Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: +PZA0L+fcW0X6kX89cyICTn2BbChGn4cU2WbQ0vxWSk=
Subject key identifier: 05:B3:6E:1D:4C:74:91:D1:65:0D:2A:FD:6F:48:E9:B5:E0:5D:C8:DD
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019CAE35822871EB692E68C992E3C79C2E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0C96
Signing time: Mon 02 Mar 2026 11:01:08 +0000
Manifest this update: Mon 02 Mar 2026 11:01:08 +0000
Manifest next update: Tue 03 Mar 2026 11:01:08 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: clXAyo7K1UMxctXnQ2lQgBphWULhifAGCiHWv7d8KSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:82:28:71:eb:69:2e:68:c9:92:e3:c7:9c:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Mar 2 11:01:08 2026 GMT
Not After : Mar 3 11:01:08 2026 GMT
Subject: CN=05b36e1d4c7491d1650d2afd6f48e9b5e05dc8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:11:ce:c5:c8:be:3c:67:d3:3b:9d:d7:f6:
ba:19:c5:07:02:dc:fe:03:2d:1a:16:f2:cf:80:5a:
b5:bf:d5:00:e6:f8:0d:fc:b0:89:af:c8:a9:56:45:
86:35:35:1f:d3:34:8b:50:8c:23:74:25:4e:77:f9:
50:b1:fc:0e:8f:20:3a:92:44:29:37:ea:77:cf:f2:
e6:60:4d:77:3f:98:19:2c:51:33:83:1f:c6:08:17:
a5:46:0b:19:be:2a:ae:c4:4d:47:1f:7c:1e:de:36:
9d:0f:50:f8:73:bd:7c:fb:83:63:ed:95:8c:14:62:
ec:f8:b0:49:45:a3:cd:59:2a:c1:8d:0a:aa:69:78:
ef:58:f7:21:f1:a9:f9:77:d7:a9:04:9f:18:56:6b:
a0:9a:b5:e0:7f:2b:16:d3:e9:9f:57:f4:3c:09:23:
1f:db:45:e9:64:fa:96:39:6c:62:30:98:80:13:33:
71:66:97:95:f9:6c:de:d1:3a:93:38:40:18:c3:c4:
a8:94:35:1c:af:e6:3b:eb:76:15:e9:e4:ef:c4:e3:
25:b9:fe:75:f3:6d:c5:c8:3e:60:35:33:e1:4b:a2:
6b:a1:08:c2:3a:16:64:bc:75:55:ca:19:e3:8a:4a:
e6:35:bc:c3:e9:1a:8f:34:d9:2f:fb:b1:2b:62:4e:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:6E:1D:4C:74:91:D1:65:0D:2A:FD:6F:48:E9:B5:E0:5D:C8:DD
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:48:a3:89:f5:71:ae:9e:13:b7:7e:1d:5a:f3:1c:32:88:
05:3e:ab:2a:fc:6d:4d:9c:aa:8e:7b:df:10:d1:81:3a:ca:5c:
1e:97:7d:d6:7b:1a:f8:c4:a4:4e:06:27:ea:3c:09:1d:30:dd:
4e:4d:89:3f:79:f5:92:dd:b9:4c:3a:b5:4b:72:19:a6:5c:b6:
08:1c:04:6e:e2:04:16:16:79:17:b4:44:90:47:35:f8:2d:ef:
ef:a0:5d:bd:71:7e:30:be:0f:34:83:84:0a:70:4e:e8:fb:06:
24:3b:76:50:68:4f:b8:7e:57:86:8c:04:f6:76:ba:0a:d9:13:
08:8f:9e:1f:18:55:07:e1:5d:7d:df:3f:c9:af:24:d9:5d:7d:
6a:52:95:6f:10:64:b5:4b:05:2a:2b:a7:fc:c9:57:9c:11:57:
be:d5:80:da:61:8d:77:65:cb:56:0f:2e:f6:19:20:12:ae:40:
a2:8b:18:2e:06:a6:ec:c6:fc:b3:10:a8:73:99:92:50:0c:99:
c0:97:d5:29:ba:85:2c:2a:cb:31:f6:0b:44:c0:39:a0:14:2b:
eb:3a:c1:70:ec:10:d6:73:07:a5:8c:1f:04:8d:ea:ea:73:de:
b3:a9:c1:a2:19:4c:39:7c:c3:25:84:27:8e:94:f5:5a:1d:31:
f8:0f:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:38:05 2026 by rpki-client