Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: jWZen3ejeMTj9i5jR04oLCPGe27HAVouoDLm9ZQyCpU=
Subject key identifier: B7:0A:C1:A8:36:99:89:04:12:E8:2A:B6:06:FC:98:76:7C:DC:87:DB
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 019CAD2263D7638732CD57854BFC29D036B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 038B
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (hash: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: /XEnGs9m9oANPmnHcKWXpi8XgN/HmjhPmpI5UXaO2gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:63:d7:63:87:32:cd:57:85:4b:fc:29:d0:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=b70ac1a83699890412e82ab606fc98767cdc87db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:51:0e:ad:3d:60:96:07:ac:18:d5:44:4e:
7d:53:d3:ac:71:de:90:89:e8:81:c3:2f:86:93:48:
94:4e:70:10:7c:43:b4:12:64:52:a9:60:cd:e8:58:
d8:71:30:f0:81:34:60:c1:20:67:aa:ae:e0:43:df:
43:b0:1c:52:c8:13:f6:4c:64:b0:cb:bb:07:6c:38:
6b:ae:15:03:45:b7:6a:d6:f2:41:6e:85:98:13:fb:
6e:1b:30:d3:57:13:80:70:fe:e6:35:b5:55:c2:cc:
8f:ba:8a:aa:a1:ee:0c:78:96:15:98:d1:66:a7:9e:
7f:d0:51:fc:e8:81:3a:9d:00:a4:c8:5b:33:ed:30:
36:c3:83:72:e4:b6:b4:37:dc:69:38:9c:d8:14:76:
0f:00:64:c6:3a:f5:51:6b:36:ba:55:80:c5:5f:a5:
ca:28:1e:96:57:99:e5:5a:34:cf:0d:79:5c:57:13:
20:fc:44:3b:dd:a6:bd:6a:1b:4f:be:48:bc:ec:cd:
9b:46:85:92:9b:6f:d8:94:50:7e:5b:36:d4:94:eb:
0d:86:ee:a0:5b:ab:12:b7:87:4f:1b:5d:98:f2:c2:
42:45:f2:58:b1:80:8f:da:11:d6:40:a1:c9:68:6c:
d3:ec:65:78:06:1b:16:15:51:1e:94:f5:e2:8e:d6:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:C1:A8:36:99:89:04:12:E8:2A:B6:06:FC:98:76:7C:DC:87:DB
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:08:cc:31:ef:c6:31:4b:ff:14:9d:29:ce:8d:65:73:b5:f0:
5d:51:b8:cc:db:49:a9:51:1e:ae:7a:50:62:21:e6:a3:57:a5:
f4:d8:69:6f:f4:48:25:b8:99:63:60:35:57:b9:b8:d9:ea:46:
8e:04:70:e2:b8:ba:04:ad:f8:e8:35:ee:de:c2:17:47:19:f3:
45:31:0a:b1:42:36:82:fc:89:b2:ba:b8:f6:9a:c9:41:5d:01:
2f:48:83:d4:8e:b5:db:04:ea:ae:e5:4e:06:3b:31:5a:22:7c:
ac:0f:af:aa:bf:29:ca:d3:3f:e6:e3:e7:26:75:7d:32:91:91:
99:d6:43:d0:14:20:03:e0:6f:ab:c2:df:0f:fb:79:e6:08:82:
e2:da:b2:23:d9:a8:a7:15:a8:ef:97:af:81:6a:5d:47:cd:36:
4b:a3:36:84:b9:36:0d:4b:82:f7:05:db:2c:55:4b:e8:b5:98:
57:13:9c:fc:b0:cd:14:22:2e:8b:3b:29:08:1b:a7:4d:46:bd:
11:80:2e:25:2d:88:97:23:88:bf:83:3c:63:d0:e7:e5:94:50:
90:86:66:49:38:99:d6:ee:b1:99:f2:14:67:e5:28:fa:a7:6c:
f1:1e:80:93:c9:36:93:af:89:5a:71:0e:4f:9f:4d:42:be:62:
b8:94:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:56 2026 by rpki-client