Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: h4RForVQ5gCPGckY+GH4OeyM6D3pYAp7BueMGiu0ypw=
Subject key identifier: F2:35:B3:31:54:CF:E6:CD:1D:48:9A:AE:16:6C:A7:46:7A:CE:95:8D
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019CAD226A7A6865F7116533A12B7B81487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 0473
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: QWfQGr4z8VEUuY5YGNgr59n5bZA.roa (hash: lETgMikwnnnSO1uZ9XbjvLYBMxyEwNCLWUmrzKcWQbI=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: d+nOVTJ6JP/YutRBM/g/eNFYcNqooQDbtpTKN0gtUAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6a:7a:68:65:f7:11:65:33:a1:2b:7b:81:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=f235b33154cfe6cd1d489aae166ca7467ace958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:71:03:20:8a:8e:c2:2d:9b:3d:50:7f:1a:
b5:d5:46:fe:3f:a8:27:6b:27:e3:29:83:2d:f3:86:
27:1a:bd:79:fe:e9:fd:62:79:1f:ce:d5:f4:c3:46:
10:c1:4a:12:c1:36:d4:f9:84:17:0f:07:67:e0:b9:
4e:a0:c0:51:76:df:4e:27:57:53:c9:16:5f:bc:42:
db:dd:dc:04:6e:f5:47:93:ac:2a:f7:71:27:68:e8:
dc:7f:54:57:49:e1:df:aa:65:b5:88:6c:7a:e2:e4:
a9:f8:ed:08:c8:45:d8:1e:f7:32:bc:17:30:e6:ed:
c0:4a:43:a6:b0:fd:2a:3f:fc:c1:49:29:d3:31:38:
8b:02:20:3d:c5:f5:ef:b2:0f:fd:ed:25:af:5b:4e:
1d:4a:d7:2e:aa:27:4b:c8:b3:ae:44:ad:cd:9d:99:
a3:8b:19:97:7c:a1:39:78:49:99:4c:5b:99:9c:92:
b8:e9:06:55:83:7f:03:4b:0f:d6:c3:31:32:3b:7d:
e2:5d:64:ee:93:5d:1b:a3:1d:a8:41:bb:8d:d3:1b:
be:f8:d0:16:19:b0:53:5a:b2:ae:cd:68:b5:1c:0b:
4c:34:fd:e2:71:9b:93:60:69:07:21:4d:17:93:30:
61:fa:a3:cb:53:84:c5:66:e9:35:7c:23:44:81:51:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:B3:31:54:CF:E6:CD:1D:48:9A:AE:16:6C:A7:46:7A:CE:95:8D
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:29:6f:6a:bc:f7:a6:74:6a:86:01:20:34:81:be:fa:cf:
4b:c0:1a:1e:82:29:ae:1d:60:fa:db:61:5c:6e:c3:da:fd:12:
a9:ca:07:8e:3b:7e:79:64:c1:cf:e0:28:21:8c:96:5c:d0:b2:
d4:6c:b3:8d:10:92:75:6b:c7:76:27:65:8e:e1:38:2b:ed:e2:
c0:20:85:18:15:47:7b:a8:34:c8:c8:ce:39:23:ff:68:ff:8d:
2c:8f:5b:ea:7f:1d:fd:62:a2:77:5b:f3:69:7b:2d:55:09:f4:
17:f9:ec:a4:9e:53:70:e5:e3:45:45:56:18:75:dd:56:76:6b:
82:cd:1c:0f:d0:11:42:8d:ea:ab:11:6b:f0:93:3d:d6:88:14:
be:17:0c:3e:b6:b0:a4:74:46:89:52:62:24:d5:a4:6e:0e:14:
05:59:b4:77:99:86:8d:7b:fe:68:29:2d:f9:2e:e6:c9:1f:de:
36:6c:dd:fa:b6:ae:69:64:db:b1:fc:14:27:16:73:bd:2e:bd:
78:41:6a:dc:ce:28:0b:8c:01:e9:23:2a:db:67:12:09:fc:cc:
57:f0:5f:18:cd:1d:4a:e0:0a:32:9d:f2:85:5c:34:05:45:dc:
23:d0:df:43:30:bc:1b:a6:69:db:43:09:72:a9:5d:d9:6d:69:
2c:e7:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:31 2026 by rpki-client