Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: xgUOQg0NKJF9kYw4ou44Ryz9dEp6a8humhzkUXHRXek=
Subject key identifier: E5:38:FD:9A:F0:5E:4F:3C:FE:B2:2C:E1:FD:DC:17:07:31:AC:04:8A
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019CAA59392BBE8BD7032CA15BC643668D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 14D8
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: GlWizv2ImorDlJ5qdqf22l6axV0.roa (hash: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: ltBTFRDCKD23E/GwjZ8zFqEwXaT3s+OaEJPWJ72tkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:39:2b:be:8b:d7:03:2c:a1:5b:c6:43:66:8d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=e538fd9af05e4f3cfeb22ce1fddc170731ac048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:71:05:8a:fa:c1:5a:18:98:f5:ee:ad:e5:
6c:c4:ea:8e:9e:45:ab:da:5d:af:00:e1:b5:fa:f7:
15:6f:1f:e4:75:23:66:b5:ae:c6:9d:a8:32:b1:8e:
51:a0:9b:6e:2b:e4:3b:e1:ce:b3:b7:2e:91:a7:fb:
33:58:80:33:c5:fa:f6:8d:87:84:7f:a7:d4:4e:cc:
14:c1:40:6d:e5:a0:2e:b2:e7:3b:8e:18:eb:6b:48:
de:d5:ac:f3:d8:b1:36:60:a1:6d:7a:79:ac:31:da:
17:28:3a:13:42:e6:ec:c8:3e:eb:c3:a6:e0:8b:35:
b4:42:9c:f5:d6:e4:54:6f:3f:7d:7c:3b:bb:55:92:
60:33:fd:f9:e1:a0:e7:ac:b4:06:7f:09:91:47:a0:
10:48:a0:f8:11:40:f2:5b:4e:b0:48:50:41:80:5f:
33:fd:5f:c9:1c:48:fe:29:7f:f6:42:cb:c8:20:b3:
b5:f3:06:8d:55:d7:c2:3a:7d:ec:76:f3:69:2f:29:
5b:18:a9:13:73:3d:4d:0f:70:09:3f:9d:0d:5e:95:
da:4a:95:36:80:38:50:1f:57:3e:ff:46:aa:92:cb:
f1:b5:12:a0:4e:06:47:67:39:75:b8:57:39:8f:75:
e3:24:8f:9b:d2:6a:72:7a:ed:f6:d7:d9:50:a0:ab:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:FD:9A:F0:5E:4F:3C:FE:B2:2C:E1:FD:DC:17:07:31:AC:04:8A
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:e1:5c:b6:c2:80:cd:5f:8e:88:2f:bc:45:f2:83:d6:bb:
58:1d:db:63:05:78:9b:f8:79:6f:67:4e:4f:c2:44:37:9c:10:
5d:1b:02:ab:8d:33:4d:03:cb:d4:e4:ca:18:87:23:04:d0:bc:
6a:46:61:df:cb:78:17:17:53:95:75:b1:eb:8d:f1:87:ed:30:
b2:d3:f7:75:39:18:ae:b2:58:bc:3e:71:d0:17:d0:f4:5c:7e:
35:34:43:67:54:ec:e2:cf:29:31:8a:b4:0c:59:94:99:91:4a:
8e:b8:3a:b4:90:c7:c8:5f:d5:98:69:54:43:c8:51:02:80:82:
ce:da:26:fd:73:9b:a4:4b:d0:94:b3:c9:b8:2e:9f:da:3b:3a:
dc:c2:0c:ce:e1:6b:a1:85:a6:dd:c0:af:40:ba:7b:73:42:3c:
bf:00:b9:69:89:cf:10:97:e2:e1:8c:e1:18:66:8c:08:8e:24:
3e:5b:85:0e:86:f8:e2:f9:ee:7c:d4:eb:70:26:13:a3:04:42:
05:e1:c4:d2:35:fc:40:00:c9:97:21:4a:77:00:35:de:4c:cf:
bc:2f:93:e6:eb:f7:b6:5f:ff:58:0a:81:02:ee:fd:00:6f:c2:
14:de:cf:c1:9e:0b:ba:4f:a8:58:d5:8a:64:1a:73:3b:8f:f2:
52:07:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:37 2026 by rpki-client