Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: payl2gJ/+rrjBXUtAy2LdRxT7eIfCthBRwEAk8cNIQo=
Subject key identifier: 0B:75:A7:84:AF:04:6F:FE:E1:91:B0:BC:DC:90:95:98:2A:6D:EF:A3
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 019CAC4760FD4C6C9BE05E769A5B1E12E27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0C57
Signing time: Mon 02 Mar 2026 02:01:24 +0000
Manifest this update: Mon 02 Mar 2026 02:01:24 +0000
Manifest next update: Tue 03 Mar 2026 02:01:24 +0000
Files and hashes: 1: T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa (hash: VtgvY+pr4Qh9U0W3p9dUNdOupQfVK9H5yjxhbie2llY=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: Chp2tIGNg1+mHGWPIrLky/h8+kDmLfK+8LjQyQ18bNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:60:fd:4c:6c:9b:e0:5e:76:9a:5b:1e:12:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Mar 2 02:01:24 2026 GMT
Not After : Mar 3 02:01:24 2026 GMT
Subject: CN=0b75a784af046ffee191b0bcdc9095982a6defa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:a7:b5:d2:a8:fd:f4:cf:57:da:2f:b6:6f:
42:3d:6c:05:ba:3e:b1:ad:45:db:c8:23:64:7a:82:
97:b9:1f:9e:09:e2:8b:ed:d2:20:ed:ea:d2:09:46:
a1:6b:b5:0c:6d:12:64:f2:ca:bb:04:96:29:70:67:
45:47:42:ba:ac:16:a9:3e:23:c6:ba:ff:9e:12:53:
d0:b0:96:34:05:00:af:ea:81:10:d4:08:77:99:68:
6e:d3:98:b4:17:18:4f:91:a9:a5:85:f1:66:58:e8:
96:56:93:e9:76:cf:4b:ce:76:c9:53:67:55:10:8b:
29:b4:b2:66:f2:c0:29:aa:b8:79:da:d5:97:b9:f4:
13:e3:ac:43:50:04:52:25:e7:c0:d4:ac:d7:5a:1f:
eb:55:0a:c7:be:ad:3f:f1:62:8f:e0:cc:d8:76:05:
f6:c4:d8:01:1c:4e:8e:72:98:b6:40:c5:11:65:2e:
7d:54:95:0c:9d:72:3e:af:6b:91:87:79:0c:5d:95:
01:02:98:e9:2b:b6:17:3a:90:61:3d:ea:c0:3d:f9:
b4:e5:09:2c:77:6e:97:55:6e:ef:8a:5c:39:e2:3c:
4d:4a:a8:d1:4e:9f:98:b9:e3:f7:12:df:1d:b4:f6:
53:9d:1e:3d:c8:c2:bf:cf:4b:8b:07:3e:d3:a1:fd:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:75:A7:84:AF:04:6F:FE:E1:91:B0:BC:DC:90:95:98:2A:6D:EF:A3
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4a:30:7b:90:28:9f:36:eb:cf:47:c0:e1:93:fc:2d:4c:dc:
bc:0d:2b:32:20:a9:3e:dc:d2:ef:fe:4a:89:ae:c0:21:24:86:
43:3d:95:c5:9e:c4:32:61:55:e8:2c:bc:6b:e4:f5:81:28:1e:
ba:43:8f:6d:61:0c:e6:d5:1e:ec:4c:d9:f7:11:56:ce:75:6f:
48:11:de:ee:2f:c5:a1:38:26:db:82:99:0d:ee:27:54:98:da:
24:d9:c7:0a:b0:21:5d:a6:44:d5:78:61:77:cf:d8:68:2e:90:
26:2a:94:fa:7b:17:15:4a:76:a1:e7:ce:7f:6d:fe:9b:30:eb:
8a:d0:e0:83:30:2b:8c:c5:64:dd:aa:7f:dc:63:b7:2e:4d:24:
10:df:f3:46:64:83:f3:7a:35:66:f7:b9:9a:2f:ed:70:8f:86:
32:c2:50:c2:69:30:85:7c:42:f0:21:cb:28:62:e6:fe:0c:91:
88:26:91:03:5c:be:92:17:77:40:c6:74:91:43:f5:2c:6c:42:
2c:e2:59:3d:77:0d:5c:4d:5a:e8:59:dd:88:31:d6:2b:0e:e3:
9f:8d:4b:c8:0e:cd:1d:88:6e:63:18:d2:d7:77:c1:3b:e1:61:
f4:2e:82:38:14:0a:89:52:b0:17:2c:ea:f4:6e:07:59:8e:42:
fa:d4:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:47 2026 by rpki-client