Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: iSv/FIKpBKPbAB+9QOlH7gjA6ylwnutg2h1iWpG/D5k=
Subject key identifier: F8:4C:2B:AC:EE:9F:BE:82:57:BE:1A:D3:23:CF:C8:12:F7:C7:FE:76
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019CAA2197E65192049187F96DE61BA839F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 107A
Signing time: Sun 01 Mar 2026 16:00:54 +0000
Manifest this update: Sun 01 Mar 2026 16:00:54 +0000
Manifest next update: Mon 02 Mar 2026 16:00:54 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: rZmfzCxhtKJu9Pr5kWdyEOZ9raFmj5Vspln9M5qWySw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:97:e6:51:92:04:91:87:f9:6d:e6:1b:a8:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Mar 1 16:00:54 2026 GMT
Not After : Mar 2 16:00:54 2026 GMT
Subject: CN=f84c2bacee9fbe8257be1ad323cfc812f7c7fe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:b0:3e:c9:6a:06:f0:cb:c0:68:ac:1d:9b:
e8:6e:c8:9a:f6:9f:b3:e7:a3:85:43:04:a8:0b:0e:
06:e7:e7:8f:f4:14:cd:ec:09:cf:be:e3:2c:1b:34:
56:39:40:4e:5a:03:c5:d5:b3:58:b5:04:cb:07:02:
64:80:64:04:22:40:b0:25:c7:97:a3:8e:28:62:81:
e6:20:4a:8b:4e:f2:ef:bb:a9:3e:6a:25:20:2b:ed:
cd:0e:69:d3:8b:05:16:da:21:e3:65:a4:a1:19:39:
4e:04:94:1f:78:00:09:5a:01:38:8c:a7:ed:0c:64:
2f:80:32:ba:d7:e3:51:84:7c:ba:a9:91:ac:36:b0:
91:49:55:d7:73:15:70:b1:3a:a8:4b:b8:56:f6:77:
8b:36:45:28:40:62:63:8e:dc:cf:94:4b:d0:6d:df:
62:92:a0:a7:28:83:18:9c:1e:c5:0b:bd:a5:6c:c4:
e7:0f:0d:7f:75:bc:4a:59:dd:90:27:79:34:a9:ad:
99:9a:ea:fc:bf:30:33:0f:42:86:28:50:8f:e8:0b:
cb:c3:35:61:4c:62:46:32:cf:03:29:2f:0e:72:2c:
29:3d:69:3a:eb:8b:03:44:3b:36:cc:52:5b:8e:27:
e3:0b:68:86:14:31:b8:7d:fd:8b:a2:ba:0f:25:ce:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:2B:AC:EE:9F:BE:82:57:BE:1A:D3:23:CF:C8:12:F7:C7:FE:76
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:18:19:0a:9f:72:14:86:44:f9:bc:b9:28:7e:42:79:f6:
71:94:45:72:7d:48:20:64:88:f8:f3:e2:a8:15:8b:cf:65:98:
78:3b:0c:50:28:53:77:ea:6a:39:50:0e:53:26:6c:a6:92:c5:
ff:b7:2a:66:a6:07:2c:a7:2a:ef:0d:df:33:a2:9b:63:d9:5c:
cf:f5:e6:54:bb:42:ef:7b:7d:4e:d2:7f:9d:19:68:48:eb:9c:
e5:2b:2a:a6:56:68:89:1d:5e:33:d2:02:30:8d:c6:ca:d0:68:
3f:c4:70:1a:68:9f:16:f5:32:2c:c8:93:2f:fe:6d:bc:d2:5e:
62:87:87:5d:28:6b:6c:b0:5a:b9:88:b0:02:4a:d1:f0:20:5e:
19:a4:17:f7:71:77:19:78:fb:fe:f3:0b:59:74:70:f3:a4:f9:
f3:06:98:42:10:87:a2:37:6f:cf:15:6b:32:73:03:c0:ab:e3:
7f:9e:34:bc:89:2c:28:10:8c:43:b4:1c:40:af:34:e6:8d:59:
7a:5e:e0:70:23:55:14:0d:5c:ed:e7:d5:b2:ea:ca:8f:2f:0b:
c2:24:27:bf:34:d0:af:86:8c:e4:ef:85:16:73:a8:14:7c:66:
99:d6:b5:35:6b:f7:56:da:2e:64:b9:57:44:5f:cc:c6:b1:ad:
39:eb:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:18 2026 by rpki-client