Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: v9qEgmYzCOb807cxK2wnsx57qXKpJVmuDgu7dPkbtSA=
Subject key identifier: A5:13:9E:33:A3:CF:CB:EC:99:0B:96:9C:18:F5:15:20:D1:87:23:E8
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019CAAC64A79A62CA70643EAC808CC8F5879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0974
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: pAG9t6otDJqbOrgGspfHkMgOeQjutHZcJ8hhxY7l5JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4a:79:a6:2c:a7:06:43:ea:c8:08:cc:8f:58:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=a5139e33a3cfcbec990b969c18f51520d18723e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:9c:36:2b:3d:f7:f4:54:60:1a:2d:30:76:
25:a5:9c:53:39:83:92:0d:54:42:d3:56:26:3c:d4:
33:d4:fc:63:24:2d:e7:1b:04:4d:33:20:22:a8:77:
7b:d0:b3:9b:0d:8f:d7:04:55:60:e9:ae:a3:42:b9:
4d:62:d8:8c:a6:45:c3:ac:ec:d2:2b:04:56:28:71:
22:4d:2d:10:3c:a8:f5:0f:90:53:fd:ef:bd:c3:0e:
29:8d:e1:b3:3f:00:73:cf:35:c5:13:4b:fd:0d:89:
d3:42:d3:aa:20:78:a2:03:12:21:e8:1c:18:d7:e7:
7b:24:b3:24:cb:4b:f7:d1:86:44:fd:5e:af:4b:f2:
73:c4:66:1d:89:a5:25:13:00:b8:da:3e:4c:c1:e4:
93:69:ae:b9:c8:22:4e:7e:f8:04:64:9d:74:f7:f0:
36:95:da:65:e6:28:bf:62:9f:21:c4:4c:50:c4:f5:
c1:5f:fe:11:f7:6e:a3:56:d1:94:0f:9a:08:d6:a8:
ac:9b:0d:8e:06:0c:91:fa:8f:fe:4e:16:01:3c:cb:
d2:05:93:c0:f4:3d:0b:7e:ae:6e:ca:c4:1a:fa:90:
35:00:37:58:f5:e7:37:5a:ea:03:fc:61:13:6a:66:
e5:25:c4:24:88:a2:8f:6e:29:8d:b4:45:20:ff:eb:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:9E:33:A3:CF:CB:EC:99:0B:96:9C:18:F5:15:20:D1:87:23:E8
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:bb:b3:fc:72:f6:c3:b7:f8:e0:05:b9:69:42:e3:40:67:
72:17:f4:63:7f:38:c1:71:67:99:8f:d7:94:57:40:f1:d2:19:
da:a4:82:4b:78:90:f4:bd:a5:af:3c:55:26:17:0f:db:69:fd:
3f:46:ea:2f:26:2d:39:e0:9a:0d:b3:12:09:37:e2:37:3f:63:
36:6b:92:f1:08:4f:a3:a9:cf:ba:87:20:a2:82:5e:e9:0c:51:
a8:d7:b9:43:31:fd:df:99:33:37:9e:dc:4f:e0:92:12:74:f9:
de:ad:26:68:2f:f9:cc:38:96:6b:5b:84:01:0f:6f:63:6c:ed:
d2:31:47:0f:49:aa:fa:be:95:b9:98:a9:8e:c9:13:52:30:f4:
ba:32:4a:0a:93:a4:09:58:75:4d:36:ba:96:e7:dd:51:26:5f:
75:3e:6f:fc:99:97:66:95:3a:8e:2b:cd:33:52:a6:19:d1:82:
87:fb:8c:4e:f2:97:22:65:86:2c:d0:da:44:ce:d1:29:77:4f:
d7:c8:12:e6:5b:89:50:b2:b8:97:47:1e:f6:ae:3d:78:73:6d:
85:f0:4e:19:4e:60:ff:d3:07:22:12:71:8b:0d:d1:11:32:f7:
fc:01:26:f3:76:c0:57:46:ec:a6:ad:53:99:ac:cb:f5:bd:40:
9a:98:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:24 2026 by rpki-client