Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: 5Fse4OepgswV1HSvNrBfLIiiMkNBotjMRlXHW56+o4I=
Subject key identifier: B6:7F:F8:47:72:D1:14:75:FB:F0:F5:77:DB:B2:39:A1:CE:88:CB:C6
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019CAB347D9B5F0CB5F35470BA7B7BF5C758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 07DC
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: P4h4Vr9mdIytNBnPb5C2lBjzKYv/iK1ln57607roKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7d:9b:5f:0c:b5:f3:54:70:ba:7b:7b:f5:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=b67ff84772d11475fbf0f577dbb239a1ce88cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:5f:83:6c:c2:50:5d:2b:8d:5b:ae:10:08:
34:06:55:eb:b4:ed:5b:9f:91:76:a8:2e:17:c5:7a:
8a:4a:e0:e4:94:c0:e0:f1:3e:fe:88:33:b3:34:b0:
38:2d:fa:2f:3f:be:33:b7:33:64:4e:93:ea:53:0b:
f2:af:8b:53:8b:29:a0:2e:ba:9e:da:f5:1d:94:ce:
66:8f:a1:a5:b2:79:82:d6:bb:00:8b:75:c7:de:11:
fc:b5:a6:c0:f5:bc:16:82:e7:50:4d:af:79:7e:30:
8d:bc:e8:bd:28:3d:93:bb:f7:3e:03:94:7f:b7:93:
ec:f7:0a:2f:8b:c1:19:3b:39:cd:75:52:10:79:7a:
06:53:d4:a9:0b:b0:1f:0d:0c:8b:cd:ee:53:2d:a4:
0a:e2:aa:22:b2:f0:0e:a9:0d:53:67:c6:de:34:a4:
32:3d:2c:f6:41:b9:bb:01:7d:b8:e7:e0:ae:1a:7e:
93:4f:42:c6:d7:0f:ca:b8:3e:a1:47:27:da:70:b9:
a1:76:ff:dc:27:3c:9e:c0:31:17:3b:12:1e:6f:55:
78:1a:da:d0:70:2e:e8:40:6f:7e:62:4b:2e:0f:47:
46:f5:1b:28:b7:11:90:cc:37:1a:05:81:36:0d:dd:
01:e1:27:0e:04:d4:3a:fb:e6:fe:57:9b:b2:a3:f8:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:F8:47:72:D1:14:75:FB:F0:F5:77:DB:B2:39:A1:CE:88:CB:C6
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:48:0b:e3:be:6a:c3:4b:52:18:ed:8a:50:3a:6c:f2:d6:
b2:63:20:49:fa:80:c3:f4:a2:be:f4:26:42:25:76:31:d9:54:
fd:23:ba:a7:c7:70:d6:2d:67:ae:af:5a:4d:65:cf:88:8d:fc:
23:f4:80:30:ba:dc:cf:9d:f9:ee:28:64:20:4d:8e:ce:8e:1b:
f5:8e:6c:ce:bd:f4:2c:e9:b3:49:d0:24:3b:e2:5e:ee:4d:be:
cd:b5:c0:eb:af:23:64:44:c7:93:ea:03:53:46:fa:df:24:02:
16:e7:8b:17:f2:97:74:53:4b:ff:f0:61:fd:ad:a1:21:5c:30:
b2:59:e6:26:3d:7f:db:b7:bb:96:94:b2:e6:7f:fb:8a:9c:c2:
ec:08:c2:51:54:f2:de:11:4e:26:9b:67:0b:8d:14:0a:9a:5d:
e8:f7:c0:a0:54:04:19:0f:35:8a:af:b5:c1:5b:a2:84:28:08:
bb:5f:dc:0b:a1:c1:98:84:1a:10:51:95:5d:50:a8:48:be:27:
81:71:4b:6a:a7:0f:05:61:8c:19:61:38:c6:94:27:cd:28:92:
37:8c:e4:ef:d8:24:a5:b9:f5:1c:4e:c6:9c:18:f5:33:f0:2f:
df:bf:1a:75:8f:06:a0:d0:e4:0d:20:40:55:fd:0f:6e:17:11:
f9:7e:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:20 2026 by rpki-client