Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: FoWholA1KDm7WbAc70/sUkRkirVfmZJQxhDM1tcVvTE=
Subject key identifier: BA:0A:E9:7B:82:85:CD:F5:D3:C2:C7:74:30:C4:25:99:BF:34:DE:06
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019CAA59261E4648A7D1AE12BE11B1980CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 17:01:34 +0000
Manifest this update: Sun 01 Mar 2026 17:01:34 +0000
Manifest next update: Mon 02 Mar 2026 17:01:34 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: HeNuvb6QoT2z6Uq8S85cQtaQkrQ0TncNthh4bbkryOw=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:26:1e:46:48:a7:d1:ae:12:be:11:b1:98:0c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Mar 1 17:01:34 2026 GMT
Not After : Mar 2 17:01:34 2026 GMT
Subject: CN=ba0ae97b8285cdf5d3c2c77430c42599bf34de06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:9b:2a:56:ed:7d:b8:0d:09:68:8c:6a:32:
3b:17:68:ee:27:0c:c7:53:14:ca:e2:88:3f:ae:68:
75:e4:4b:89:fb:96:e1:db:cb:6c:b7:28:ff:bb:09:
fa:ea:c0:03:a2:34:6d:6c:49:ee:ef:48:6c:56:c9:
37:ff:83:8e:3f:73:2c:76:4f:98:e9:c2:07:f7:93:
f8:ab:b6:78:4e:ed:3f:7d:8c:ff:ca:a5:3e:e3:ca:
60:66:8f:00:d0:e2:70:59:9d:13:2d:07:b8:51:26:
84:24:53:d2:69:ee:41:9c:e8:cf:b0:18:a7:21:5c:
9e:cf:ef:30:ea:1e:81:1e:a5:db:ba:06:85:06:59:
4d:d2:4f:e0:56:4a:86:a0:dd:fd:96:8b:40:e9:90:
32:06:42:0c:0d:93:c2:15:9a:81:14:cd:a0:0b:34:
48:e0:ab:11:75:45:32:1d:44:c8:4e:71:1e:85:77:
b9:ce:f5:f2:3d:3a:89:b1:b1:f3:dc:60:ee:e9:dc:
02:34:c7:b5:51:da:23:75:12:82:fd:8c:38:0b:c8:
27:18:82:e5:cb:83:28:02:0e:d4:89:a6:85:6a:31:
3b:1b:70:78:2d:f4:b4:23:61:f4:f9:1c:34:7e:cf:
62:43:18:70:80:34:f3:f1:78:93:94:32:32:2a:08:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:E9:7B:82:85:CD:F5:D3:C2:C7:74:30:C4:25:99:BF:34:DE:06
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a5:77:02:bc:e8:34:18:ea:3d:40:7a:61:7f:18:1b:fa:0c:
0b:fd:89:33:05:19:c0:0c:3a:40:27:6c:e1:1c:e6:c4:71:3b:
f7:83:79:f0:9d:5a:71:34:a6:00:af:9b:ab:27:ed:7e:cc:ef:
ad:10:d4:ef:a2:53:db:be:de:82:e1:07:39:35:30:4f:b5:27:
32:dd:86:c2:5b:92:85:ea:da:21:6d:22:42:1f:bd:dc:7e:fb:
3b:43:cf:31:9d:2e:d1:b8:f9:bd:9c:0f:5b:80:e1:79:14:f6:
c5:04:9c:81:18:bd:fe:10:1d:be:02:56:17:ab:09:b5:95:54:
d5:8e:8e:be:10:c1:1b:df:d4:41:09:b0:97:67:2f:03:bf:87:
5e:ec:ac:64:ff:66:d4:90:2c:be:7a:45:1a:e1:68:d5:a6:41:
38:e7:3b:d0:38:f8:29:70:6f:13:82:f2:17:e1:50:b7:24:cc:
e0:91:e7:00:98:29:12:b9:95:87:d6:6b:83:1b:89:e6:f0:47:
c0:71:9b:6e:fa:3d:1a:80:c8:ca:6b:12:a9:7e:3b:2e:ee:02:
58:c0:f4:d8:e4:0f:38:94:86:4b:aa:03:95:32:70:8e:fa:27:
bd:bf:b4:65:e5:cd:04:70:eb:90:cb:a8:df:b8:0f:b3:16:89:
fd:69:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:40 2026 by rpki-client