Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: qPYqVcfDEJozfpjhmdjR1v7GN0mtZiw+ejOdFDE3Fpg=
Subject key identifier: 26:6E:2F:EF:F4:E4:91:07:54:13:E1:7B:BF:49:64:E5:90:DC:AC:DC
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019CAD22BF12C06CD744B4DD817519D7D22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 01DC
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: FBZl/eyL6we33K/Nl6fwGNOlVqXPJZkVT9Q1WM/Poco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bf:12:c0:6c:d7:44:b4:dd:81:75:19:d7:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=266e2feff4e491075413e17bbf4964e590dcacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:85:4b:fd:c9:f8:b0:7a:28:a1:a7:f3:c5:
9d:c6:b0:f0:7e:fd:dc:e9:44:d6:79:ad:db:02:1d:
d1:8d:df:96:28:a3:45:ba:99:55:ec:63:54:f8:3e:
73:c1:9c:42:77:75:41:69:b8:a3:2e:07:1e:63:59:
f5:08:e5:24:1c:d7:6b:d2:be:37:ac:d0:f5:74:42:
cb:2d:48:eb:a0:60:38:13:62:12:af:2a:ce:a3:82:
35:32:51:0e:40:ed:f6:b5:90:b0:f2:3a:77:a9:19:
b7:67:4d:0e:ad:ac:c7:e5:c5:3d:ff:89:1a:52:62:
29:aa:7b:d5:2f:d2:db:bc:dc:9f:7e:a0:84:c2:fd:
c3:15:8d:f8:a3:01:39:4a:88:99:12:9a:ce:e6:fd:
06:4b:79:50:99:73:08:3b:27:16:d0:1e:54:55:21:
19:fc:18:1e:0d:1e:75:d4:97:e5:9a:61:d8:e6:4c:
81:a3:db:a7:d0:86:2a:c8:31:6f:b6:c0:66:13:19:
8a:d3:c5:57:ca:c7:23:d1:83:7b:28:1b:86:ed:95:
70:85:19:f0:ec:33:f1:73:d2:7a:51:23:e9:91:90:
30:3a:02:13:c4:ef:82:23:ce:20:13:a1:a4:e4:8c:
c4:3e:3a:16:51:56:6c:05:b7:37:b9:21:6e:25:05:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:2F:EF:F4:E4:91:07:54:13:E1:7B:BF:49:64:E5:90:DC:AC:DC
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:40:75:81:ee:e0:e5:40:0f:fb:59:8d:5a:85:0b:d9:8d:22:
e6:5a:39:81:3a:b9:da:58:97:39:27:2a:80:77:e5:47:71:e9:
9e:df:37:3e:2a:ab:ea:ea:c6:28:12:36:62:b6:46:51:1a:d0:
c7:2f:f0:ea:f9:29:d0:38:d7:3f:60:ed:15:2e:67:47:48:d1:
09:2a:44:74:94:4e:59:ad:34:1c:09:df:6f:a6:21:25:fc:ef:
28:a2:12:df:ea:34:ef:4a:6e:e8:8f:07:53:c3:23:bb:74:ba:
9b:72:52:da:ca:a1:53:c5:ef:f1:90:44:f3:cc:0a:c7:63:e9:
f6:d6:47:0f:0e:c5:ab:7d:92:f3:93:28:99:b3:de:c3:67:c9:
1e:d6:28:64:a8:b0:3f:8c:2e:bf:37:28:fd:92:92:07:3d:e7:
40:0e:42:2f:00:a6:da:d5:b7:5a:f6:13:4f:1d:1c:bf:5a:d9:
d2:91:1f:84:2f:0d:ba:5d:c9:54:dc:c8:0e:a6:af:a6:ae:c1:
71:41:cc:09:7f:e0:8b:ff:9b:d7:d2:9b:4e:56:e3:3b:9f:07:
e0:21:b0:6c:81:60:09:1e:55:97:d4:9e:e7:70:56:d7:4c:85:
98:fd:d6:c4:90:40:2e:7c:1c:97:b8:7b:14:13:1d:39:48:6b:
8c:90:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:31 2026 by rpki-client