Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: 7hve4dpJNIEml3gygCY8KzR5UI/QHTrO/QuVbIe8j/0=
Subject key identifier: 28:68:AD:2B:50:0B:C9:17:6E:14:7D:DC:53:F4:EC:D3:E9:BF:DA:93
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019CACB52E90195B6F96966FE15A4FA56959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 0867
Signing time: Mon 02 Mar 2026 04:01:20 +0000
Manifest this update: Mon 02 Mar 2026 04:01:20 +0000
Manifest next update: Tue 03 Mar 2026 04:01:20 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: h6O4CUjHe3SdJAC5TDotT+P55QJukFy4B8iLrH0JjLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:2e:90:19:5b:6f:96:96:6f:e1:5a:4f:a5:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Mar 2 04:01:20 2026 GMT
Not After : Mar 3 04:01:20 2026 GMT
Subject: CN=2868ad2b500bc9176e147ddc53f4ecd3e9bfda93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:13:85:ec:da:5c:e5:1b:8d:d0:47:d5:5a:
c7:61:38:b3:67:13:1b:63:cc:7a:f1:27:7b:f1:9a:
32:25:a5:56:53:a4:31:9c:36:f3:7d:34:c3:4b:f0:
db:e4:e0:64:c9:c1:27:8e:d6:62:48:29:53:05:dd:
4e:72:db:66:ac:a1:46:87:a7:96:67:25:e6:25:5e:
88:78:b1:17:43:2b:0f:c1:92:9d:f8:f3:8a:0c:3c:
73:3f:bf:18:0f:7b:fb:01:34:02:67:c3:a5:d5:1c:
98:8f:ef:dc:84:3e:3f:14:fd:f4:6a:b0:e7:b6:a6:
7e:ad:d8:eb:fa:52:31:40:7b:01:aa:28:15:d1:74:
01:87:a7:eb:b4:a0:4f:d7:51:81:76:80:71:ac:7e:
f6:e4:59:87:50:d3:90:c1:0b:ef:04:21:d1:47:34:
d0:ac:32:2f:13:0f:d3:2e:85:56:df:2b:db:2c:27:
f7:c7:35:d9:fc:8c:84:26:39:35:93:45:00:05:6e:
44:cb:0b:d4:e2:81:cc:85:fc:d4:1e:01:99:20:da:
d8:8b:5d:94:34:6b:32:a9:c9:a5:62:75:b7:ca:eb:
b8:8f:9c:f2:0f:81:61:22:9a:58:49:f2:bd:76:b9:
8e:b4:26:ae:e4:31:f1:b9:c2:b8:4d:ff:20:90:af:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:AD:2B:50:0B:C9:17:6E:14:7D:DC:53:F4:EC:D3:E9:BF:DA:93
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:35:47:2b:31:10:d6:47:a1:5a:bb:e7:6b:18:58:d9:34:
c6:36:58:a4:63:ed:d4:36:2e:1f:c2:33:d3:dd:81:de:e7:cd:
4d:3c:86:bb:46:06:c3:d5:a2:40:50:e2:fc:88:65:67:c1:33:
f2:31:22:d8:bb:f2:a8:96:40:77:fc:bd:d8:1a:7d:c3:43:97:
34:00:6e:67:ec:76:5a:8c:f2:e4:65:15:f3:8c:d7:aa:65:74:
06:4b:a2:e8:f9:ae:f2:e1:e1:c4:35:d1:33:f5:15:b1:09:fa:
ad:07:58:53:14:9e:86:a1:7f:fc:c3:c8:2e:ec:4b:01:c6:ef:
1e:b5:8e:dc:04:02:d4:9b:79:a5:80:b6:66:91:a5:c8:88:1f:
d7:c7:ff:89:81:64:20:b2:41:c3:e4:ef:af:14:7d:9e:99:73:
ae:d8:3b:bf:bd:43:25:ca:dc:b1:2b:44:eb:fa:b2:ff:b2:6f:
f9:8a:1d:67:73:ac:4d:e7:24:c7:7c:8f:be:b9:28:1d:85:ff:
a3:a7:5c:c3:05:35:fb:c2:d6:fb:15:16:1d:fc:d0:8a:ec:2e:
59:8c:bb:c5:cb:b2:5d:43:37:e1:db:63:76:ae:f1:07:ce:c5:
6c:0d:77:d1:24:f1:a3:08:f2:86:41:aa:42:04:11:0b:f3:39:
d2:fa:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:52 2026 by rpki-client