Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: MCysMz+TnIAVHK7jsy+Ru4SYWMxv3Ajhvb8ReKrYkas=
Subject key identifier: 32:51:37:CE:10:52:BC:0D:AA:73:7E:BF:69:4C:69:D4:71:AA:47:6C
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019CAAC6D3F8BD9726A7581A96E8AA138718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 07B7
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: zWGGghr0K6xhGo0BGv0IQQ7G8SLRqsrFrU0u7aVbdNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d3:f8:bd:97:26:a7:58:1a:96:e8:aa:13:87:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=325137ce1052bc0daa737ebf694c69d471aa476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:63:d4:48:6e:22:e8:12:5c:bf:ff:d3:7d:
99:93:39:dd:31:b9:53:fd:d9:41:31:9b:59:7b:bf:
e6:45:b9:fb:3e:0e:ae:62:07:54:2b:45:25:ea:e0:
36:59:a0:47:9b:58:e0:81:97:a4:51:b2:97:9d:55:
76:3b:78:09:c7:94:65:5a:63:fa:a4:3b:14:0a:91:
bb:69:61:9c:75:e5:24:90:ee:9d:7f:5a:f5:4a:4e:
52:a5:10:e6:ef:57:b6:dd:d6:50:e6:4a:6c:76:eb:
42:e4:c7:10:f0:74:2f:b7:b2:f9:94:19:d1:23:08:
90:23:64:c8:d8:84:21:e5:d7:14:48:b0:3d:d8:89:
e8:29:ec:08:99:54:69:bd:c0:f7:8b:e6:aa:63:30:
05:30:00:8c:61:2c:b1:e3:cc:82:5d:3f:69:ed:98:
69:8c:61:68:5d:0c:7b:17:e1:2b:5f:52:59:34:5b:
f5:5e:82:e2:8c:74:83:83:91:ee:08:29:1b:9c:d3:
1f:cc:7b:a3:c7:f5:a6:c4:52:8c:68:c1:a4:4e:98:
6f:2a:b5:2b:b8:6e:3f:59:7a:a6:1a:3a:a5:d9:50:
7d:fd:70:0d:a9:30:2d:33:8b:f4:5c:21:80:c7:ee:
66:0d:3b:9a:9f:2f:5a:af:d8:a3:1d:35:d0:b2:77:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:37:CE:10:52:BC:0D:AA:73:7E:BF:69:4C:69:D4:71:AA:47:6C
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:71:92:f0:55:9d:13:79:03:d8:1a:87:95:94:57:66:0d:
3d:4e:81:14:bb:4d:06:79:18:70:93:f6:12:4f:1e:2e:d4:20:
f9:29:dc:9e:16:df:1c:87:7a:83:bd:ce:51:3e:69:6c:e6:79:
27:b2:55:c4:7a:c5:23:61:33:cc:4b:46:16:b1:bf:30:dc:e4:
0e:30:69:86:1b:cd:97:49:fa:22:5f:36:91:06:2e:03:0e:c6:
ba:1c:86:9b:9c:85:4d:5c:58:98:0e:2f:e3:9a:7c:9b:47:48:
d4:d9:ee:90:c4:e1:50:d1:00:8e:12:5f:4a:0c:c1:31:34:c9:
84:09:33:c7:77:c1:1c:cb:78:19:21:18:f2:74:86:b7:c8:50:
a7:70:cc:28:6d:4f:08:04:7e:16:67:4b:3a:b2:96:76:af:3f:
9e:6d:59:9f:ae:20:46:68:76:41:aa:cc:cd:b5:fc:5a:b0:7d:
8f:fb:5c:4c:80:cd:33:8c:55:24:3e:37:a1:11:17:cf:40:da:
05:86:c8:6e:16:95:54:62:2d:6d:6a:cf:f2:ab:66:2c:58:44:
e4:20:5c:40:58:c1:32:20:5d:da:03:b7:f6:1c:d0:c4:d1:ef:
59:0e:a7:39:dc:ee:5f:dc:72:e4:ce:f9:61:4b:31:4d:85:c1:
b1:10:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:13 2026 by rpki-client