Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: Hjq+tBmF1UyNhydM7k/1wvoTIYQ76qi3SbH03h3wImM=
Subject key identifier: B2:4E:1E:53:7A:DA:22:22:62:D5:1A:A5:23:90:23:D7:C0:F9:C4:E3
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 019CAAC71883949C3D788317D4A658D3EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0C70
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: CitEHd6r_CsQSgbionGA1eBcMLU.roa (hash: 1rANra1AzVxMgl8VcJaThBHrC2EUS4bUsTwEZ+EKh0w=)
2: GcvVWNFfgF0wu0Nfjs_BudGQw9Y.roa (hash: KB0pqrvO6Erz4/rIYGhqqlfhiTfb86tI38IPNb7s0Ow=)
3: WubjxHCSaP4QHue8QiWJLn9wu24.roa (hash: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc=)
4: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (hash: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A=)
5: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (hash: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ=)
6: mYlVHFIkWhjce6SZlz3waAY66A8.roa (hash: 4EmaIQp2LaV/4WUzCFLlD6HjVOOnifTa9SWdZEfSqzY=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: WpbRbwy1Jp+3oSBBQ90+1wDtn/3rvhuc+YcGsWz82CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:18:83:94:9c:3d:78:83:17:d4:a6:58:d3:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=b24e1e537ada222262d51aa5239023d7c0f9c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:ea:b7:be:42:b3:96:94:45:3f:8c:0e:e6:
58:87:99:ad:f0:18:93:db:2c:e7:57:56:68:43:d1:
99:72:b7:4b:d2:66:88:93:4e:b8:58:00:b8:73:bd:
c0:5d:0d:0d:44:ad:88:68:80:47:1b:d7:2b:a1:27:
d7:4d:1d:23:46:b6:0a:c8:11:75:2a:59:0f:94:3c:
4b:dc:73:66:a4:a5:60:7c:e5:a7:7c:75:11:de:88:
95:fe:38:60:f8:a7:34:e8:3a:39:c4:a2:1f:f2:6e:
69:97:9b:42:ab:f5:25:46:96:e8:4d:a0:09:cd:8a:
0e:83:d4:df:91:2f:e1:b7:55:72:6c:f2:df:89:fa:
cd:da:11:c1:6c:c9:34:e2:51:16:0a:08:bc:e3:e7:
21:70:aa:c5:a0:a1:1e:25:16:39:d6:a6:27:c6:bd:
50:95:35:0d:95:54:d8:68:7c:31:98:76:98:12:12:
c4:1d:f5:ee:a8:48:ec:62:a8:ad:6a:3c:2a:6c:d7:
55:10:ab:27:b3:73:03:92:57:fa:08:4f:19:fd:e5:
75:b8:bc:4e:eb:9e:de:78:20:ef:b4:80:97:02:0e:
8b:18:83:fe:04:61:34:2f:49:3a:c9:ec:a8:0a:43:
1a:d5:b6:4f:37:64:78:cf:91:02:ff:a0:cf:0e:ec:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:1E:53:7A:DA:22:22:62:D5:1A:A5:23:90:23:D7:C0:F9:C4:E3
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8d:eb:9c:b0:c6:c8:0b:8c:94:c6:be:36:39:bf:6f:9a:4c:
ab:35:ce:fc:b6:be:9e:57:f3:17:e7:f0:54:ac:fa:62:2a:8b:
76:f4:d4:d5:72:f6:d9:4e:de:a7:4c:84:b1:25:05:2f:1d:57:
36:39:25:e5:b2:02:ba:0a:09:7f:ce:4a:3b:02:2d:92:9d:a8:
d7:1c:4d:09:07:ef:d0:36:d7:33:61:40:d0:2c:1f:6b:06:f0:
1d:c0:7d:fc:68:2f:37:8b:2b:17:49:0b:b3:8b:07:f6:87:fe:
80:3d:d9:20:ed:e8:fc:c3:0a:ec:3c:16:44:ac:fd:28:fb:61:
67:7c:a3:75:b8:1e:8b:a4:80:d2:b2:e1:32:84:41:40:b3:d9:
a2:1b:54:06:cb:a0:55:5b:dd:aa:f0:c7:1d:7e:7a:26:e7:bf:
30:3a:c0:9b:d7:54:24:14:16:92:e3:75:5e:95:8c:f8:a7:70:
00:99:7a:86:2a:44:2e:ed:f5:a9:70:d8:3e:2f:21:3f:16:5a:
b4:b6:1a:c9:a3:4b:f8:59:33:1c:05:4a:5f:1d:43:b7:ae:39:
2f:bd:ab:c9:be:6d:b2:16:2f:4f:58:3e:65:16:33:07:cf:3b:
cc:69:5e:7d:8a:99:27:1c:ff:36:9d:c6:55:89:90:cd:98:5b:
94:98:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:05 2026 by rpki-client