Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: FeWipQ9x9OooWUSW1N9AdEwRsTn83vtCyuZsHlPFwFI=
Subject key identifier: 30:CE:48:BA:44:72:47:2E:43:3C:60:3E:6E:BA:EC:25:3F:CF:BE:9E
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019CAE35CF2F491EA4D3C00D5F770E92F17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1853
Signing time: Mon 02 Mar 2026 11:01:27 +0000
Manifest this update: Mon 02 Mar 2026 11:01:27 +0000
Manifest next update: Tue 03 Mar 2026 11:01:27 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: RBZRYZdA2gSfEMwaqwBKMeXknQW2OhdJld0I8jJzTxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:cf:2f:49:1e:a4:d3:c0:0d:5f:77:0e:92:f1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Mar 2 11:01:27 2026 GMT
Not After : Mar 3 11:01:27 2026 GMT
Subject: CN=30ce48ba4472472e433c603e6ebaec253fcfbe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:1c:5e:8c:11:db:03:0c:66:f6:db:13:14:
40:e0:aa:5c:22:c5:ba:f0:17:09:6f:20:c8:c1:1e:
fc:49:95:7e:1c:be:d1:ab:73:fe:4f:e1:e1:5e:53:
19:be:56:f0:f4:cd:07:be:00:01:50:b7:ef:63:d8:
82:e7:0c:09:79:ad:89:5e:be:38:fb:68:55:b6:90:
de:b8:b5:ad:08:76:b6:5f:e3:5a:d0:50:32:b5:af:
23:ae:f5:cc:d5:2d:4d:aa:f9:e0:ed:dd:b6:44:ac:
26:f3:34:a1:48:9c:c6:a5:b2:7c:8f:f8:fd:70:bb:
27:e8:61:09:4e:28:d6:18:0b:ca:29:59:05:c3:ef:
7a:ca:87:03:45:25:71:95:42:9b:bf:15:f4:db:85:
f3:11:89:77:b5:d6:c7:88:85:67:2a:49:65:67:6a:
c3:f2:d1:1b:11:f3:de:98:7b:4c:93:98:f1:9e:36:
96:ff:6a:91:22:bc:e0:26:9e:e7:44:ac:34:df:10:
ab:41:39:fd:fd:dc:5b:fe:f3:83:da:85:e3:4d:e1:
f5:8b:9a:c3:e6:af:53:75:6b:b1:28:8a:7e:1b:02:
ab:1f:34:05:dd:43:7d:24:33:9d:6a:84:29:8b:f0:
a2:6b:eb:62:4d:cd:24:9e:2a:93:93:b6:1d:dc:a9:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:48:BA:44:72:47:2E:43:3C:60:3E:6E:BA:EC:25:3F:CF:BE:9E
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:4d:d3:9f:7c:e1:4c:6f:6e:f3:fd:a1:05:de:a1:f7:33:
c9:f7:f9:12:13:8e:3a:d8:1d:59:fb:2a:80:a4:a2:3c:dc:f3:
1d:56:98:a2:71:2b:48:cc:25:de:75:b3:fb:69:18:b1:7e:ac:
70:76:23:25:ba:1e:d4:bb:b7:83:43:cc:8b:48:03:92:1b:ff:
24:b9:8e:23:c6:82:29:7d:43:3c:a5:22:2a:e9:7c:08:a4:5c:
ab:2f:08:c2:cf:d3:02:14:fc:0e:92:8e:2a:27:94:da:b8:ea:
81:02:e9:91:78:13:91:6a:24:7b:91:50:90:3e:34:db:0e:4a:
50:6c:f0:2c:aa:86:2c:d7:b6:c6:81:cc:25:9d:95:0b:62:64:
5b:59:4b:04:39:b7:08:a6:5d:be:56:cc:78:a7:71:68:6a:cf:
59:21:57:f1:58:ec:e9:42:67:8c:04:2e:e5:39:3f:a9:6e:73:
4e:65:bf:59:6b:68:3b:80:66:6f:c5:22:75:29:4d:b3:26:64:
b1:86:ea:d5:9b:f0:1d:f3:41:fe:0d:75:73:31:43:22:bc:8c:
eb:15:3b:f1:e8:f1:3d:fc:39:ee:8f:c0:3d:84:7a:4f:36:89:
b3:81:7d:75:e5:ae:0e:e9:22:43:8a:30:77:c8:a9:ac:1a:3f:
02:49:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:45 2026 by rpki-client