Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: SjpWT5HEU6uZIBU2lHyoHPqW3al2lq56nN3D5mOGxHk=
Subject key identifier: 0C:91:79:CB:89:53:3C:3D:6C:8B:99:EF:81:24:69:46:D7:1F:49:7F
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019CACB520250C6610119A818C9040B68C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 170E
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: JsdL78tRGAWeb9S9iMdRfRQLDXk.roa (hash: lV6DbCoLT2AIp73UdWBqM+s8hS1sGFViY9AJ+gxGCI8=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: K44kMRnym7K3BWhmAq91yaHXWM0Ml0NdRSyHwhqz5yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:20:25:0c:66:10:11:9a:81:8c:90:40:b6:8c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=0c9179cb89533c3d6c8b99ef81246946d71f497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:14:fe:ef:ed:84:66:38:58:73:67:1d:a3:
ff:74:4e:f1:ab:de:9b:26:a0:91:5a:ac:3a:11:32:
a7:e5:a4:73:4c:6f:28:e9:cd:b2:24:a3:b4:bf:48:
64:2c:80:00:0d:eb:3f:73:fc:22:26:b8:23:80:41:
f8:db:99:8f:60:e6:3b:2c:ca:a4:e5:43:07:8c:df:
ff:69:0c:a6:f2:f6:61:bb:27:ce:62:93:2a:aa:a5:
d2:4a:2d:6e:75:2c:42:0f:fa:73:55:8f:72:6d:9e:
a1:9a:bd:f3:ad:56:89:53:45:f1:05:da:9a:30:ee:
ac:5d:28:c2:23:d8:6f:13:8b:1f:22:d8:ef:18:1b:
f2:0c:ff:62:55:a6:fc:6a:d6:0c:9b:30:6e:ff:b2:
cc:6e:14:c9:45:b4:54:2f:0b:fc:96:6c:9f:56:66:
35:f7:e1:cc:5b:a5:4a:40:1f:ed:cf:68:5b:ac:94:
4a:d1:56:12:52:e6:8c:80:3a:fc:88:80:bb:ad:c3:
8a:43:8d:1e:17:98:58:29:42:a4:e2:67:10:2f:1e:
51:5f:cf:c8:ad:e2:99:83:f1:ee:6a:f5:5e:7d:1e:
50:a0:b2:f1:96:9b:4e:5c:69:95:4d:4f:3c:16:b5:
ab:b0:98:03:17:13:21:50:46:c1:db:8e:ab:8f:44:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:79:CB:89:53:3C:3D:6C:8B:99:EF:81:24:69:46:D7:1F:49:7F
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:74:83:e7:9c:c2:e2:7b:c9:ce:6f:46:91:d8:ad:a5:e8:de:
a9:55:d0:7e:dd:9c:2d:80:d1:46:d8:79:be:84:6f:6a:60:99:
e1:fe:e9:19:25:37:81:dc:01:05:95:b6:c0:47:1a:ed:a0:85:
d6:a0:4d:54:43:01:f9:62:c5:2a:c4:d3:c7:72:0e:86:5d:a1:
3b:f6:d9:ea:5f:76:f1:bf:c2:20:e4:e1:83:f9:75:06:69:6a:
34:13:f3:90:79:1e:54:97:fa:d1:bb:d1:4b:4a:a8:83:01:7e:
49:e4:4f:7e:70:d9:b1:c9:ce:46:ef:fc:2a:14:c8:c8:b3:3b:
43:9a:2a:8c:91:1e:0f:fa:34:e2:3d:f0:ec:a9:75:7d:92:a1:
93:da:24:67:cc:54:37:d1:23:f4:8e:b5:e6:20:ad:80:d2:85:
fe:88:91:55:6c:a4:70:7a:6c:44:3d:e9:63:fe:46:e7:bd:c8:
8f:06:66:38:92:b6:fc:e1:ac:82:95:28:17:64:98:a2:3e:3b:
d8:4c:b6:5f:59:af:1c:c5:50:43:89:20:96:ee:a8:6c:51:cc:
72:90:a9:57:3e:1e:cb:90:de:2e:58:49:7f:47:80:88:b4:d3:
6a:02:38:9a:9d:2b:81:4c:22:4d:ba:99:fb:bd:69:f6:8f:7d:
03:b1:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:52 2026 by rpki-client