Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: JB5RFRdFxLDxXPHuxasHwfX3VIP72dwd5TigztFc78Q=
Subject key identifier: 4E:2A:9F:AC:8B:73:4D:33:27:88:29:74:8B:CF:54:3F:91:EA:58:94
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019CAD9024A93F03DEA105A199E9B7E42762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 0B12
Signing time: Mon 02 Mar 2026 08:00:30 +0000
Manifest this update: Mon 02 Mar 2026 08:00:30 +0000
Manifest next update: Tue 03 Mar 2026 08:00:30 +0000
Files and hashes: 1: 71mCI3KMqJb1fWbhA5VAOz_YwlY.roa (hash: Yhy9snU417VssGNDPJuFTqPzX5TH460OslWhtb60W/w=)
2: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: nifQzI1GurgFxDVyG5Dzbph2KXMnxpDEww4CJNe0F2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:24:a9:3f:03:de:a1:05:a1:99:e9:b7:e4:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Mar 2 08:00:30 2026 GMT
Not After : Mar 3 08:00:30 2026 GMT
Subject: CN=4e2a9fac8b734d33278829748bcf543f91ea5894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:d6:46:1d:7e:1f:18:35:5f:36:e1:cf:06:
7a:8b:ed:19:5d:5e:c3:3f:d0:ed:0b:b7:ea:2e:19:
9e:2f:00:09:2e:ac:4a:0b:7d:93:11:ff:b2:e3:6e:
88:16:71:0c:4a:8d:4e:a7:75:99:36:b2:7a:52:71:
e8:cc:60:3e:a8:3f:37:40:bc:01:a5:a2:fc:09:e9:
b5:b1:fe:79:09:41:72:61:6b:90:b2:9d:97:6c:b5:
96:f3:ae:e7:bd:03:ed:68:67:2e:86:01:de:e8:fa:
9e:50:d8:f8:17:cf:0d:e6:80:1d:70:6a:62:a2:5e:
98:9f:36:6a:cb:4b:ae:3d:76:98:b1:2c:41:3f:c6:
24:f7:c8:b8:c6:a5:61:c7:7c:d7:86:f9:b2:de:d0:
11:3e:2e:d7:82:ed:ac:11:90:2a:4b:5c:e4:5f:c1:
99:c2:b4:58:0f:6f:bb:4f:e3:ed:ba:4c:a2:1c:7a:
32:fe:cd:9e:62:22:9a:e3:4d:e6:94:95:14:7d:28:
b3:9d:fb:11:f1:1e:07:0f:22:0b:e0:61:b3:e6:0c:
43:9c:e9:98:cb:e2:bb:a3:ca:92:91:db:3f:d8:8b:
e4:8c:f9:3b:60:53:35:af:4d:2b:07:01:b1:f7:c9:
b8:71:bf:c8:39:27:6e:24:7f:9e:86:6a:c3:0c:a3:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:9F:AC:8B:73:4D:33:27:88:29:74:8B:CF:54:3F:91:EA:58:94
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:3c:36:5b:f0:51:3d:8f:66:73:77:5b:d4:e7:d6:4e:1c:
9e:46:45:0c:18:7c:df:b3:3e:6a:ad:96:a2:06:2c:c3:c5:4f:
ad:74:db:a8:06:e5:72:8e:17:51:f0:ca:05:66:3d:4b:2f:11:
55:6f:46:07:15:0b:e3:c0:17:9b:53:d8:86:b7:50:09:79:9e:
46:d3:67:10:b4:38:8c:cc:c4:55:d4:56:0b:c9:a3:80:19:29:
b1:ad:5b:a6:d6:3e:54:3a:7a:c4:62:03:f1:3c:b2:da:a4:51:
51:db:36:1b:92:8e:3e:25:2a:be:ee:71:a0:7d:a4:96:7f:79:
c4:1d:0c:f4:77:69:56:54:ee:5e:08:0e:15:76:b4:de:58:44:
5e:72:71:5d:3e:d2:47:24:0f:15:64:e3:7f:8a:70:4b:d4:38:
cf:b7:9f:2a:00:18:03:98:b2:93:35:ea:e5:6c:3e:ca:bf:f6:
4a:2d:11:66:ff:4a:b5:ce:74:01:78:1d:a7:02:3c:a2:ce:fc:
b9:98:ce:bb:a4:8f:76:9b:90:28:c8:f3:64:c5:f6:0c:30:5b:
37:45:ff:13:4e:d4:d2:53:9a:f9:29:1b:87:c6:90:d3:ee:ab:
92:94:56:8d:14:f2:fa:3f:38:c6:55:86:62:4c:45:a4:51:84:
a4:e3:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:35 2026 by rpki-client