Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: A7iBG/Mvg6v2gPYjjrkjd+MBswwmxZBbPbfnvRSSXVU=
Subject key identifier: F9:2D:3E:D3:3D:74:3C:46:BA:29:03:F8:E4:ED:09:06:C5:E0:B8:32
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019CA8D84E299AB61ED8533768B84AF8C70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: 5D
Signing time: Sun 01 Mar 2026 10:01:13 +0000
Manifest this update: Sun 01 Mar 2026 10:01:13 +0000
Manifest next update: Mon 02 Mar 2026 10:01:13 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: /PN4q67Bdg1rYHFHoF0y579noQZbp1YdH1G+Oqdrb9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:4e:29:9a:b6:1e:d8:53:37:68:b8:4a:f8:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Mar 1 10:01:13 2026 GMT
Not After : Mar 2 10:01:13 2026 GMT
Subject: CN=f92d3ed33d743c46ba2903f8e4ed0906c5e0b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:ba:7a:a3:21:bd:a4:ff:29:f2:d8:62:6d:
76:dc:8d:a7:9b:ff:31:7e:3b:26:d5:f5:e1:0b:0e:
20:ea:06:d2:91:67:23:6a:33:1d:b0:55:50:e6:57:
2a:af:dc:67:8d:21:2a:09:e4:98:15:ef:b5:90:6f:
69:db:ae:56:bd:63:38:85:42:ae:7f:63:f9:2a:ce:
5e:8a:59:ba:8f:a9:f8:43:98:1a:40:68:d5:c1:92:
6c:c5:b9:f1:1f:91:43:3b:69:ca:73:f7:ac:c6:ad:
d4:24:e1:62:8b:27:cc:94:05:16:97:88:6c:fa:06:
5a:37:60:ac:8a:84:b6:2d:d9:3a:3d:b4:a1:59:b6:
ef:a1:de:97:d1:11:cc:d2:42:66:54:49:48:bd:23:
5e:fc:1b:96:91:05:e8:d3:7b:70:72:c7:02:bf:2d:
dc:ff:fc:5d:b1:a5:e1:0c:95:f7:2d:7c:8c:68:82:
cd:79:76:eb:b1:76:c9:fb:00:3d:bf:42:dd:cb:eb:
d0:22:be:3f:bd:85:e2:b7:9f:a5:2c:c7:4a:df:54:
6e:1d:d8:ec:3d:8a:e0:d2:fb:67:88:7b:45:f9:8e:
49:18:b6:6f:4d:57:a2:0c:fa:32:56:73:e6:18:9b:
b5:1d:9d:df:d1:b8:91:bf:80:24:d8:93:0c:b1:54:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:3E:D3:3D:74:3C:46:BA:29:03:F8:E4:ED:09:06:C5:E0:B8:32
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:df:2c:79:66:fa:6d:23:a1:6b:1f:27:b2:98:ac:bc:64:
c0:93:95:8c:0b:a8:7f:36:41:0f:86:78:7b:5a:eb:cf:ba:c5:
df:1a:51:e0:46:4d:ff:b6:8f:a4:36:c6:4c:d7:d1:89:fc:87:
de:0d:5c:84:50:8b:73:e7:52:20:8f:85:92:c4:e4:23:72:bd:
4e:c9:d8:67:d8:0d:f1:b3:a8:3e:64:0a:6e:a9:bb:cb:df:f0:
b0:50:54:26:f0:62:47:47:a5:10:d0:b1:52:56:68:a6:7b:4b:
71:ae:50:3d:ab:f2:1e:51:30:16:c7:fa:87:33:84:2b:8b:63:
9d:e2:34:19:31:32:3d:90:e2:fb:13:0f:1d:56:96:f7:ac:c7:
92:2b:a4:5e:61:b8:50:fe:c4:f7:79:67:c1:65:6e:76:7a:69:
85:4e:bc:e8:c5:ef:c5:8a:39:ea:45:dd:5b:12:58:e1:ab:4e:
92:3b:cf:6e:c5:3a:ab:7f:1a:bc:e0:00:96:36:42:cf:c1:ea:
ae:e8:db:e6:4b:71:00:f7:e0:cb:46:e0:de:45:ed:43:a7:97:
1a:4c:a8:91:c7:07:68:2b:a4:6a:4e:18:36:45:8f:97:ac:dc:
44:10:b6:83:08:6e:81:ae:bf:57:c2:70:c6:48:04:e7:bc:ea:
eb:40:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:56 2026 by rpki-client