Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: neuRUAaNxow+bcLsJbaBi1uqhwnar5NvVpcvjcWmCuM=
Subject key identifier: EE:53:EB:D3:FE:C5:72:B3:5C:09:82:FE:FD:22:A9:72:13:6D:B6:3C
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019CAC1015300DAB639D81CFBFA707EAB80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: rjrNLUZZgKOLLxwpYuZeYNDbHOmTAGkQICXwf4I35d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:15:30:0d:ab:63:9d:81:cf:bf:a7:07:ea:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=ee53ebd3fec572b35c0982fefd22a972136db63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:01:8e:74:bc:f3:71:93:66:fd:fa:16:2a:
af:a9:5d:89:ba:34:31:a4:95:28:5b:9b:f7:ca:30:
a2:c1:e2:23:60:06:f5:35:5c:7c:26:e1:9e:a8:7e:
be:ab:df:2b:b4:91:97:d9:97:ea:1d:a8:18:9d:a1:
98:87:52:1c:5e:c2:a8:c7:f6:a7:2e:11:d3:8f:d7:
72:8d:29:f3:f8:42:14:e9:ef:26:02:1d:76:0f:92:
d5:a6:59:7c:c3:d6:c0:af:91:54:aa:da:5d:c6:22:
b4:3c:96:5c:af:0d:75:7a:48:e8:fe:bc:ce:59:5e:
ea:57:28:6e:23:5d:d8:7b:15:37:53:07:05:69:15:
5a:4c:43:73:20:d4:75:b0:db:15:bc:e6:a8:f1:6f:
f2:13:b6:15:df:95:5f:3d:24:58:7c:5b:93:77:3f:
a5:19:1b:98:27:f9:79:cd:d6:1f:d5:f8:62:c9:a8:
aa:07:c7:ae:32:f8:6e:76:db:2d:d2:ad:31:0e:82:
24:ea:a6:29:c7:7f:7f:04:91:14:6a:aa:22:bc:33:
11:2e:60:29:4e:13:48:20:06:51:0f:9a:66:40:60:
df:3b:58:f4:74:2b:8d:3f:dc:38:3c:f0:e8:23:e4:
3d:0a:d2:b1:2a:38:a4:0f:66:59:0f:6f:1d:fb:11:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:EB:D3:FE:C5:72:B3:5C:09:82:FE:FD:22:A9:72:13:6D:B6:3C
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:96:22:ac:a6:9e:b3:1b:e0:c6:a9:8a:13:59:3b:03:2a:
83:7f:a4:de:09:25:e3:92:ad:37:2e:a8:35:4b:af:c2:33:98:
d7:5a:0a:35:d9:08:19:86:fc:b0:81:da:c9:0b:1c:18:10:da:
0c:5a:f1:fb:ce:6d:0b:3f:ec:f3:14:c0:f4:b7:6e:44:e8:59:
ba:a1:ca:b5:f3:38:ed:c2:b8:29:c4:1e:80:6b:05:91:8a:32:
7a:21:c4:c8:1d:98:68:b4:32:15:39:19:37:66:4e:e2:14:3e:
6a:16:a0:e5:04:aa:2c:2c:db:ac:dc:c2:5a:36:c2:14:26:3b:
48:3c:fc:8f:4e:06:7f:2d:18:10:68:54:b6:fa:61:70:13:44:
67:f6:af:0f:83:ad:77:fd:5b:d7:7e:c1:ec:36:1a:a5:70:f1:
7b:8b:b9:82:39:32:08:04:a5:78:1d:cf:75:98:f8:01:94:62:
cd:ea:61:01:90:c9:c3:54:5b:63:f6:d1:1c:cc:84:88:98:a7:
73:b0:08:13:0a:0d:55:a0:14:29:a3:e5:ee:1e:82:ba:31:f3:
66:cc:fd:68:9d:9f:92:8b:bb:d3:4a:62:3c:ff:12:2b:42:aa:
e5:e2:fe:d3:3f:51:3b:d2:f6:cc:9d:32:73:65:89:b3:42:53:
3d:83:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:42 2026 by rpki-client