Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: M8/tjw+e/QRYepKF2xud8c67uqKwLFCTg20V/L/vrCo=
Subject key identifier: D9:32:C1:29:CA:54:D5:70:E0:AA:58:2B:ED:74:85:9A:15:3F:20:CB
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019CAC0FA48256FFF345B628514D09A5F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 07CB
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: 8zt6uRSGWMwkOLbIfJ3LMVs67bp17gvLSr2uxOM9kXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a4:82:56:ff:f3:45:b6:28:51:4d:09:a5:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=d932c129ca54d570e0aa582bed74859a153f20cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:6e:bf:be:0a:6e:ca:08:e0:52:45:95:e2:
f8:c9:89:94:f6:f9:7a:82:73:b7:79:07:25:0f:f0:
a6:86:26:49:ec:06:8e:a1:a5:4f:e9:71:f3:c0:3b:
d7:68:67:e7:15:5a:3e:54:a5:96:46:ed:c8:14:c5:
ca:f9:a2:05:57:18:3f:e7:6f:29:7c:50:f5:2c:2e:
12:05:c3:de:ff:d4:39:34:9f:ae:8d:87:a7:14:39:
94:b4:6a:62:9b:0d:99:41:4d:60:25:8f:80:9b:bb:
6d:e1:3d:5c:f7:1b:f4:7c:4f:30:70:3c:82:17:41:
f2:a6:59:1d:0d:eb:4a:08:24:b5:8a:16:60:74:be:
56:ec:69:c6:35:60:d0:ea:5b:ce:c9:07:00:fc:40:
f1:61:39:02:57:33:30:65:5d:ac:ef:c7:48:60:81:
e6:ad:7d:be:11:00:c8:4d:85:96:c7:7d:19:f0:31:
70:83:ba:3b:e3:f3:f0:c2:25:f7:72:46:e3:dd:87:
55:1f:ed:cf:26:aa:82:43:90:b6:e8:e6:67:4a:97:
50:5f:4d:fb:24:27:7b:74:48:aa:89:e2:74:67:de:
0a:3d:b0:b7:f2:f8:34:23:77:d0:04:ac:c1:d6:8a:
7d:b5:68:82:5b:82:ee:0e:4c:1b:b5:0f:9f:09:8c:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:C1:29:CA:54:D5:70:E0:AA:58:2B:ED:74:85:9A:15:3F:20:CB
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:f3:b3:2b:94:82:9b:13:42:f3:1d:23:aa:d7:fe:cd:db:
b6:e1:12:a2:b3:9d:b8:c5:db:b6:82:9f:dd:5d:ed:0b:6e:98:
e0:42:4a:03:30:f8:3d:84:e7:9e:b2:bd:71:2b:38:00:43:88:
e6:74:04:f1:38:42:ec:72:0f:ed:25:c4:22:13:a6:bb:f1:c3:
74:9a:34:ed:e7:2c:09:9b:df:b3:19:27:70:37:91:76:57:9f:
90:93:f0:6c:23:2b:56:e0:14:5f:c2:a3:e9:32:c6:2d:30:95:
0d:35:b1:63:60:bf:d1:9b:96:1f:32:9a:b4:f4:1a:56:2e:ea:
5a:2e:34:64:0f:e7:b4:cc:92:95:cf:fa:1b:92:eb:ca:30:40:
75:bd:76:01:3c:8c:6f:6c:9d:ac:9e:38:64:0c:17:97:08:6f:
8a:a0:a4:d0:42:5e:5f:4c:11:3c:22:d6:20:7e:08:c7:75:a7:
42:db:5e:85:9c:53:ed:d9:5b:93:2c:97:ef:3d:50:dc:68:26:
fc:2c:47:98:c5:56:b9:4e:2f:4d:5e:18:18:f6:81:89:f2:f8:
f4:aa:c8:6c:06:6b:0f:ad:06:19:c0:05:86:c3:20:d4:1e:fa:
c6:e4:2a:71:b1:37:51:8d:b4:1d:1f:1f:f6:61:33:30:b7:98:
cc:e4:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:30 2026 by rpki-client