Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: h3oIr+YUajn1qokCRUcoV6U/C5n78NUWWbh8Vq+Ye4U=
Subject key identifier: 45:FA:51:59:F7:DC:80:3C:AC:57:8D:56:8D:73:D6:D5:B4:03:3A:0F
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 019CAD227592D01501BF06A682A1FBE44B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 0AC5
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: LBuMJhT9HI_N-o97AGqRNMobN2k.roa (hash: J1YinkBVmpDcd/nfyc1eO3Q9IO60Z11LEvtRdzK2OZo=)
2: kd0M99nX3mEAE8mM8gT2op45MsU.roa (hash: qbE/jcnwxy0lIpkGkzTB/U3L+6e4tnUzWLrv92qEK9A=)
3: wTlbzeF26X067XNQG4ixA_F7gss.roa (hash: mmrxsWqMHEhPszYdixQQAOjmiWohzdeiT/VZLFaDvkA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: bpZhMuy1MX/F+CBFwH+1utV9IehLJZtcTrjhY8Dgyp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:75:92:d0:15:01:bf:06:a6:82:a1:fb:e4:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=45fa5159f7dc803cac578d568d73d6d5b4033a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:e3:95:ec:fa:2b:57:d2:c9:a1:e9:8a:ee:
f5:a3:8d:1b:74:40:99:db:6a:ac:e0:03:35:ce:7d:
31:b9:3e:2c:8e:c0:42:08:ed:44:6a:92:c5:df:52:
17:41:f5:4f:b5:3c:14:0f:d4:ec:e0:ec:40:22:91:
23:cf:ea:60:1b:70:2b:f8:32:da:2d:82:68:2a:d0:
98:f7:ba:04:9c:d0:7d:2d:45:83:6c:9c:01:6c:67:
55:cf:52:d0:bb:43:9c:41:e8:5f:53:75:af:f1:07:
32:cb:39:86:3e:11:d1:18:09:f0:73:10:0d:36:35:
27:ae:a0:9f:30:5d:f4:80:2c:1d:5b:b3:bf:ba:2b:
e6:a8:bf:ce:82:80:b1:42:60:5d:5b:5a:6f:9d:67:
10:92:d1:51:7d:bf:72:62:9a:c0:1d:31:ee:62:62:
62:ac:71:5e:31:8f:97:aa:35:d1:5b:5c:58:6d:63:
17:78:b2:4b:3d:a3:e0:f1:2e:15:39:69:9f:ea:01:
96:eb:a7:cc:95:40:9e:c0:51:57:af:d1:92:2e:0e:
ce:48:e7:cc:1d:73:c2:3d:80:27:f9:dc:a4:0b:9f:
0e:0f:93:ae:60:56:71:50:07:6c:af:fa:eb:0f:93:
2b:41:c8:3e:a8:42:69:ee:2d:47:73:66:d9:a6:0a:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:51:59:F7:DC:80:3C:AC:57:8D:56:8D:73:D6:D5:B4:03:3A:0F
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:85:c7:92:9a:23:c6:c1:ff:0e:4d:5d:8d:de:cb:0e:1b:
c5:8b:14:c5:51:92:74:d4:53:f0:e8:2e:0a:38:23:ed:6f:02:
5b:ec:bb:ca:19:a4:6b:a0:34:55:d6:b3:9e:d8:26:bb:c6:11:
97:45:2c:2e:04:1d:e2:9e:15:c3:9d:d1:4a:a3:eb:93:10:2f:
70:97:ee:f5:5c:f5:fa:2b:c7:36:70:99:4a:eb:91:b3:38:da:
09:99:03:18:62:a9:a9:cd:ca:9f:d6:4a:e9:aa:84:1b:38:3e:
ee:a9:a5:53:d9:c5:bb:59:36:2a:1e:22:d7:19:0e:ad:c9:cb:
89:ad:bc:50:05:53:5b:fe:08:78:cc:68:cc:25:16:c9:1b:a3:
fe:e9:b4:3d:fc:c5:97:c2:7c:28:a4:48:b4:af:5c:12:0d:39:
46:c2:b4:ed:02:37:34:c3:d4:e3:c3:c9:91:06:7f:08:0a:bf:
f1:cd:12:9d:6f:16:70:52:52:a2:b2:84:c7:48:94:6a:ed:3d:
dd:4a:d7:8e:47:32:c9:df:4c:d4:78:98:93:2c:41:63:02:db:
61:6c:00:34:36:19:0a:d5:58:05:1a:c6:53:83:00:74:e4:a5:
0a:d7:01:81:e8:62:61:c7:59:bd:9a:82:b6:0a:43:dc:65:eb:
55:e1:92:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytInWS0BUBvwamgqH75EswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjYwMzAyMDYwMDQyWhcNMjYwMzAzMDYwMDQyWjAzMTEwLwYDVQQD
Eyg0NWZhNTE1OWY3ZGM4MDNjYWM1NzhkNTY4ZDczZDZkNWI0MDMzYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqnjlez6K1fSyaHpiu71o40bdECZ
22qs4AM1zn0xuT4sjsBCCO1EapLF31IXQfVPtTwUD9Ts4OxAIpEjz+pgG3Ar+DLa
LYJoKtCY97oEnNB9LUWDbJwBbGdVz1LQu0OcQehfU3Wv8QcyyzmGPhHRGAnwcxAN
NjUnrqCfMF30gCwdW7O/uivmqL/OgoCxQmBdW1pvnWcQktFRfb9yYprAHTHuYmJi
rHFeMY+XqjXRW1xYbWMXeLJLPaPg8S4VOWmf6gGW66fMlUCewFFXr9GSLg7OSOfM
HXPCPYAn+dykC58OD5OuYFZxUAdsr/rrD5MrQcg+qEJp7i1Hc2bZpgpPkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX6UVn33IA8rFeNVo1z1tW0AzoPMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx+Fx5Ka
I8bB/w5NXY3eyw4bxYsUxVGSdNRT8OguCjgj7W8CW+y7yhmka6A0Vdazntgmu8YR
l0UsLgQd4p4Vw53RSqPrkxAvcJfu9Vz1+ivHNnCZSuuRszjaCZkDGGKpqc3Kn9ZK
6aqEGzg+7qmlU9nFu1k2Kh4i1xkOrcnLia28UAVTW/4IeMxozCUWyRuj/um0PfzF
l8J8KKRItK9cEg05RsK07QI3NMPU48PJkQZ/CAq/8c0SnW8WcFJSorKEx0iUau09
3UrXjkcyyd9M1HiYkyxBYwLbYWwANDYZCtVYBRrGU4MAdOSlCtcBgehiYcdZvZqC
tgpD3GXrVeGSjw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:54 2026 by rpki-client