Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: Q3m0d+lySXzasuJAZAXzK9gu2bSl1QaGRJl0vFCwILo=
Subject key identifier: 84:FC:26:C6:91:38:21:4F:69:04:4B:81:06:52:6F:DD:09:5B:FD:55
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019CAC10603FFD82CAB8C3E88F9890F0A811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 1754
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: tqRl6ZdRGSEPt/x0PkJpXcVq/ufjX8+0I9oPQeztThA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:60:3f:fd:82:ca:b8:c3:e8:8f:98:90:f0:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=84fc26c69138214f69044b8106526fdd095bfd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:d9:68:23:8a:43:88:55:14:2f:88:0e:94:
3d:bf:c4:aa:80:70:7b:a5:e3:cd:fc:d4:9d:8f:6a:
7e:0d:12:4c:11:3a:c2:3a:f2:b9:ab:1d:50:ca:ce:
d0:49:24:03:bb:04:f3:40:dd:12:95:62:bf:1d:0f:
5c:04:13:ef:69:b1:54:a3:84:2d:57:53:68:20:62:
73:71:54:ad:e7:14:93:05:7b:40:70:ed:19:fd:d2:
b0:06:26:78:f4:7b:a6:11:db:46:19:b5:37:67:d0:
d5:e6:31:38:44:55:13:4e:a4:77:82:1a:db:ad:5b:
f3:c8:47:60:41:f2:50:62:76:54:83:5d:d8:7c:ec:
d0:8a:24:44:65:c5:e3:4d:43:90:38:36:75:ab:48:
88:90:93:a2:94:ee:e3:51:a3:87:0a:cb:30:07:a8:
cb:cc:49:96:f4:28:21:af:c3:06:62:b5:c2:4e:2d:
e8:07:b1:18:24:d3:3d:d1:77:fe:e4:db:d1:77:ba:
d5:79:76:54:1a:8a:a8:16:2a:f1:e8:12:44:70:62:
b7:b7:cc:b4:c0:c4:43:95:6a:cd:35:ec:48:8b:67:
2b:05:c4:e1:3d:9a:4b:cb:22:fd:a9:02:c8:34:f5:
17:5e:80:0b:a0:88:70:5b:dd:4e:09:00:b8:4e:0a:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:26:C6:91:38:21:4F:69:04:4B:81:06:52:6F:DD:09:5B:FD:55
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:58:21:e0:8b:59:0c:3b:11:1d:a9:65:93:02:38:4d:52:
25:fd:51:03:05:d4:6f:1a:ff:e3:8a:b1:a5:68:5b:e4:bb:41:
8e:eb:ae:09:72:c5:ef:bd:93:6c:56:c1:2b:26:f6:08:8e:dd:
9f:22:85:73:a0:55:7b:49:9b:12:8e:7f:d8:93:da:3e:c7:a3:
ff:1d:2e:47:2e:20:8a:a8:4a:50:02:e5:d3:46:6b:c4:20:5c:
f1:c8:f6:6d:5d:4e:d4:f9:29:c0:0b:e9:3c:bf:37:02:b3:9f:
30:b4:c8:2f:e2:51:43:c2:6d:79:5e:18:c1:5e:20:61:d8:47:
55:76:71:4b:bd:ad:2c:ac:df:e7:46:d6:b6:7c:98:3a:de:6d:
23:08:ed:60:cb:10:99:fc:64:7a:9e:22:d8:a0:50:c8:3a:1c:
31:5a:d8:78:d0:89:0a:9b:46:8c:45:ac:1c:fd:17:4c:25:02:
2b:b7:af:c8:12:ba:66:86:88:8f:aa:b9:d0:d4:49:b1:3b:3c:
8a:7c:3b:2d:6d:82:f0:be:b4:d8:18:22:3c:12:b3:0f:ba:16:
e6:aa:7d:c8:a0:a2:12:47:b6:0e:be:27:39:22:1a:a6:25:9d:
42:09:51:37:44:5b:e3:f5:21:a7:26:37:fa:68:59:60:5d:7e:
51:76:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:42 2026 by rpki-client