Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: xXr40tyorhoF3ASpb9pKKEeAvT4s+qtmyYHaYaoSzHw=
Subject key identifier: A2:83:3B:4D:A8:24:A1:69:0E:B9:1E:01:00:BB:49:AE:C3:57:84:DF
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019CAC7DE233E385947942F85334D1551990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 10B4
Signing time: Mon 02 Mar 2026 03:00:56 +0000
Manifest this update: Mon 02 Mar 2026 03:00:56 +0000
Manifest next update: Tue 03 Mar 2026 03:00:56 +0000
Files and hashes: 1: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
2: v8NZKNxgnU-zImgNKMmRR_QjCn8.roa (hash: L8Sl8NS6P/fBhdPviN+pCnl2uaYlMuG1Zvcne9YV8g4=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: D0hlwWiyvWbIAlrvgXn2WzEjzfSYGNHc5QozwxdtAq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e2:33:e3:85:94:79:42:f8:53:34:d1:55:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Mar 2 03:00:56 2026 GMT
Not After : Mar 3 03:00:56 2026 GMT
Subject: CN=a2833b4da824a1690eb91e0100bb49aec35784df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:17:38:2e:75:2c:d3:e8:70:c4:5b:4a:c9:
32:9f:7f:59:0f:0e:67:cd:a9:62:b8:98:5f:85:f7:
f0:23:dd:ee:f9:b4:16:81:4e:d6:1b:ac:1f:e3:24:
26:89:1e:05:5c:37:01:4b:13:34:6a:79:b9:21:9c:
6a:ce:5d:d5:96:32:e0:26:70:a4:d5:e5:dc:45:7a:
1f:26:32:5e:c4:81:24:86:15:70:2d:9f:be:5c:4d:
be:a8:2d:5b:ef:c3:52:e7:81:f6:bf:60:37:1f:4b:
e8:27:36:ac:7e:71:ce:8e:e6:4a:d3:f0:a2:3f:b2:
ca:5e:71:7b:6b:35:59:cf:60:65:75:f0:7c:77:eb:
06:cd:90:da:7e:2a:ed:2b:ac:c2:0c:25:c2:c4:1c:
93:4e:bb:fe:4d:5f:01:23:96:24:3c:25:8d:62:66:
6e:25:88:6d:54:c1:bf:e5:3f:9c:c4:2c:fe:a3:bd:
17:53:27:74:8c:15:b4:97:c6:b8:25:f1:45:cd:19:
37:0d:41:7a:4a:ff:48:8d:74:e2:70:eb:b5:5a:78:
bb:1e:7a:44:ba:97:f8:ad:72:b2:b3:f5:ed:23:54:
d9:26:ee:79:b8:ac:61:c7:12:9a:19:20:1a:14:56:
9e:94:5c:be:0c:d3:13:08:7e:d0:e1:0c:c1:ae:d5:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:3B:4D:A8:24:A1:69:0E:B9:1E:01:00:BB:49:AE:C3:57:84:DF
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:c0:5d:0d:aa:92:24:bb:4b:09:cc:51:b3:cf:6b:29:28:
57:9d:01:72:b2:d5:66:d2:1c:59:ec:f5:35:8a:63:39:dc:65:
db:71:83:9b:4a:94:57:e5:29:58:63:27:08:06:86:8c:0c:59:
c7:75:d4:da:8b:bb:fb:02:67:a2:00:a8:68:38:14:fe:89:05:
f2:37:8e:8a:e9:e8:77:81:77:e4:76:32:bb:d0:e7:6c:ef:b0:
87:00:f8:13:5f:21:78:40:e6:38:7e:20:c7:1e:ae:5b:11:64:
73:61:73:a5:8d:44:f3:dd:4a:24:32:76:16:e1:51:99:0b:60:
4d:ee:c7:08:da:18:32:7a:b5:4f:d2:d2:df:ec:83:a5:80:4b:
f1:d6:1d:fa:76:32:08:8c:96:6e:38:a7:5e:4c:cd:1a:8e:e4:
fe:ca:a8:71:01:2a:a8:66:da:3c:77:e3:f2:55:9c:da:da:df:
70:57:3a:b8:a1:45:fc:b5:dd:7b:72:7e:a4:26:cb:03:3d:4a:
f2:d2:d0:26:10:72:12:f4:79:18:ac:9a:4c:03:a6:d9:cb:9b:
84:a9:00:62:30:2a:1a:55:55:6e:bb:7f:95:33:ea:b7:6e:29:
c3:36:f9:25:31:52:f0:df:02:26:b6:83:50:16:fa:2c:19:2f:
5b:70:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:16 2026 by rpki-client