Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: 24xHPpx6ALoRqdMzbQlOfYCZlcCEOnsbD/XKnX8gF+8=
Subject key identifier: C3:DE:B1:DC:62:67:B2:E0:A7:80:B2:F2:85:76:0B:B0:95:BE:27:19
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 019CA9EB13703A66989A5B34CF3F5A0953A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0C27
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: ghGc2Lv7TcfrmuH9YITRm12nsM0.roa (hash: qhSH7nSb+oaxjGNhsFsYHQ6vShtNbUb1gAOSPr8PZts=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: f/MO/TMiAmVzZ8fbmlA4kqTUqdwJfTYdeToRVUd+5JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:13:70:3a:66:98:9a:5b:34:cf:3f:5a:09:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=c3deb1dc6267b2e0a780b2f285760bb095be2719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:5e:05:8d:73:3a:47:48:07:5d:87:1d:8f:
64:6c:07:6d:9b:2a:ff:d9:41:f4:c3:1e:2d:1a:21:
f1:da:3c:e0:57:03:74:70:e2:e7:33:49:f5:a3:24:
18:08:31:4e:1e:de:de:af:cb:c2:fb:24:65:b2:47:
86:e2:88:a5:b2:43:4b:ca:88:59:9f:af:57:8d:f2:
27:f5:17:b2:46:4b:52:94:01:9c:f7:18:e0:df:e1:
9c:32:93:99:25:13:4d:4a:ef:42:0a:49:5e:54:68:
f3:cc:cc:c4:93:00:97:ee:18:7e:15:6b:3b:3d:8a:
18:05:ee:7d:7e:31:21:e9:c8:fc:3b:96:e2:84:bc:
77:c0:b3:d7:37:0c:40:2f:d0:a4:ad:fc:50:49:fd:
96:32:26:6e:a8:d9:52:3b:b6:6f:06:af:78:44:00:
18:4c:82:72:80:33:0d:24:3c:d3:42:25:2e:48:24:
48:ea:48:d2:03:62:36:10:95:53:89:06:03:bf:13:
3a:4e:33:95:09:b1:3f:46:60:a8:a5:2d:ef:25:c0:
e2:b8:e0:fb:c3:25:75:0a:d5:61:65:c6:64:29:13:
93:1b:21:ea:6c:21:49:78:4c:45:1a:2b:b3:d3:e8:
be:08:e6:e3:30:41:48:2f:c2:a3:4a:92:35:8f:4a:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:B1:DC:62:67:B2:E0:A7:80:B2:F2:85:76:0B:B0:95:BE:27:19
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:16:5d:8a:5b:d9:50:52:03:85:2c:ba:18:3e:31:08:45:
55:1b:fb:db:39:76:68:4b:31:8c:62:35:db:8a:37:1c:84:0a:
33:13:80:e5:f1:b5:36:6d:87:40:72:d7:f6:73:2e:64:91:f6:
fe:fb:f4:31:24:11:ae:b2:ca:79:7c:5e:92:96:f2:e0:89:d8:
e5:46:31:d1:b8:f3:64:47:a0:10:19:27:98:2f:e3:c9:2e:d0:
dd:ae:c5:81:3d:97:63:cf:e1:b8:48:4d:85:72:17:e9:f1:62:
c5:12:31:80:f1:46:0f:48:74:09:0e:05:a8:1b:2a:47:04:09:
7a:e3:79:03:1c:11:51:a8:50:e8:78:e1:12:35:d4:d0:30:63:
06:24:c9:92:f4:86:11:62:ef:fb:55:43:b7:5c:5e:01:8f:48:
ed:e9:53:e3:3c:22:97:53:32:ca:6d:e9:f3:b6:94:ba:c9:50:
5d:8a:e6:c8:9a:17:48:39:ca:78:8e:94:7b:20:f9:9a:d0:e7:
38:ab:11:12:d2:b6:8c:79:50:d2:cb:d8:f6:94:ca:28:3b:d8:
50:04:e3:67:f1:16:5b:61:56:4b:0a:84:d5:e5:19:36:07:e2:
8e:4b:4a:5b:00:a4:ef:0b:91:2d:1b:b0:7c:e5:81:85:97:56:
ce:53:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client