Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: QRiKo6K+reGPlEbUjCu7QrH8cVKBYcK07ZQ5PO8+sIw=
Subject key identifier: F2:26:40:D7:A1:19:20:63:D9:8C:DA:A3:7D:7F:26:80:E7:C9:73:A6
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 019CAA21F796510376C33AE01854640CA9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 1212
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: tnlT3WguTIaBPQyXQdyvdPZTqq0.roa (hash: OdNtfnb+ps4t4Tb3faIsE6ujGrvLv+3p6hrL7wNeeB4=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: 7JkkGm/iy74HvvB2dI4N3gn6yIcKfnzMcwCJhpaA+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f7:96:51:03:76:c3:3a:e0:18:54:64:0c:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=f22640d7a1192063d98cdaa37d7f2680e7c973a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:db:52:7d:48:1c:bc:da:3b:de:d8:23:4b:
7e:d2:92:c6:e5:59:be:13:88:be:e1:e4:3d:24:55:
cc:6a:42:7f:96:eb:1b:a5:98:65:8b:83:4e:c2:3b:
5f:dd:8a:93:79:53:21:7f:e8:5d:3a:ac:82:a1:64:
a7:b1:8f:d1:fd:9f:d0:1b:d8:f1:f4:b5:59:e9:2c:
6c:c4:ca:f2:16:dd:80:1d:9c:0d:6a:2e:eb:3d:e0:
e7:c3:4c:4e:51:41:03:de:71:0b:88:05:09:16:dd:
92:55:42:16:ec:e5:09:11:f5:38:fc:24:37:b8:40:
be:80:e9:fe:3c:66:43:45:30:ee:b8:32:32:5d:16:
79:5c:4d:72:d3:0e:4f:87:f4:45:ee:f4:36:96:df:
ff:1c:1b:0e:29:bc:f5:b7:86:49:f5:be:a4:25:c4:
28:81:6d:a5:f3:91:5c:1e:64:a6:ea:51:7a:eb:5b:
bd:a6:5e:49:06:a6:0c:2c:84:98:05:3d:40:76:f1:
8b:1f:01:ea:48:6b:09:28:00:6c:60:fe:de:fe:3c:
a1:1f:f8:de:84:dd:fa:ad:d3:1a:f7:85:ab:44:67:
37:c9:4b:36:75:eb:1f:b1:92:13:c4:f4:04:23:6f:
c1:09:af:6f:0d:99:76:8f:3f:5a:ff:7b:7b:27:64:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:40:D7:A1:19:20:63:D9:8C:DA:A3:7D:7F:26:80:E7:C9:73:A6
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c1:f5:f6:38:9d:e1:1c:ac:49:dd:a9:34:4b:21:2d:21:0e:
bd:09:4b:49:17:59:46:55:08:21:f6:3a:f9:0e:ae:6b:83:90:
05:d5:4a:a6:49:f8:66:2a:bb:0e:96:29:70:c8:89:41:b2:c8:
61:86:0b:0e:27:99:5b:aa:a7:2c:ad:fb:1c:a7:e6:78:c4:a7:
00:ef:7e:66:9e:e6:14:ad:33:da:97:da:15:4f:a1:3d:74:5c:
0f:72:20:93:64:8f:d6:1d:d8:68:70:a7:20:cf:ff:02:d0:53:
ec:f8:2e:9c:98:17:ad:a6:95:3e:8d:29:a5:1a:cd:d7:27:61:
b7:9c:33:97:02:1c:a2:67:d3:f0:36:65:34:7d:df:4c:6c:ce:
fb:6d:50:a7:8e:40:bc:ca:b8:a5:a0:f9:96:02:68:1b:d1:fc:
81:25:c0:ef:78:60:4f:89:c4:48:cc:51:9e:e4:67:1b:cf:28:
af:de:43:3a:74:de:21:86:eb:3c:7b:3e:ec:b3:b8:b9:3b:d6:
34:d5:ea:31:61:02:2c:74:06:eb:90:e8:03:e6:bf:08:d1:86:
94:22:34:24:ce:0d:dc:0e:6d:cb:22:ab:88:f2:e9:f4:ba:70:
b1:5c:6a:3f:03:28:19:8f:53:90:31:1a:1d:64:92:f8:69:14:
d9:13:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:31 2026 by rpki-client