Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: JfvDBQB1HXzKekpFT6L621lToXwS+5PGd9c+HO2hkLo=
Subject key identifier: 46:4A:05:AE:B3:7E:A8:D0:1B:6B:2B:15:62:6B:94:AD:50:90:95:4D
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 019CADFE2AEF11CD1465BF1A17ED15D54963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 06A5
Signing time: Mon 02 Mar 2026 10:00:41 +0000
Manifest this update: Mon 02 Mar 2026 10:00:41 +0000
Manifest next update: Tue 03 Mar 2026 10:00:41 +0000
Files and hashes: 1: weXQO5Zhks4AnxcOCqcdzSxxPsw.roa (hash: ppnHsXhOiw58x/xYY5Ym72woaS7PHjIfKEtOPYGXh1U=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: Cz574kUtPS0ATNr04oXy1dsyaeuXbZEVY9ecHQH0KCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:2a:ef:11:cd:14:65:bf:1a:17:ed:15:d5:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Mar 2 10:00:41 2026 GMT
Not After : Mar 3 10:00:41 2026 GMT
Subject: CN=464a05aeb37ea8d01b6b2b15626b94ad5090954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:8d:b5:cf:5b:32:67:ab:9c:7d:1b:89:71:
77:9c:96:5a:e1:01:dd:6c:2f:ac:49:b0:2c:eb:c4:
d3:4f:19:19:f6:7e:04:32:90:00:a0:c1:af:91:16:
f1:87:5a:28:eb:0c:26:b5:19:60:db:96:40:09:ff:
4b:cb:a5:18:90:c4:96:1b:d0:7c:7a:21:47:33:97:
fd:4e:b5:27:25:ba:3e:ca:4d:74:ad:6b:cb:5e:73:
43:32:5f:24:ec:ef:f9:42:60:98:25:99:06:2e:59:
ca:2a:8c:5a:ca:52:b1:3b:6a:7c:76:fc:fc:02:58:
a6:fc:96:fc:de:11:c8:66:48:27:f6:02:aa:4e:1e:
f1:46:e1:fb:8b:86:39:93:85:c7:c2:3e:16:5d:83:
a0:30:0d:a1:80:36:f0:a6:74:25:f4:01:46:38:27:
3a:6c:bc:77:81:4e:03:f3:c3:bd:28:17:dd:b5:ed:
a5:ef:7f:5e:85:7b:13:de:b9:f2:61:99:1b:3a:db:
1d:b4:20:dd:f4:96:60:7f:01:26:73:d2:c1:74:ff:
d5:dd:e6:e9:4c:cd:e1:c3:b1:be:f3:35:b6:79:6c:
f4:aa:7a:83:2d:1a:73:7c:c2:df:e7:99:9a:f1:a3:
7d:71:4a:a9:df:d7:98:dc:5c:88:72:fe:53:0c:9b:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:05:AE:B3:7E:A8:D0:1B:6B:2B:15:62:6B:94:AD:50:90:95:4D
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:89:97:cf:b3:d6:d4:83:3d:25:71:9a:fc:8e:f1:1e:78:
d8:b6:cf:58:c9:12:01:ce:bb:32:93:73:56:4a:ab:52:d8:ed:
65:13:f2:6d:0d:5d:29:01:1e:88:a3:99:be:be:a1:5a:bb:1b:
70:a8:2f:ff:4b:43:ac:61:64:94:4b:1d:83:f2:8f:4c:a5:af:
da:9d:d1:bf:fa:c3:72:ed:c3:28:fd:96:ea:16:ae:fa:91:85:
24:dc:f5:54:18:97:d2:f9:d6:88:4f:a0:1d:f0:7b:9e:73:85:
1c:ba:b2:f7:df:4a:da:85:1f:66:12:08:96:e1:ef:49:4a:15:
21:2a:ae:c2:6a:37:f9:13:d5:76:a5:ed:f1:f0:df:48:33:27:
49:40:8a:fa:28:ea:e6:26:7c:b6:0e:77:5a:7e:b0:13:37:63:
62:27:71:d8:a7:44:07:a1:d4:b6:8b:9e:1e:3c:12:8a:11:31:
9c:1f:50:b6:e2:fa:fc:61:ca:d8:9c:56:32:d7:8d:4b:bf:1c:
0e:9c:1d:5f:9c:f2:85:cd:8c:75:cf:76:74:d3:7e:8f:c3:d3:
a7:b3:21:64:4a:8c:ec:89:d0:95:aa:64:7d:4e:ad:f4:43:b4:
af:ff:37:6d:f7:d6:68:d1:b5:70:9b:84:e7:f1:6a:ed:f9:c0:
bf:22:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:24 2026 by rpki-client