Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: a4H3lwGYjK3PK0xJvJB2XyHgas5hGTDiilPfh8jIQ3I=
Subject key identifier: BC:5C:84:36:EA:B7:3C:72:8B:AC:07:44:27:55:A2:80:88:17:59:0F
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019CAA58933ADAB8657CF06205026AAF21D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: uLznRWtU1CZpaF9j/uQ4upRrBqGy/hpCkJOxTytSmak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:93:3a:da:b8:65:7c:f0:62:05:02:6a:af:21:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=bc5c8436eab73c728bac07442755a2808817590f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:e6:ef:12:78:9f:65:2a:6c:14:c7:17:49:
a7:b7:82:3d:7a:5d:56:58:bb:7c:64:70:8b:8a:2f:
ef:66:84:2a:d4:47:ea:3f:e4:f7:ce:27:de:b1:3f:
8a:7e:02:b8:2c:0d:ec:55:0e:f0:d6:f1:af:59:31:
e3:04:a9:e8:14:e7:b7:2d:b7:1f:3d:b6:61:c7:d7:
54:7c:40:1b:0c:9e:4d:6c:ff:08:14:b4:1f:12:ab:
8a:0f:a2:c8:9e:bf:ff:00:75:52:be:a3:1a:84:5d:
27:04:0b:13:85:85:3f:99:d2:60:bc:5c:82:18:54:
d4:01:d0:b2:71:b7:20:0d:f1:7f:a5:a2:fe:cf:cc:
01:9a:60:0f:5f:60:a3:15:69:26:d6:2b:c3:21:9b:
30:8a:78:2d:66:3a:03:53:8a:cf:d8:44:6a:1c:21:
65:25:7e:c5:fd:fc:5e:bb:0f:87:5f:69:54:9a:f7:
db:db:05:7c:6a:20:0a:07:dd:41:b3:c7:56:d9:96:
0c:c6:51:bf:3d:e0:ef:aa:b3:ec:c3:00:2d:03:74:
a4:38:a5:5d:86:91:1d:20:cb:da:1a:82:52:58:1e:
3f:c9:50:69:c6:56:55:ef:ab:e5:f8:d0:be:14:82:
3e:49:46:3d:c1:24:46:a4:c9:bf:73:ed:f7:ab:2d:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:84:36:EA:B7:3C:72:8B:AC:07:44:27:55:A2:80:88:17:59:0F
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:00:11:a7:c9:56:d4:7f:74:fe:0f:f3:25:24:9c:ea:1d:ac:
4c:8a:4c:98:7a:32:94:98:67:c5:19:c4:5e:28:33:c8:c1:e5:
42:07:b0:c8:aa:10:90:d3:97:a4:f9:50:d6:47:8a:b1:0a:f1:
bc:5e:cf:d3:56:44:52:21:4b:ba:39:7c:3f:c6:58:b0:5e:2e:
19:6b:fb:8e:57:9d:99:ec:a8:e4:81:13:8c:d2:26:d0:ed:8b:
6f:14:c4:46:a2:18:b5:ad:4f:c1:22:0d:de:37:f5:3e:f0:50:
fa:36:cf:9e:c8:5a:64:1e:81:8a:d8:58:6d:f1:56:55:5d:dc:
1e:be:60:ae:c7:0c:db:29:fa:79:1b:0b:70:6a:58:87:80:3e:
c3:a0:a0:92:6f:f6:b7:41:54:db:78:21:62:4c:c2:76:6c:e5:
f9:32:dc:26:c4:72:90:e1:a9:11:7e:f9:78:15:76:14:25:f1:
42:86:e5:76:d2:f8:5b:2c:0d:ee:f4:ec:f9:c3:cb:ac:e9:b8:
ef:6f:5a:50:c3:b4:f7:31:0b:68:7a:20:59:55:ad:07:fa:18:
c6:fa:b0:4e:b3:32:c5:2f:9b:6a:ad:75:17:06:bf:73:d1:ce:
ee:74:58:be:8f:cd:94:7b:30:ae:ca:51:b9:86:d0:cd:da:00:
31:07:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:27 2026 by rpki-client