Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier: uXGQxP20FkaLv+noH0hz9SUxXUk7kUtpbnOkEXc9rpk=
Subject key identifier: 83:8A:2C:77:2C:1A:A3:6E:3E:04:AD:93:CB:32:5B:7C:65:74:0A:09
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 019CAD5A216279B4077039CEB47E13294B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number: 0ACE
Signing time: Mon 02 Mar 2026 07:01:30 +0000
Manifest this update: Mon 02 Mar 2026 07:01:30 +0000
Manifest next update: Tue 03 Mar 2026 07:01:30 +0000
Files and hashes: 1: FMQ4xU5rGzBy9XfN6xkHNPPuK2w.roa (hash: VpW8Q4PIVbHWidRFeTd9pn+aHZWxpeF2VrUK329P7b4=)
2: OJY6iE54MT93V4GP2ZSvbOq5K4Y.roa (hash: 4QTAC5eFNbrr/GKOsA3KxkrPE1SA8Il65VwGfi0JgLQ=)
3: sP3xxrP16BVYtRejuodDQfjDjnY.roa (hash: rhdnZt+TyfSBG9e9GLDjxat3cDe+UxxerHxAqaJJWko=)
4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: xEi9pFxxsE2dmfXonX6D5+0R9QyO9AdZN4vPyxYKIqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:21:62:79:b4:07:70:39:ce:b4:7e:13:29:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Mar 2 07:01:30 2026 GMT
Not After : Mar 3 07:01:30 2026 GMT
Subject: CN=838a2c772c1aa36e3e04ad93cb325b7c65740a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:db:52:51:9b:1e:52:44:a0:ec:cb:c5:cf:
57:86:a9:68:0c:b5:f4:2a:b0:75:b5:6f:d9:5f:63:
d8:3d:f3:e0:d9:16:fa:fd:7d:c1:0b:01:6f:63:8b:
bf:bd:22:29:f5:ed:84:f0:b6:4b:20:de:ba:be:c3:
be:a8:61:d1:96:5e:5d:5f:8e:8f:8b:28:5c:89:6d:
a4:54:09:a2:20:c5:82:a1:70:e6:85:fa:a9:b4:f8:
94:67:ca:07:68:24:b8:2a:21:a8:6c:1c:9f:69:e9:
71:ab:f6:d7:c5:62:67:8b:95:9b:0a:77:0f:33:70:
dd:fa:8c:5c:30:c7:09:b5:6d:af:0b:e1:0f:0c:f2:
df:0e:b3:d6:cf:87:58:ac:c4:02:fc:c9:25:bc:65:
af:7a:9d:b6:b7:c8:89:fc:a8:2d:9e:2b:70:05:56:
1f:88:14:31:3b:8f:11:ab:26:78:aa:5b:c5:6e:cf:
bc:14:e9:91:35:5c:9d:e6:42:05:43:1c:df:44:28:
8f:f1:7c:c4:b5:67:c1:47:54:c2:a6:67:ff:c2:19:
e3:dd:4a:92:61:e9:6c:01:22:43:d0:81:8b:80:b5:
14:2c:de:b8:31:d3:3a:d2:83:59:60:d5:72:40:fc:
5b:33:cf:37:af:ea:2c:65:e2:a0:b5:b2:4a:20:26:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:2C:77:2C:1A:A3:6E:3E:04:AD:93:CB:32:5B:7C:65:74:0A:09
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5d:55:00:02:c9:4f:45:21:06:df:f0:78:3d:03:5c:4f:17:
bd:a4:f8:c5:a6:1a:b9:88:2a:86:65:ac:07:8b:4f:5b:fa:39:
6a:21:5e:01:b4:2d:99:95:eb:3a:74:2e:ff:d0:ef:87:5c:0f:
9c:86:1e:48:4f:58:23:b0:61:82:65:98:d5:f7:89:5e:de:22:
51:14:44:c2:3a:3b:50:0a:51:fc:2e:c3:eb:cd:07:9d:3b:18:
ce:ca:41:be:ec:cc:91:ee:64:9f:e2:33:01:47:85:7c:de:ae:
30:32:32:2d:1d:10:63:2b:c7:3d:2f:af:73:57:68:66:82:42:
3d:1d:21:d1:9c:c8:f5:76:29:26:30:27:06:5f:60:e8:64:b2:
e3:db:2f:56:64:4f:41:88:08:e6:e4:fb:b9:c8:f1:4a:f6:9a:
af:0f:9c:2d:be:6b:08:06:c8:c5:e5:1c:24:73:20:b2:18:47:
2d:ac:ac:f5:91:90:8e:37:7c:c9:8b:ef:24:97:a4:57:d2:9d:
2a:42:5d:a2:9d:29:a8:9a:31:85:d0:5e:57:13:82:20:d3:02:
7a:86:94:71:15:b1:b3:47:4a:14:ff:a3:88:96:06:0a:e3:2e:
05:d7:91:ab:fe:bb:b5:00:6e:a9:0c:db:e8:b0:da:b1:e6:15:
43:63:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:56 2026 by rpki-client