Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: Ix4+BUyDKhIPNlLAErcHhsI+UXaLKe7j5zexNNXy3is=
Subject key identifier: 37:7D:8B:91:2A:A0:66:6F:98:F9:AF:32:34:81:15:B4:9E:3D:68:2C
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019CAB34630D79443AE4763606D2EAD03EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0E00
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: h/Uks3+jPzbLvwLGIXSKVgWcuYBtq6hMOCPRE41TPtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:63:0d:79:44:3a:e4:76:36:06:d2:ea:d0:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=377d8b912aa0666f98f9af32348115b49e3d682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:43:85:32:86:5b:44:4a:0d:d0:02:9b:2c:
cc:49:ad:22:42:93:0e:04:97:77:0f:35:ca:bb:2e:
45:fa:f1:11:02:2a:99:ca:d9:1a:b1:75:b3:cd:0a:
cb:f3:7e:f8:c3:84:33:4c:5f:8c:66:0b:31:5f:e0:
9e:af:9d:a8:1c:fc:ca:e3:73:3e:ab:b0:b8:c8:2e:
c1:64:a1:0f:a1:73:94:f8:c0:e1:e9:89:84:7b:04:
87:e4:c8:50:5d:a0:a4:a1:7a:fb:33:1e:69:02:8b:
a3:4f:4c:b4:a7:35:41:30:15:85:52:2b:67:7e:64:
94:c6:3a:ec:d4:86:36:11:15:02:ae:02:15:71:99:
8d:71:43:24:70:8d:0d:1b:83:d2:aa:48:0d:c3:9e:
e7:53:54:8d:48:08:58:73:4d:2e:dc:5e:9f:7e:8a:
e3:63:1f:a4:e7:ac:94:04:99:17:e3:a3:03:af:ec:
e7:ac:d0:a9:ef:a1:0e:08:fc:70:42:88:18:00:5e:
25:1e:89:9e:42:d1:36:75:0c:be:c1:30:9a:09:cf:
84:ba:6d:06:f0:69:7f:cf:f9:75:18:dd:db:d8:4b:
46:16:72:d6:6f:c1:58:87:f9:c9:fa:38:07:02:79:
2d:5d:2f:3b:b8:38:12:6a:7b:9f:8f:94:28:aa:51:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:8B:91:2A:A0:66:6F:98:F9:AF:32:34:81:15:B4:9E:3D:68:2C
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:b8:43:1f:d2:86:89:12:78:b1:de:4f:70:b5:f1:3b:6a:
92:30:ee:6b:09:2a:99:7e:0d:eb:52:69:4e:13:f4:68:52:eb:
f2:4e:cf:ef:d7:af:85:d4:cd:ab:3d:5f:a5:fd:0e:e7:88:24:
82:2e:3b:5c:18:81:9d:53:4e:27:94:e8:4c:e5:8b:6c:c8:e9:
6b:a6:36:0d:4a:4c:50:9b:83:42:fd:90:b1:a0:f8:bd:9c:06:
be:66:e8:cf:e2:8e:74:ba:91:a8:e5:a1:95:87:44:73:1c:d2:
42:fa:ca:31:9e:95:b9:24:f9:c4:56:81:67:4e:28:7a:7c:35:
6f:2f:16:15:0a:d5:98:cb:ea:cc:56:02:27:ed:4c:28:20:2c:
15:23:92:d0:ae:1d:49:80:ec:49:bd:53:b5:78:b2:c1:d9:99:
75:a5:22:ea:7a:72:82:0c:d5:62:0b:ab:3f:64:60:26:42:80:
fe:dd:0f:a0:b3:60:6e:31:50:49:2a:22:75:76:13:7c:a0:1f:
95:20:e7:69:ee:47:07:35:01:55:14:30:5b:08:92:f8:91:5a:
fa:ab:ad:db:ab:47:97:45:06:98:3a:39:34:07:bf:11:78:93:
ea:44:ab:03:ef:19:30:15:2e:6d:11:03:24:01:cb:2b:e8:f8:
4a:ee:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:40 2026 by rpki-client