Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: lK+tW9f8vTlC0n4SLppd6Egk9+BgdsMhdKlX4sV2G2k=
Subject key identifier: 5B:92:13:A5:D8:46:1D:DE:67:9E:0A:25:83:35:5F:44:87:61:71:16
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019CABD973A5D2807B3982BA359AF9ED60BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: 3vyQ+g5yl1/ZIjzEiSyCsCteFZIwOVEDcqeYhlPkGqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:73:a5:d2:80:7b:39:82:ba:35:9a:f9:ed:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=5b9213a5d8461dde679e0a2583355f4487617116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:28:b0:5c:05:fb:ad:78:aa:7b:ec:19:79:
66:30:d5:26:e0:eb:5a:90:15:85:ee:40:e7:c0:8d:
36:e7:d4:f5:ab:95:3e:33:59:bb:32:d5:f8:ef:63:
48:2c:62:e3:4b:d0:88:60:04:2e:34:a5:1c:3a:a6:
e5:60:81:e3:b3:3f:bd:77:ec:fd:7f:cc:b9:40:94:
93:71:6d:d8:33:fe:67:bb:f6:f2:33:d0:55:33:30:
d9:8c:4e:7f:ba:84:b9:a4:b5:fb:07:17:b2:5b:9d:
95:d2:0e:c0:3a:5b:9c:66:17:f4:59:6c:ce:57:80:
06:a5:7d:aa:46:4d:31:96:a5:67:73:55:64:73:2e:
94:35:26:d6:98:a3:e6:0c:70:4f:5b:dc:29:1a:61:
cf:b6:d4:12:9f:e8:58:ad:f9:66:23:67:ed:d1:45:
6b:45:8a:3b:18:e6:5f:3e:28:85:50:56:38:cd:3a:
89:90:88:76:d8:d6:22:4b:17:b3:bf:3b:46:90:ba:
6f:d1:da:20:25:fc:ce:85:8c:59:2a:b2:fa:6e:73:
de:95:03:68:f0:b2:75:d6:48:ab:12:99:e1:1b:fa:
de:82:63:78:23:8b:cb:b1:a9:f2:0a:4d:a6:ca:0e:
83:da:12:ff:eb:3d:5b:5a:dc:b9:cf:f7:1b:98:05:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:13:A5:D8:46:1D:DE:67:9E:0A:25:83:35:5F:44:87:61:71:16
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:1c:d8:b1:6e:a5:27:6c:ae:94:44:86:55:6e:5b:a4:a6:
fa:2e:fb:d1:2e:1e:00:32:9d:dd:f8:42:f1:2b:2a:3a:6d:ed:
ca:ea:79:46:15:22:26:3e:9d:a3:0c:49:46:20:9e:6a:5c:ae:
fb:4c:b1:18:fe:b5:09:10:6a:30:44:2e:f2:63:c4:37:ed:f1:
c6:eb:59:34:7e:a2:ed:31:f9:9b:7c:7f:b8:7b:66:5c:1e:be:
65:97:61:ff:54:35:41:20:28:5c:c5:e9:e7:1f:6b:ee:f5:64:
fa:22:b3:43:34:a9:6a:aa:c0:66:b8:56:5d:fe:72:f8:cc:58:
12:75:f5:e6:c2:49:e2:3c:ac:49:5c:7b:3a:b6:05:01:0e:2f:
3e:b7:aa:51:01:9a:99:7d:a0:ea:66:a1:c0:8e:af:96:07:0c:
35:c5:d8:f0:32:32:50:b8:5e:76:8b:51:9d:3b:2b:4b:6f:fc:
59:0e:b1:f3:c4:d0:a1:86:cd:17:b5:ee:72:af:0d:4b:27:1e:
22:d3:72:65:b7:de:c1:82:97:f1:f1:b7:dc:11:fd:4e:c8:0f:
3f:bb:b0:5d:e5:0b:3b:31:5d:c1:5e:cd:67:bc:58:2c:af:56:
09:69:49:fc:4b:dd:d8:7f:41:91:0a:f2:5e:e8:57:5a:fb:ce:
96:14:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:00 2026 by rpki-client