Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: kiOU4Di+Hus24b96chajOxd6FaC53KFlc2HoMpNCg2o=
Subject key identifier: C2:E4:8F:C2:C9:A8:A6:88:C5:40:5B:5E:FF:29:71:0B:6E:DE:07:C9
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 019CADC751E9E8DF7068B1DA4058A262638C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 09:00:46 +0000
Manifest this update: Mon 02 Mar 2026 09:00:46 +0000
Manifest next update: Tue 03 Mar 2026 09:00:46 +0000
Files and hashes: 1: 1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa (hash: WkyuSbuUrQsBUNZKIgd/RxLYyL6Wt7Nlixkah71KQxI=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: /XKh93Dm5hwoCJlkgqMRwtpWtcTlbiY20tl2ouXONyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:51:e9:e8:df:70:68:b1:da:40:58:a2:62:63:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Mar 2 09:00:46 2026 GMT
Not After : Mar 3 09:00:46 2026 GMT
Subject: CN=c2e48fc2c9a8a688c5405b5eff29710b6ede07c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:85:e8:e4:6b:c4:b5:eb:57:41:6a:fc:7d:
14:98:02:2d:40:05:b9:ec:80:ee:ad:69:2d:ae:c2:
68:c1:dd:ab:6b:bb:b3:c1:9d:43:94:ce:43:6a:00:
b1:2b:52:a1:c7:0e:41:98:78:36:43:1d:d4:37:04:
9c:34:f5:c5:f6:d4:5d:6e:38:eb:46:7a:89:a6:77:
da:b4:11:85:fc:eb:f1:7c:56:d0:98:70:cc:9a:ab:
8f:e7:d5:de:18:c1:44:6d:a9:61:59:eb:b2:b2:16:
47:a5:51:1b:20:60:b1:1c:71:f4:71:65:a5:9b:b2:
ac:0f:af:36:92:4c:3c:18:5e:cb:06:34:40:dd:03:
54:65:90:b2:0f:86:c6:29:e5:5d:66:7d:8d:ae:54:
c9:03:b2:cf:8d:2f:c0:cd:67:c9:11:ff:7d:b3:f7:
6d:6d:2a:2b:74:8f:6f:d2:88:12:80:39:0e:66:b5:
0e:f5:1a:ca:d5:e5:5a:91:5d:e1:86:e2:b9:38:ed:
5c:f3:d7:17:35:94:67:61:33:38:3b:d1:0f:27:5c:
b9:46:05:a7:7d:2b:c2:bc:00:03:8a:37:c3:0d:03:
fa:4e:2b:3d:0b:bb:b6:3d:20:5a:58:bc:24:c8:7e:
a6:33:c5:35:a4:65:cd:d5:0d:4e:09:04:58:ac:38:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:8F:C2:C9:A8:A6:88:C5:40:5B:5E:FF:29:71:0B:6E:DE:07:C9
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:52:8c:3a:75:ba:df:47:3c:52:79:55:37:36:81:08:49:a4:
4e:0e:c3:32:fd:5e:1d:5e:6d:43:3c:d6:db:26:4f:48:d0:45:
ed:3e:d6:50:a3:27:36:0f:a2:dc:53:eb:cf:05:0f:00:2b:66:
a2:00:c3:a8:af:61:80:89:d5:7f:c6:b6:a3:fa:39:b0:e4:e1:
aa:88:5d:5b:56:5d:80:34:88:aa:bc:84:dc:be:35:14:9b:78:
92:44:fe:7a:b4:fe:15:03:45:40:39:fb:04:a1:18:e8:02:d2:
26:c6:b6:49:70:9d:18:b0:d2:11:4b:46:6f:a5:cd:0e:69:7a:
77:f6:d7:16:7c:7e:e4:5c:d5:06:5c:5d:91:8f:73:f7:12:98:
4f:e1:28:fe:f3:05:78:4f:78:52:6d:04:c6:5e:7a:3c:0a:fa:
d7:0e:a9:5a:58:85:01:ac:38:74:52:38:b6:85:38:a3:a6:46:
e2:d4:2f:64:e4:a7:2f:d5:43:a8:d4:b2:78:38:39:8c:12:bc:
b6:ca:5f:0f:27:cd:66:d4:e2:d6:8c:d6:35:e6:ff:32:03:1e:
17:b2:22:ab:b0:00:72:0a:8d:85:1e:b6:8a:8f:8c:65:dd:2c:
1f:db:21:bb:57:52:31:dd:38:41:40:92:73:87:53:59:83:16:
af:f2:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:50 2026 by rpki-client