Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: V8V0yfF6LJXofm4XiTn79Qa7jgmJW2J+8quM49IdQaE=
Subject key identifier: 4C:9B:63:69:94:0A:2C:7B:57:CE:C6:28:B0:C1:29:7A:BA:94:9F:10
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019CABA1C11A36EE3904AFB455D75E7C23BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 4gB/yteB5Rnkc2dEGoDiuESWNV+YnAU66TqHoSOVQN0=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c1:1a:36:ee:39:04:af:b4:55:d7:5e:7c:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=4c9b6369940a2c7b57cec628b0c1297aba949f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:41:36:45:93:b7:15:ab:9d:5d:34:e0:fc:
95:ee:a4:c2:0d:ab:9e:14:1e:9a:89:cd:cf:d8:28:
02:30:7f:f4:c1:51:9b:43:cf:59:d7:15:ba:b7:35:
d4:7c:05:ff:d2:c7:30:ea:e3:ae:72:61:ce:cb:f5:
4e:14:6d:28:44:07:2b:7c:a3:d0:f5:f0:9a:d8:d2:
d1:62:77:da:ca:d2:6a:33:c7:a9:41:33:73:8e:59:
c9:0f:45:c2:4b:18:e7:da:46:e1:73:50:e0:bb:6c:
fb:67:5e:38:8d:44:43:b2:0d:7f:92:5e:c3:54:6d:
ba:5e:21:18:00:c7:7a:94:97:ac:57:f2:17:66:dc:
d1:c8:91:9e:1a:a1:af:f8:2a:53:34:48:b4:86:01:
d8:64:ee:4d:1b:d8:35:d4:28:f0:d8:f0:62:ba:e4:
d3:77:2e:00:d9:54:29:c0:0d:49:0b:8a:55:08:08:
73:13:70:f0:ed:d7:fa:36:92:a8:1a:d7:c4:f3:0d:
a1:50:8f:33:0b:8e:b6:91:50:25:0e:1a:eb:9f:78:
79:4c:3d:ae:fe:7d:c2:7e:04:1f:60:9c:d1:39:4f:
c1:fa:4b:ef:18:b5:7f:8e:cc:e7:4f:67:d6:7b:0a:
89:fc:71:44:e9:8b:3f:71:4d:a9:fc:05:d5:44:6c:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:63:69:94:0A:2C:7B:57:CE:C6:28:B0:C1:29:7A:BA:94:9F:10
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:52:3a:58:dd:31:61:73:89:39:a2:5e:df:51:b8:70:f3:9a:
99:39:12:4f:9f:62:a6:5b:e8:75:44:31:e3:c6:29:f5:bc:9d:
55:5f:a0:e6:66:a8:c7:3c:fd:9f:a4:d2:c1:67:3e:ee:90:b2:
02:54:7e:30:d4:89:e4:5c:e6:e1:c1:a2:85:bb:4e:bc:fd:a5:
61:5e:25:1f:90:bc:cc:ee:9c:26:89:0b:06:3d:61:c2:36:c9:
4f:27:ee:22:6e:21:39:54:50:25:bb:60:1b:b7:74:1c:e1:0c:
fc:b7:65:19:67:bc:f2:25:29:5a:3a:62:56:63:93:5d:ca:e3:
5d:87:b5:61:23:4a:09:6f:9d:e2:b7:5e:94:5d:84:9e:4f:fa:
3d:77:17:4c:ec:58:24:8a:7d:c3:f1:76:31:a3:c5:d3:c5:a4:
b3:da:26:9b:fc:e6:d5:80:b1:3d:f9:c4:03:bd:ed:4f:bf:11:
c3:d8:d0:de:81:46:87:99:23:4f:23:23:a8:63:fa:d4:75:54:
ae:bc:02:81:c7:8f:42:23:07:95:1a:09:a6:47:8b:41:e1:00:
b5:e6:f6:bf:cb:cc:0a:33:82:50:2e:98:20:74:5b:91:34:34:
ab:cb:be:a4:b1:d9:0c:b9:db:90:32:60:06:7b:e8:46:2e:b3:
f7:ae:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:24 2026 by rpki-client