Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: Tm2STq6iHjbXfxqMzG047J0K2IE9VinsILd8AFQBB04=
Subject key identifier: 47:39:43:42:04:49:97:8E:25:E4:DB:93:35:2E:94:12:D6:72:C5:DF
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019CABA21231A6B60B126062D2036BD3DE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0895
Signing time: Sun 01 Mar 2026 23:00:51 +0000
Manifest this update: Sun 01 Mar 2026 23:00:51 +0000
Manifest next update: Mon 02 Mar 2026 23:00:51 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: LlY8pqDqkpnvL4xzXwi8XErddrO5d5axsNXtMFBgnFc=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:12:31:a6:b6:0b:12:60:62:d2:03:6b:d3:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Mar 1 23:00:51 2026 GMT
Not After : Mar 2 23:00:51 2026 GMT
Subject: CN=473943420449978e25e4db93352e9412d672c5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:f3:70:b1:0e:53:a3:64:ca:65:97:02:5e:
b3:d8:49:fe:f8:88:4f:22:1b:7a:e0:0c:0a:2c:00:
50:72:8b:5b:ad:38:c1:22:68:94:7f:f0:27:cb:82:
a3:f0:d7:9d:bc:19:c2:9f:c7:10:d5:45:0e:9f:8e:
3b:62:1d:57:70:86:5b:81:76:f6:5b:c0:07:0a:2d:
ff:7c:0f:82:49:7b:5d:0f:ec:2f:87:b0:67:eb:91:
36:6e:95:15:3b:8a:1d:49:0a:3a:39:9b:bd:63:c7:
b3:ef:30:19:6b:0f:a8:52:cf:4a:18:86:3d:ed:e6:
59:8d:a1:11:ff:1c:df:1c:0d:83:08:42:79:51:e2:
38:d5:a1:8d:50:e1:bd:17:6e:bd:9c:ce:48:6a:63:
2a:85:67:b6:b0:8a:6f:06:0c:44:c1:42:93:5e:2f:
d6:cc:f4:f2:13:79:93:b7:1c:38:78:cd:10:7c:4a:
4d:26:b3:c4:2a:df:78:89:dd:8e:54:7a:a3:01:33:
ad:4c:3d:39:9f:0a:f1:a7:e9:f4:64:80:7c:8b:30:
fd:45:6c:52:98:3f:3e:8a:98:ae:cb:28:75:a9:a3:
64:65:6b:ea:1d:f7:c0:eb:13:09:73:8b:bd:c8:c9:
0d:f7:8b:65:59:e7:5a:44:fd:53:95:1c:ee:b5:b6:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:43:42:04:49:97:8E:25:E4:DB:93:35:2E:94:12:D6:72:C5:DF
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f4:9a:35:5c:78:c6:16:9e:83:e8:b5:bb:2a:b2:8a:1c:19:
7c:34:a1:f4:fd:ac:1e:aa:58:b3:20:fc:8b:a8:5b:23:1c:43:
5e:b3:5d:55:b3:1c:20:a2:ad:85:e4:8a:ac:76:fe:79:70:80:
aa:d8:94:7a:a1:d7:9e:03:75:3a:98:4b:89:69:5b:41:9f:a4:
c1:a2:3b:5c:c5:e2:cc:d1:72:06:e5:6f:f7:0d:2a:e4:27:a0:
60:84:89:36:7e:53:22:11:fd:a8:73:70:01:e9:ba:bb:ad:a8:
e6:6e:35:f5:5c:04:01:6c:6b:06:69:0e:43:6e:0a:fc:dd:b0:
7c:8f:5a:15:94:93:d9:15:94:5c:d9:01:9f:06:56:04:16:ba:
14:24:9b:8c:0e:80:17:45:ef:5b:74:b3:b8:d0:f8:d9:0f:d1:
3e:5e:ac:fb:41:cb:22:22:30:09:89:4f:d0:16:3d:ce:2b:cc:
08:9f:58:8f:ba:75:74:a2:77:6c:30:e0:e6:6d:89:5b:77:a2:
1d:4e:13:36:32:d7:9b:14:9e:e4:c0:c0:a3:bc:8b:81:79:d7:
10:d3:24:2c:83:e2:e2:47:f3:92:a0:a7:cd:98:9e:d2:bb:05:
4f:56:97:c7:29:7d:a3:bc:4b:d7:a9:28:fd:26:35:5c:91:63:
98:b2:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:27 2026 by rpki-client