Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: I3q2Cjbg++RYbZOBJnEdZGp6YjjBC7XgaFrJLb1xSFQ=
Subject key identifier: FA:4F:A6:8E:85:32:D9:3D:58:29:51:DB:09:B8:AD:03:24:90:D7:FD
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019CABD98391794FB55EC93460E617680E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 100C
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: rEB4DxYOhAEKru4to6JyjPXy5B64w8K5upU5PoqNwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:83:91:79:4f:b5:5e:c9:34:60:e6:17:68:0e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=fa4fa68e8532d93d582951db09b8ad032490d7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:85:bf:58:4a:de:0c:16:70:8e:51:d9:b1:fe:
00:f9:46:9a:4b:0c:59:a4:17:50:fd:41:8a:2a:f8:
2a:c7:00:55:51:36:7a:ed:78:cc:e0:93:0e:5c:10:
8b:38:6e:1b:b4:13:2e:db:63:84:1e:6a:6c:63:43:
73:76:8a:fe:f6:c4:99:aa:9b:1b:93:0f:47:07:17:
bc:39:5b:76:d6:9a:6b:10:6e:09:77:d5:c2:13:e7:
b0:c8:0b:c6:9e:8a:f1:91:3f:26:1c:01:26:56:a6:
82:59:56:15:d2:8c:d4:d8:8d:ac:99:30:0f:1a:19:
b5:d6:b8:8e:df:be:74:06:c9:a1:fe:cb:09:5d:97:
78:5e:1d:32:ee:5a:29:fe:c4:04:b7:a7:dd:1e:55:
d0:b6:5d:77:ee:fc:8f:09:4a:fa:76:93:41:95:3b:
0a:11:a7:a6:d8:d1:70:6a:23:3f:dd:ea:e9:1e:77:
55:b1:3c:59:e4:66:35:61:93:75:73:3d:92:8a:b8:
b0:2e:fa:65:a5:c0:d3:9a:7c:a1:81:98:4b:b2:87:
5f:bb:2d:77:71:d0:f0:32:05:b0:ae:88:9c:1f:cd:
dc:0b:38:ef:27:cc:78:d9:49:29:45:c5:83:72:d1:
26:40:81:d0:4a:32:3f:3e:1e:a3:24:a4:2d:e7:53:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4F:A6:8E:85:32:D9:3D:58:29:51:DB:09:B8:AD:03:24:90:D7:FD
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:c2:2c:05:73:6e:7c:02:7b:cb:21:bb:c1:c7:1b:ad:00:
1d:62:e4:1a:f9:43:80:f3:62:dd:cf:90:86:da:21:b1:43:33:
c2:2b:a8:f5:b8:a2:c0:5f:7a:50:60:09:90:dc:e3:a9:ab:f7:
a9:6e:25:6f:05:7c:a7:f3:d1:e1:6d:53:81:b9:fc:a4:1e:e8:
e1:43:9d:cc:af:45:41:1a:3d:1d:46:08:27:47:e3:6b:69:e8:
5a:4c:2d:94:4d:47:e9:28:e0:96:c9:e6:b4:35:86:82:ef:3f:
78:c5:c6:c3:5e:65:7c:1d:07:2a:40:0e:1f:28:c3:a9:d1:a1:
58:cf:57:9c:7e:03:bb:0b:e7:fa:f6:aa:b0:d5:b0:dd:d6:98:
e9:b9:28:81:84:66:bf:12:8c:f1:b7:9e:64:a5:2b:09:53:d0:
fa:47:38:ff:a9:1d:f7:21:04:51:90:df:51:e0:f1:74:37:a8:
3c:96:28:0a:5f:a6:f6:b2:80:40:46:5c:0d:b3:eb:3c:d9:3b:
88:4b:00:fe:28:d3:a6:f4:4d:92:a4:5f:5b:b9:5e:55:e5:79:
f0:9c:fe:fc:75:fc:6f:51:72:f4:24:d5:47:d4:37:64:2f:58:
8f:74:2c:64:7d:d0:1d:c1:90:8a:c0:2b:fd:ab:8f:c2:ec:8b:
1f:78:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:28 2026 by rpki-client