZ2Cts9uMoRJ5HmAEGBGm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c2:fd:8f:6e:9e:23:57:7c:27:3a:6c:1d:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=516a1522a7506a9265772d3ea8809abfff3af013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:28:60:28:f6:5b:f5:d5:2f:26:b2:95:15:
04:61:4d:21:f7:a7:91:a2:60:d2:9c:d1:cc:fb:c7:
ff:32:c3:6d:6b:62:88:e6:8f:22:d7:aa:ba:cd:31:
de:28:7e:b3:c0:cc:72:5f:8b:1c:3a:fb:45:4a:f0:
bc:a2:84:8e:0f:89:b0:7a:98:74:82:8a:ce:d5:20:
6d:09:ac:3a:2b:23:f4:40:31:9d:94:99:56:92:cf:
ce:74:33:f2:cd:71:ed:a5:d7:da:00:83:23:17:7c:
ab:1e:50:82:ae:47:fe:f7:05:7a:f2:39:d7:04:72:
96:ff:c1:7b:9b:c1:bd:5b:8e:47:50:3f:e5:38:4c:
0a:0c:5d:ed:66:58:40:99:f8:6c:3f:02:12:2a:fd:
b7:ca:51:8e:56:27:e8:dc:4a:b5:f2:f7:97:a7:98:
bf:5c:c9:ff:93:57:95:59:42:7f:33:15:cd:ae:57:
1d:a7:93:aa:1a:cc:cb:dd:13:cb:d1:d5:f8:1e:1b:
78:06:95:ac:89:16:68:dd:98:83:08:6e:a2:b9:50:
27:79:8f:11:23:d3:f1:ae:71:5f:54:24:67:1e:a0:
c9:7a:b4:df:6a:5d:b2:69:89:e2:d7:fc:4b:2a:e9:
dd:0d:02:bb:e3:2e:f5:4d:dc:d2:37:c1:9c:1f:90:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:15:22:A7:50:6A:92:65:77:2D:3E:A8:80:9A:BF:FF:3A:F0:13
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:b8:25:be:dd:53:7f:2d:41:ca:4e:20:30:ca:da:b9:5c:
d0:6e:8b:b6:f9:65:46:3c:6f:54:4e:88:fb:6d:98:27:4e:17:
5c:57:9d:9d:e1:a7:a9:a3:fd:c8:d9:88:9b:47:f5:b7:4b:68:
f6:1f:dd:52:d9:d3:d2:30:ff:53:f2:bd:19:2b:55:d1:35:da:
63:1c:3c:4b:eb:3d:70:93:ab:dd:c6:2a:a3:e7:cb:49:97:c4:
30:8f:53:f8:4e:1b:54:a1:c6:31:b8:f8:b3:87:06:aa:ff:10:
22:ae:21:d5:40:7b:84:a3:e5:8f:08:18:be:35:01:82:a7:53:
78:b9:64:17:66:47:b4:f9:e4:e3:47:80:78:5d:c9:6d:88:2d:
50:35:bc:25:f4:27:78:6d:ec:15:4e:1e:23:dc:24:65:96:6c:
60:0f:43:83:7a:0c:d2:6a:62:ba:a8:13:73:7e:04:17:4d:e2:
5f:0b:97:2d:63:bf:37:7a:74:43:bb:a3:47:85:10:72:04:f3:
68:dc:d4:fb:c5:92:3d:aa:12:06:c5:36:0d:f3:5d:10:2e:47:
63:06:ac:02:f3:fd:9d:56:85:a8:59:c5:60:12:c9:06:5e:4d:
88:2f:50:50:3e:f8:8c:0b:df:76:9f:d3:33:ec:e2:ae:cb:80:
0c:3e:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:44 2026 by rpki-client