Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: oO6oNpCAH5TVzZIVnlV/ejqTn6wMnSNl30ZeyLCcvgc=
Subject key identifier: CB:B2:6C:69:70:4C:80:BA:D0:B3:C8:B4:77:9B:A8:78:66:30:B6:F9
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019CAD22B7F315C6EB91CA5BEC9F912447C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0F9E
Signing time: Mon 02 Mar 2026 06:00:59 +0000
Manifest this update: Mon 02 Mar 2026 06:00:59 +0000
Manifest next update: Tue 03 Mar 2026 06:00:59 +0000
Files and hashes: 1: SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (hash: hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: 1iu6gA1V/5ZIYTNzBz0WDY3IQ7R6jTC1Lhm7GQ9hyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b7:f3:15:c6:eb:91:ca:5b:ec:9f:91:24:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Mar 2 06:00:59 2026 GMT
Not After : Mar 3 06:00:59 2026 GMT
Subject: CN=cbb26c69704c80bad0b3c8b4779ba8786630b6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:b7:c0:9a:91:8d:b9:e2:53:ee:37:fb:89:
45:39:98:41:64:74:85:35:bc:6a:53:86:d5:6e:2b:
10:b7:1b:22:f4:74:87:86:13:bf:9f:9d:91:1f:b6:
54:cd:c9:36:f3:7c:40:1f:7a:60:25:bd:0a:ae:5f:
59:cf:41:b7:c8:94:ab:4d:3a:13:ca:13:c9:b5:ee:
a3:1d:8d:42:45:61:b3:bb:95:98:5c:aa:1d:16:46:
d9:5e:11:af:f8:e1:89:1f:5d:67:ad:ae:e1:91:e0:
dd:2c:63:8a:34:09:9e:df:07:cd:82:69:70:01:cd:
6b:4a:ff:9e:ae:7e:c8:30:63:43:d5:a1:c8:66:09:
d8:7a:78:86:9f:ed:15:f8:41:c0:3b:ab:86:bb:32:
1a:e3:db:0d:27:c3:7e:c4:bc:69:53:17:df:6e:33:
b1:fc:7b:ba:6a:bc:93:3f:eb:79:85:d4:6a:41:7a:
34:7c:b5:11:28:a5:ab:81:a4:88:b3:54:a3:ad:1c:
54:39:2b:ac:2c:3b:55:4d:96:8e:6a:11:fb:12:84:
d8:d2:17:f7:99:9f:7f:36:9c:15:43:a2:cb:0a:6e:
61:af:1d:4f:cf:76:2a:84:cc:fe:3d:8e:ae:c3:1e:
cb:63:19:c5:2b:b7:3b:ca:7e:4a:ba:55:c6:3a:f8:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:6C:69:70:4C:80:BA:D0:B3:C8:B4:77:9B:A8:78:66:30:B6:F9
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6a:64:23:9c:89:1c:92:13:ce:e9:ed:26:86:3e:1a:09:2d:
34:77:11:4e:c6:30:06:14:21:d3:b9:7d:ed:18:9d:07:5d:10:
6e:2e:46:19:aa:6f:88:4a:16:30:37:a6:b0:53:39:a4:7a:1f:
a7:24:d7:90:e0:79:46:60:58:3f:62:6d:a6:60:7c:94:1e:7a:
15:4e:5a:62:ab:59:27:c7:77:a2:b1:a5:ac:a3:93:11:53:40:
e7:22:75:51:1e:ba:1a:e7:cf:c5:c6:56:20:78:bc:59:d8:76:
c0:36:53:00:3f:2a:ba:77:cd:4c:bd:85:8e:d9:17:ac:68:6f:
0e:d7:74:7f:d7:9f:47:c0:99:77:87:c5:a3:74:4d:07:e1:a2:
9d:a8:1c:8f:56:49:10:21:86:a7:fb:06:3d:91:1f:bd:9b:52:
91:cf:ab:6b:dd:05:39:94:f2:84:d0:af:8a:bd:45:b7:a8:fe:
ea:46:46:16:ea:8b:2e:5e:a4:97:61:bc:86:9e:cc:b3:5d:3e:
b5:cd:48:87:ed:80:0d:a8:51:84:e1:be:9f:12:39:dd:5e:85:
5e:d7:0a:5e:64:3d:e0:f7:f6:90:a5:19:3a:ef:75:03:c7:b8:
cf:08:9c:1d:e5:93:2f:8c:8a:35:3d:91:e3:02:d3:32:41:c5:
69:09:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:43 2026 by rpki-client