
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: lH4Qn6Nyawwh2qpUEgC6qgmBTp06AV3TWhbzoua8g4o=
Subject key identifier: 4B:C3:02:11:97:DD:70:DE:82:AE:10:42:87:9F:97:D9:16:7A:D1:9C
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019CABA1C3A073D9673DBA3688F6EA88827B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 23:00:31 +0000
Manifest this update: Sun 01 Mar 2026 23:00:31 +0000
Manifest next update: Mon 02 Mar 2026 23:00:31 +0000
Files and hashes: 1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: i5ADBPfMv4+V8sjwalf7aG9plmE0gxEHir1XJ3Gr4bc=)
6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c3:a0:73:d9:67:3d:ba:36:88:f6:ea:88:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Mar 1 23:00:31 2026 GMT
Not After : Mar 2 23:00:31 2026 GMT
Subject: CN=4bc3021197dd70de82ae1042879f97d9167ad19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:c1:af:25:0a:bd:9e:5f:f2:1d:6d:b2:7d:
9d:4e:17:25:0f:22:fc:a0:a4:60:d8:e6:4a:41:0a:
d7:0b:03:31:13:80:71:c7:3a:47:fd:db:6f:4c:43:
cc:56:25:af:6a:ba:03:72:24:d7:67:1e:0e:55:76:
90:da:3f:87:21:f6:fd:c9:3e:65:b7:f3:54:29:07:
76:f1:f8:fa:ea:5a:68:39:ce:98:31:05:d3:58:d3:
4d:59:89:81:6c:d1:7f:43:44:4f:fa:4f:d0:d3:04:
55:05:54:fe:b2:54:23:75:5c:30:93:b6:09:93:98:
aa:6f:1d:5e:46:cd:f3:1d:f3:2f:04:27:1e:3c:8e:
aa:57:7a:73:f3:de:7e:4f:39:5d:27:ed:c0:b4:fa:
92:42:3d:fc:f6:28:9f:78:cb:cf:55:d0:94:1b:ec:
9d:c7:1d:17:85:a1:c7:b7:02:56:e1:3a:7d:e7:2e:
0e:f0:15:69:ce:71:c5:4a:d9:d0:18:ad:01:d3:ec:
56:3f:5a:f3:7d:a7:60:8b:2e:fa:c2:94:e9:ee:26:
c0:4f:78:d6:a1:61:45:f0:ac:98:cb:c1:45:cf:3b:
10:c8:a3:d6:33:78:ed:a2:bb:de:6d:f7:d6:a7:2f:
ce:43:a9:43:85:8d:ef:80:5b:f2:63:78:f1:be:c9:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C3:02:11:97:DD:70:DE:82:AE:10:42:87:9F:97:D9:16:7A:D1:9C
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:05:9a:f6:08:c6:17:4a:42:33:49:51:00:60:01:2d:04:4a:
10:25:4f:a7:bc:85:f5:7f:b3:04:32:44:6f:20:74:d3:86:48:
ab:3f:9c:89:cd:54:27:14:eb:d0:20:27:d1:93:28:8e:76:d3:
40:26:3a:4f:0b:65:b3:73:6c:cc:e8:24:8f:6d:6a:1e:28:5e:
4c:59:de:0b:e1:1d:91:cb:c3:29:de:b7:59:97:70:c1:c0:3f:
cb:0f:f0:4b:70:1a:2f:cd:27:97:19:39:86:7b:22:17:3d:60:
a3:92:7b:cf:d3:c3:0f:5c:66:79:c0:fd:0b:98:f6:90:d0:66:
29:73:a4:d9:16:22:40:56:d0:7c:0e:f1:8a:e5:e3:83:4f:74:
ce:66:c3:93:3d:55:3d:e4:1a:57:5b:bf:5f:23:84:79:9c:8c:
5b:ea:87:d1:f5:78:0d:94:42:75:76:5a:33:8a:4c:78:7c:59:
1d:7d:29:c3:0e:a7:70:1b:8a:8a:23:22:b3:49:a8:b7:8e:6b:
93:8f:2b:e1:8e:98:31:76:1c:64:c1:b4:d3:c9:01:c8:44:d4:
05:19:8c:fe:b8:63:fb:7a:cd:26:c0:11:e0:cc:6d:a5:92:5e:
58:e0:ea:31:ba:02:72:f3:f9:71:3e:37:b8:52:34:29:a6:3d:
3a:a6:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:43 2026 by rpki-client