Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: uCzuLo2WaEm1k+T3Y7QfI5UYl9HfG2ZcQBJzT7VEU+M=
Subject key identifier: EF:33:CA:69:03:2B:F3:E1:DE:78:C9:DF:56:E7:82:21:0B:52:3E:4A
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019CADC81A899070199CAB5BE2A67330643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 03BA
Signing time: Mon 02 Mar 2026 09:01:38 +0000
Manifest this update: Mon 02 Mar 2026 09:01:38 +0000
Manifest next update: Tue 03 Mar 2026 09:01:38 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: oNJT8FLAV7PxET+UdBCz3kWwW9t84kWCmhwE6zfjVd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1a:89:90:70:19:9c:ab:5b:e2:a6:73:30:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Mar 2 09:01:38 2026 GMT
Not After : Mar 3 09:01:38 2026 GMT
Subject: CN=ef33ca69032bf3e1de78c9df56e782210b523e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:c8:c4:6e:6b:d2:a2:7d:c0:b5:91:16:df:
ed:5c:2c:3c:5f:d3:ee:e7:7d:d7:43:76:d5:cc:32:
88:af:62:cf:e1:3e:7c:70:ed:16:db:07:56:1b:3e:
22:77:40:a0:57:ba:9d:c4:24:72:b2:9f:ab:12:6c:
2f:ca:c4:14:04:17:23:28:12:5f:b3:5f:57:da:3b:
14:b3:1f:d9:54:1b:cc:c2:86:e0:91:aa:82:4c:3b:
f0:92:08:fd:13:e8:44:fc:6a:2c:3c:93:a1:9a:5a:
42:44:fc:83:5e:b4:07:8b:71:58:2a:89:14:b4:54:
57:f8:ec:f5:25:d4:7e:09:70:d5:1b:13:c6:fe:9e:
8c:0f:ab:bb:a0:4a:03:45:69:94:bd:6d:d8:8c:14:
cb:64:42:3c:d3:e7:cf:77:d3:35:6f:0b:2a:9d:f7:
4f:19:3f:35:3a:22:76:a0:3c:e6:e6:5d:53:0b:73:
be:d6:cf:9c:46:2b:fe:eb:8b:13:98:a0:c9:7e:1c:
67:01:f6:9d:1a:16:6a:8c:e0:17:38:72:4e:08:cb:
a6:93:95:64:36:4d:6a:cd:3d:26:77:ce:de:7a:2a:
35:99:4b:6b:e2:5a:a6:19:fe:41:21:f3:26:74:96:
ff:73:12:70:f8:25:66:e3:31:0c:11:f7:b8:61:57:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:CA:69:03:2B:F3:E1:DE:78:C9:DF:56:E7:82:21:0B:52:3E:4A
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9e:b4:2a:5f:8b:55:a2:2e:6e:27:9b:d1:c2:16:73:55:92:
a0:15:40:20:c9:d0:4d:5e:4d:b6:45:83:e1:b1:24:ca:0e:a7:
11:9e:ab:0c:82:53:9a:10:dd:3d:33:81:19:ef:8b:50:76:73:
09:ef:a9:10:fd:35:32:2b:43:c8:7b:c5:a5:8d:66:08:65:1b:
01:d7:25:44:bc:aa:f4:67:a5:33:13:59:27:1a:b0:55:cc:7a:
3c:33:20:b7:2c:e6:22:2d:5b:6e:85:18:fd:16:f0:18:f4:32:
38:ef:15:fc:46:81:a3:ef:e5:de:f7:85:cf:85:1a:1c:08:83:
c4:e5:40:b2:b5:7a:66:51:f1:d4:28:ca:42:36:e0:22:eb:95:
d8:a3:05:c1:aa:9c:97:44:23:cf:ed:02:f9:78:3b:2e:60:89:
f1:66:dd:33:6a:99:cf:22:74:35:65:3e:47:c5:b6:03:3d:59:
9d:27:9f:37:0a:d0:99:d7:0a:a4:c5:69:d6:c1:98:f9:af:1e:
5b:bd:22:56:48:fa:67:ba:fa:c1:22:d9:75:7d:aa:d0:7c:fd:
4d:cd:33:df:1d:66:18:0d:b1:3f:f3:ba:78:3f:78:d5:f6:02:
5d:ac:29:2c:bd:32:d3:b4:27:2a:ab:cf:25:a7:ee:b5:76:79:
31:8e:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:42 2026 by rpki-client