Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: 3R3XVMk3kEPqRM3Sj5Q4R2dz3JU16ghlM0pYPefajNU=
Subject key identifier: D3:75:80:3F:3E:F2:B1:CA:AC:B7:3C:6A:CA:5D:A8:DE:5D:37:FC:C0
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 019CADFE253C6EC1A32C7E4968EFBA070DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 0B44
Signing time: Mon 02 Mar 2026 10:00:39 +0000
Manifest this update: Mon 02 Mar 2026 10:00:39 +0000
Manifest next update: Tue 03 Mar 2026 10:00:39 +0000
Files and hashes: 1: 714jAkRfYNSFRWD00Ttnn_8kshU.roa (hash: Qwe2Q2afQjCXeJnI6CuGzTdKEtcUpiC/k2FP9kdrGD4=)
2: 8dEAYi52_22zUX_SiXzKUWNxBaw.roa (hash: xFQLvjgZzeqcV2os4NMEXXqLMmXWf96ISePDLbOs/n4=)
3: AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa (hash: YHKQlEMTRKZ44Ezw9Vkv/ST4kDSY/aZ7S8Y4/+4q0FA=)
4: FzsVJPIrsEyHqExyGhlWZtGTTjY.roa (hash: +Pd3PneLFWSwpSYwbblYDY0Nhc65YzGQwcvoKLnitm4=)
5: L4LAQO4VcvKCv24QKmqbiEkYgfw.roa (hash: 1I8k1k9yQTnnGWoQ4DNv1fL4gSGoExl590fVU6xPg8Y=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: 2OvLS57KbgvpiD7kHzn5X9YebOjfz2uAF8nmrdMyBCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:25:3c:6e:c1:a3:2c:7e:49:68:ef:ba:07:0d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Mar 2 10:00:39 2026 GMT
Not After : Mar 3 10:00:39 2026 GMT
Subject: CN=d375803f3ef2b1caacb73c6aca5da8de5d37fcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:46:27:6d:92:58:cf:95:93:a7:af:37:33:
ba:c0:98:6b:2f:34:58:05:1e:4b:29:b6:9e:b0:27:
33:e1:30:c3:cd:6d:58:35:ca:fc:1e:70:9c:23:7a:
7f:d1:f2:75:32:60:45:c4:d6:63:ef:24:12:5e:f8:
33:e3:99:6b:01:e3:b0:6e:54:8c:38:cc:2a:24:f6:
e7:87:9b:ca:0f:54:93:ed:89:7b:b2:ca:41:c4:de:
17:ed:99:f6:62:cf:4f:53:af:da:0c:61:44:08:34:
9d:9d:38:82:be:70:05:fd:8c:eb:1e:81:ba:95:30:
7c:d2:64:68:26:4a:34:28:18:e4:ee:bf:8b:16:ca:
a7:24:ef:5c:d3:47:98:e7:30:7f:fb:b6:8e:37:25:
d2:9e:ec:48:ea:cc:f7:87:d1:8a:6d:e4:19:6d:82:
74:45:5f:10:16:eb:68:83:f1:83:9e:35:db:7a:42:
1e:e4:96:8c:c2:47:35:22:23:17:6a:b5:2d:c9:3a:
ba:60:f9:ac:8e:29:05:85:1a:42:d9:41:25:b8:8f:
42:e6:d6:4a:a1:08:a4:a1:91:73:42:d7:86:9e:19:
55:bb:38:a5:01:56:89:e7:ed:8a:9a:3d:10:c3:d9:
da:83:b3:f1:7d:9d:98:a4:80:f6:b8:33:6b:13:02:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:80:3F:3E:F2:B1:CA:AC:B7:3C:6A:CA:5D:A8:DE:5D:37:FC:C0
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:35:97:27:1d:04:68:d9:74:be:d7:bd:f5:57:6a:6c:f3:
b1:2b:36:01:9b:66:21:2e:5f:1e:f9:69:64:97:55:ea:24:6c:
d7:10:1d:87:ee:81:5f:85:c2:ea:7c:b6:e5:b6:f3:39:5f:e5:
6f:19:f0:f4:02:08:e4:69:bc:4d:b5:73:d4:cf:a0:c9:6c:21:
59:c3:7e:7a:62:78:99:70:b2:21:ad:94:01:de:ce:61:02:45:
29:04:f1:be:95:6b:4d:2d:a7:54:08:16:c8:7f:3d:3f:e9:0d:
bc:b2:a7:bb:68:82:53:4e:34:fc:29:c7:16:5a:25:e7:3d:97:
31:2d:56:45:61:44:bc:5c:37:3e:b3:bd:36:4a:da:3b:4d:04:
b4:19:05:85:d2:e2:80:a1:a4:62:74:a5:ad:e9:a9:ff:3c:32:
70:8c:4e:0d:ea:9e:5f:56:3e:0f:e1:1f:74:2a:14:a0:86:2d:
3b:ac:46:b1:c1:f3:69:5f:12:c9:a1:82:ba:df:ab:e9:6d:fa:
ac:52:1e:0d:cd:5f:48:d1:6b:88:88:b2:67:2f:c4:9c:9f:d1:
26:2d:5f:6b:a7:e0:71:36:75:07:5c:e0:02:9c:d3:e8:98:ac:
8e:86:f1:93:70:40:d3:ba:63:80:5a:40:cb:e2:11:2b:27:ae:
58:59:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:52 2026 by rpki-client