Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: 6z6r3K6dFqQapqeze2kb3w2bhOZ3vr+4aF2oArahV/g=
Subject key identifier: D5:14:10:A5:6C:9E:99:A3:32:99:2D:45:C6:72:2B:E4:8D:81:B2:29
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019CAB34AAB9178340E072DEE5145A989587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: fkL/e9gD14qXCUdCfwdBLEqWm5KfjmRgsJZrkWQmVzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:aa:b9:17:83:40:e0:72:de:e5:14:5a:98:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=d51410a56c9e99a332992d45c6722be48d81b229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:f4:9e:c8:95:b6:0a:6f:71:c1:61:af:f8:
36:05:8b:5e:11:a8:ab:62:eb:98:54:29:53:14:0f:
f6:b2:5d:5d:07:33:bf:bc:4b:46:cb:26:a3:9d:09:
5e:08:9e:bf:af:6b:1b:dd:fe:0f:85:c7:1c:23:8e:
18:cb:47:3b:2f:1a:4c:0a:91:fb:a6:81:61:5a:be:
53:b8:29:8f:a8:8b:68:92:91:54:d1:ed:91:1a:01:
c7:81:cf:b4:0c:53:d2:13:f9:dc:02:46:02:54:af:
b7:5d:df:4b:a1:8c:32:44:7f:71:e0:a8:0f:3a:5d:
3f:b3:df:d4:33:cd:c9:8e:c3:af:e9:78:90:5b:7d:
02:93:27:13:de:44:d4:31:d2:59:71:56:99:7e:af:
11:ad:8d:e8:57:9c:f2:e5:05:21:22:ff:96:96:4e:
4e:46:4c:37:f6:da:c0:ba:98:8d:b1:e9:2e:f2:38:
35:27:49:28:11:16:dc:9a:ff:69:72:54:30:a1:ec:
91:2b:6c:ac:e7:98:16:0e:af:55:12:5d:b6:ab:91:
59:03:c2:c8:d8:db:d5:c6:66:79:2f:cf:bd:bd:ea:
52:d9:15:db:49:ee:09:2d:19:07:25:03:38:4a:30:
7f:2e:b3:70:51:98:da:2b:fd:e5:64:f6:c4:86:43:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:10:A5:6C:9E:99:A3:32:99:2D:45:C6:72:2B:E4:8D:81:B2:29
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:10:17:5e:3c:c9:3b:52:5b:5f:f3:f6:6f:d0:39:21:84:
80:11:00:06:ea:bb:07:27:a0:a1:1b:9a:db:04:68:3b:e9:fb:
53:07:c4:cd:95:66:f7:44:07:cb:0a:38:f6:e2:e1:72:18:20:
ce:e9:a4:27:ec:94:70:5a:b7:7b:16:4c:45:2f:92:9c:3a:f3:
90:8a:62:d1:b5:54:85:48:e9:c8:0d:c6:0d:aa:7e:ac:29:4b:
c9:84:ca:89:61:e5:2d:e3:47:ad:7c:a1:13:fe:97:ee:78:0a:
c4:41:80:85:4b:9d:1e:bf:e5:61:93:ae:63:5e:12:04:14:fa:
58:4c:7d:cd:96:bc:98:3a:94:f5:68:27:87:85:9b:b4:17:bf:
c3:77:f8:a4:7a:16:01:b4:f1:e7:53:5d:d9:76:06:b1:b5:28:
c5:58:cc:6e:6d:e9:17:d1:27:0d:de:12:76:97:a3:86:ca:90:
58:7d:50:6f:c2:39:4f:42:a8:81:e8:0d:59:2b:81:71:89:2e:
52:a8:5d:fc:61:ee:e0:d1:d1:ea:b7:d3:76:5e:71:b6:c2:1f:
84:ad:4f:08:ac:62:9b:b9:6c:f5:ed:e9:ae:c0:32:3a:3f:89:
94:40:4b:49:91:f4:9a:a9:b5:26:00:c6:df:75:e2:16:8f:44:
f1:f0:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:23 2026 by rpki-client