Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: Dhkp/j/txroeTzzelPDrDuhwV3dnhIctOzZCebF4Szw=
Subject key identifier: 65:A2:AB:60:BE:5A:F4:CC:F6:D2:FF:BF:35:2D:3D:87:71:63:0C:8D
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 019CAA8F9852BA73620E04DE03A0B5C81366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 1010
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: 0lvxK/ovZ922hWIjRkqnm7eBVcW8RaWlKGhPWJUUjXk=)
3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:98:52:ba:73:62:0e:04:de:03:a0:b5:c8:13:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=65a2ab60be5af4ccf6d2ffbf352d3d8771630c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:0d:80:4a:e5:87:2e:ff:5e:14:49:cf:13:
ed:cb:2a:8b:7c:5c:d5:34:5d:49:81:70:49:a0:16:
0f:ea:d4:6e:13:01:23:49:42:83:51:be:67:d1:a2:
e6:ec:31:db:83:d3:1e:79:23:a5:38:fb:bc:8b:c6:
17:9c:9c:c6:91:35:fa:bc:c8:09:57:60:00:64:5f:
cb:85:73:9a:a2:57:11:dd:63:51:93:cc:bf:eb:37:
03:d2:aa:45:f0:96:ad:ff:3f:02:22:31:4e:fc:d0:
b0:c6:e1:69:26:82:95:46:e0:12:12:34:0d:0f:22:
2d:57:e9:2c:3b:cf:aa:69:53:5c:34:6f:d3:e7:da:
e3:e9:76:17:1d:11:99:7d:3e:b8:89:fb:d5:58:be:
40:d0:4b:62:22:91:6b:52:69:a0:80:11:21:74:4d:
c8:9a:37:40:64:4e:35:69:f7:89:86:52:ce:a0:8d:
2f:44:7f:9d:bc:bf:8d:92:9d:97:cc:f6:fb:b7:d8:
9c:5f:b6:af:88:b4:07:43:2d:a3:dc:54:9d:00:3d:
e8:e4:af:d3:81:a2:ec:03:77:09:32:b4:f5:d2:96:
08:c6:0c:b5:0c:7d:5b:8e:12:dc:e3:63:08:a4:ae:
71:c2:ad:24:37:79:a3:6b:e2:f9:8e:d2:5a:56:f0:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:AB:60:BE:5A:F4:CC:F6:D2:FF:BF:35:2D:3D:87:71:63:0C:8D
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:62:21:99:f8:f6:a9:96:e6:31:10:28:ad:94:dc:23:84:
a1:4a:f6:4d:28:a4:a1:79:7a:98:71:6d:73:83:00:96:c0:21:
7e:f8:a4:f0:84:04:0c:a7:3d:76:a9:df:dd:71:f8:76:68:f4:
33:3f:fe:5f:7e:5a:18:b6:a9:47:2e:fe:0f:14:67:09:cb:16:
44:f3:97:7e:b1:a6:ca:75:ce:03:18:bf:fa:d6:50:c0:d4:59:
9c:74:45:fa:e0:19:10:d8:01:fd:5e:db:a2:d4:90:d1:c2:54:
ab:15:c0:34:61:c4:5e:7f:dc:20:62:4b:78:5a:0a:48:c6:14:
46:5a:42:6f:74:7a:b7:a0:9f:ed:a4:67:ee:63:fc:8e:d0:db:
c9:a1:50:1c:63:81:52:e4:93:05:1a:e3:68:c8:7f:c1:9e:d0:
65:7e:32:58:b2:3d:ae:47:86:c3:f6:59:98:57:9e:fa:ca:18:
39:d1:36:d2:d3:13:9b:ed:52:95:72:29:e0:02:7b:d5:f9:16:
0d:b4:16:a3:8a:53:01:b8:bd:c1:f8:20:34:eb:c1:85:64:de:
a7:96:f1:6f:58:ef:2b:47:75:d2:fa:60:aa:3d:1b:31:89:35:
a8:06:7e:fa:00:ab:ab:7d:40:f0:a6:cc:63:1f:41:a3:ee:36:
62:76:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:43 2026 by rpki-client