Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
File: ybssFI7w7gD_WiIa8bxhx-GKpLw.mft (raw, json)
Hash identifier: 3DkRzK9VtlKX8BNAIRULRKdXribv+KygGqpIIG+3rhQ=
Subject key identifier: C9:34:40:72:68:5D:6E:DB:45:E2:7A:E6:9F:9C:D9:55:B0:5D:A5:50
Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Certificate serial: 019CA9463ED36E1000220A85DE37C07D0483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
Manifest number: 57
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (hash: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0=)
2: ybssFI7w7gD_WiIa8bxhx-GKpLw.crl (hash: EVfAOltFxSgfAMKCe2nGtY8e8nY8bVeG8y8tpjPOmig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3e:d3:6e:10:00:22:0a:85:de:37:c0:7d:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=c9344072685d6edb45e27ae69f9cd955b05da550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:04:e4:c1:3f:38:e2:5b:2c:a3:1e:1b:55:
55:8e:09:72:0a:1d:5f:cc:d7:6b:d4:b3:7b:68:c3:
8b:29:85:2b:6a:84:09:dc:8f:e7:75:06:e7:1b:38:
65:38:55:0f:fe:48:e2:c1:83:db:81:c7:27:3f:7d:
08:e6:74:5b:5d:8c:f8:12:06:39:98:3c:f2:07:c6:
90:d6:c7:af:7a:c6:30:3c:73:27:64:52:09:8c:d1:
8f:13:18:ae:92:99:7f:84:60:8b:fa:43:b4:89:dc:
f4:ad:c5:dc:b2:65:8d:79:ec:dd:48:28:f8:ef:80:
46:78:e7:ee:e2:db:b3:28:6b:91:aa:50:70:0e:75:
00:c1:bb:99:b9:c7:70:f6:19:72:07:f1:4d:fa:76:
41:ae:ad:e8:f4:cb:45:17:e4:09:51:2e:ad:14:c4:
a7:4b:fb:d2:eb:ce:58:2b:64:e3:cc:e2:8c:cb:90:
69:e4:da:b3:b2:9d:11:de:f9:4d:da:b9:57:36:67:
e4:c5:3f:1a:77:75:e3:cf:b3:88:49:cf:1a:61:e8:
06:8a:bd:b4:a5:58:99:d2:a3:02:f0:a5:bd:43:cb:
d7:f4:6b:24:32:56:67:e6:c1:c3:65:67:70:73:82:
f3:38:8f:3d:6b:2f:47:df:e9:e3:79:1d:ab:ab:51:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:40:72:68:5D:6E:DB:45:E2:7A:E6:9F:9C:D9:55:B0:5D:A5:50
X509v3 Authority Key Identifier:
keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:0f:9a:89:8e:1b:b2:ef:28:87:ba:6d:f8:e8:b1:7b:14:
2d:f5:04:b1:a5:5f:b7:28:9e:3a:b0:b3:67:72:6c:4e:ad:84:
77:45:38:43:43:0b:1d:a5:d4:4e:a4:4e:2e:3d:da:0d:8d:d0:
6f:f1:65:d7:ba:60:b8:37:10:de:c4:ce:7e:c0:f4:84:c7:88:
15:b7:c8:9c:9f:58:26:8a:1a:8d:e3:e6:6b:b4:49:02:6f:d7:
64:05:91:cc:16:f4:32:c5:4b:6b:05:1b:82:81:97:6c:82:46:
12:74:d0:1c:b4:a4:f5:0b:54:74:8f:69:a6:bc:4f:ec:60:82:
89:8a:2c:5b:88:1c:ac:6f:5b:14:d2:bb:f7:4c:9b:79:0f:54:
37:1e:b5:49:3d:82:b5:8e:97:2b:bf:fc:59:b5:77:b7:cf:ab:
eb:4e:02:48:ec:a9:9d:bf:5f:c4:de:f2:5c:77:b6:70:27:cb:
16:c9:38:df:db:7e:af:a5:82:ac:53:34:f9:3d:b7:e2:1e:4c:
26:8f:9e:d7:31:ec:2d:c1:46:84:64:92:17:5f:4c:ae:bf:b5:
b8:24:ba:09:25:f2:4f:77:05:a8:71:07:8b:d9:92:a7:62:85:
2a:41:7f:de:a4:d2:85:04:3e:ed:c8:f6:a0:c2:8d:35:02:c5:
bc:ba:36:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRj7TbhAAIgqF3jfAfQSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YmIyYzE0OGVmMGVlMDBmZjVhMjIxYWYxYmM2MWM3ZTE4
YWE0YmMwHhcNMjYwMzAxMTIwMTE4WhcNMjYwMzAyMTIwMTE4WjAzMTEwLwYDVQQD
EyhjOTM0NDA3MjY4NWQ2ZWRiNDVlMjdhZTY5ZjljZDk1NWIwNWRhNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmgE5ME/OOJbLKMeG1VVjglyCh1f
zNdr1LN7aMOLKYUraoQJ3I/ndQbnGzhlOFUP/kjiwYPbgccnP30I5nRbXYz4EgY5
mDzyB8aQ1sevesYwPHMnZFIJjNGPExiukpl/hGCL+kO0idz0rcXcsmWNeezdSCj4
74BGeOfu4tuzKGuRqlBwDnUAwbuZucdw9hlyB/FN+nZBrq3o9MtFF+QJUS6tFMSn
S/vS685YK2TjzOKMy5Bp5Nqzsp0R3vlN2rlXNmfkxT8ad3Xjz7OISc8aYegGir20
pViZ0qMC8KW9Q8vX9GskMlZn5sHDZWdwc4LzOI89ay9H3+njeR2rq1EEYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk0QHJoXW7bReJ65p+c2VWwXaVQMB8GA1UdIwQY
MBaAFMm7LBSO8O4A/1oiGvG8YcfhiqS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUt
MmVhNzA5OGZlODg1LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUtMmVhNzA5OGZlODg1
LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYEPmomO
G7LvKIe6bfjosXsULfUEsaVftyieOrCzZ3JsTq2Ed0U4Q0MLHaXUTqROLj3aDY3Q
b/Fl17pguDcQ3sTOfsD0hMeIFbfInJ9YJooajePma7RJAm/XZAWRzBb0MsVLawUb
goGXbIJGEnTQHLSk9QtUdI9pprxP7GCCiYosW4gcrG9bFNK790ybeQ9UNx61ST2C
tY6XK7/8WbV3t8+r604CSOypnb9fxN7yXHe2cCfLFsk439t+r6WCrFM0+T234h5M
Jo+e1zHsLcFGhGSSF19Mrr+1uCS6CSXyT3cFqHEHi9mSp2KFKkF/3qTShQQ+7cj2
oMKNNQLFvLo2Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:40 2026 by rpki-client