Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: Y6IsPo+lI0lYkw0c86qZqOUsxddfnzVvvAqlJ9loss8=
Subject key identifier: A7:21:BE:CC:E5:C6:B7:B9:FD:0F:2B:95:BB:F7:6C:65:8D:5C:88:81
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019CA9B3B055D3AAD275264EA593EFD82ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 12E3
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 68Si4xa7HIiI5iYkHSgEL9r3nmrHwKIZ8fYtNDGHH2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b0:55:d3:aa:d2:75:26:4e:a5:93:ef:d8:2a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=a721becce5c6b7b9fd0f2b95bbf76c658d5c8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:92:34:d0:51:1f:22:ee:f8:40:cb:7a:9b:
19:40:6a:c9:c8:6b:0a:be:50:a2:97:d7:1d:99:b4:
47:81:8e:1e:42:e5:ee:bb:0e:c4:2f:b5:3c:de:d1:
d5:b2:5a:a1:26:06:e4:a3:17:ef:c4:5f:62:9d:3b:
15:7b:e8:76:31:33:46:0f:7c:bf:41:5b:4f:76:2b:
a7:89:e0:f0:13:81:11:12:07:9e:05:39:15:61:b1:
3d:1f:4d:fb:d9:15:36:75:40:b9:91:38:53:bd:f0:
b6:99:fb:e1:80:07:fb:83:b0:62:f4:9d:5f:6a:39:
c2:3a:78:7d:39:8d:99:46:a6:02:4e:3f:ff:ed:19:
0b:e9:b6:48:3e:c7:ce:35:18:cc:95:6a:86:7c:40:
12:d8:08:74:8e:82:02:cd:d6:2a:f4:e5:46:ef:0e:
2e:1c:9f:b9:0b:a0:06:d5:ac:f4:e7:61:65:d8:e5:
2b:0c:d1:7a:23:a5:34:be:be:23:7b:0c:79:8d:00:
5e:99:9e:1a:96:70:f5:f7:d8:39:90:80:bf:40:f2:
7a:91:ac:ba:63:b5:ef:91:d1:4a:b6:66:4b:46:e5:
3f:e8:06:6d:5c:01:8d:b4:19:88:73:e1:c6:e4:65:
2f:aa:f3:a1:15:d5:45:a6:b3:c8:9c:16:32:77:ec:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:BE:CC:E5:C6:B7:B9:FD:0F:2B:95:BB:F7:6C:65:8D:5C:88:81
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c6:9c:8c:d6:e4:e5:c4:37:db:fb:94:88:ea:b7:17:a4:7b:
22:e0:1e:68:7a:fe:78:da:f3:a2:e9:61:92:89:12:17:7b:fa:
f5:43:43:2e:bd:9f:0f:53:82:04:7d:1c:ae:12:97:e5:6d:b8:
fb:b5:91:32:6f:cb:97:69:d6:f8:5d:37:9e:fe:23:d8:4e:84:
6b:06:39:28:f5:90:b5:eb:82:8e:9f:33:02:3d:bc:83:8d:c4:
bd:49:0f:7e:0f:fb:2f:7d:df:bc:19:0b:97:34:ca:eb:ce:79:
13:9d:de:72:ba:87:9d:7c:36:7c:61:fb:d8:de:52:96:7e:34:
20:eb:73:cc:6e:00:9d:e8:7f:fa:e6:84:51:ec:b8:58:3c:ba:
c7:98:42:ba:d8:1b:4c:ad:6f:f4:fb:99:37:93:17:a6:22:9b:
b9:46:60:e5:0a:40:b7:15:20:c9:ee:39:b5:dd:b6:ec:5a:26:
5f:96:3b:01:54:d6:96:59:c5:90:f6:36:43:bb:0d:8f:86:4f:
aa:89:e7:11:09:87:31:55:c0:a3:2b:44:4c:9e:4f:1b:fd:c5:
49:57:ff:6a:d6:f2:74:fb:65:35:47:0e:73:ac:2a:c4:42:06:
57:a8:e3:6c:43:9e:9a:94:d5:81:0c:37:c9:55:95:cb:8e:81:
2a:8c:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:22 2026 by rpki-client