Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: 88hwQoXXt/nL7nBoUWeI8jKFHC/fieIOXSOm7YHzzSs=
Subject key identifier: 7B:DC:E1:43:DF:83:58:77:05:E7:7C:9D:C5:B3:5B:E4:A7:F7:1C:F1
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 019CABD8F374A47C9DAAD8B5ACAB7C629E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 0CAA
Signing time: Mon 02 Mar 2026 00:00:47 +0000
Manifest this update: Mon 02 Mar 2026 00:00:47 +0000
Manifest next update: Tue 03 Mar 2026 00:00:47 +0000
Files and hashes: 1: 6pfTR-noxja27M34pFELSd5hwh4.roa (hash: gxeFOTQ55de/7+Ulcgm+cnNnRnSBx2XFr4qJtHE96Xs=)
2: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: 3ISWBJ5pj2egxaCy4oAvSh+UkiKRn+3J9l3Fk17udBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f3:74:a4:7c:9d:aa:d8:b5:ac:ab:7c:62:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Mar 2 00:00:47 2026 GMT
Not After : Mar 3 00:00:47 2026 GMT
Subject: CN=7bdce143df83587705e77c9dc5b35be4a7f71cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:b3:3a:b9:57:df:a9:ca:50:69:89:5a:38:
90:c7:ed:cd:99:9b:5f:da:97:4a:77:03:75:92:82:
57:2b:27:8e:b4:d6:ef:7a:99:3e:7d:c4:2b:d0:dc:
46:81:de:11:1c:f6:57:45:5c:d2:c9:78:28:91:22:
83:b6:2d:38:9e:30:9a:87:10:f8:c7:65:ac:52:2d:
55:52:46:e3:c0:75:5a:06:1c:49:39:5f:77:6a:7a:
eb:77:98:0a:d9:cf:99:6a:e1:cd:9c:f4:09:2c:cf:
5f:69:11:97:10:68:98:bb:d5:3b:2a:32:6e:3a:ee:
9c:c7:5e:e7:a8:51:89:7e:18:77:16:38:16:74:ac:
de:cf:e8:9e:ae:88:20:73:53:bf:16:c9:1b:a5:5a:
30:86:15:bc:b3:d5:f7:af:77:97:13:d5:6e:b1:49:
cd:bb:a4:81:92:a1:2b:9b:6e:2c:c2:55:4b:c3:f5:
c9:4c:68:8a:67:22:59:eb:70:5a:58:41:98:da:47:
2c:c3:90:81:24:2f:10:81:7d:6d:9c:45:de:85:18:
3f:15:df:c2:a7:44:4e:c8:09:a0:b4:ed:23:cf:70:
d8:09:61:3e:7b:00:1e:ce:ae:e8:9d:32:37:e1:d6:
a5:1d:53:3b:ab:87:1b:b2:bb:70:9a:2c:be:51:e8:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:E1:43:DF:83:58:77:05:E7:7C:9D:C5:B3:5B:E4:A7:F7:1C:F1
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:3f:79:91:0a:6e:4f:90:b8:8b:a2:ee:53:ff:60:e4:47:
7f:55:65:94:95:81:6d:f4:b0:b3:38:cd:47:5c:19:f7:1e:87:
7b:dd:43:6f:8b:32:dd:58:28:5c:24:10:d7:b5:3c:18:a2:e7:
2a:5d:09:60:59:b6:51:cd:d1:70:45:9b:a0:ab:72:b4:47:61:
df:52:80:6f:02:ce:1e:b2:1b:f6:e2:4d:48:fc:12:fc:f2:ce:
3f:e0:5a:8d:36:e5:fc:c3:b5:72:04:b5:8b:1f:fa:68:22:dd:
0c:2c:22:5f:81:58:4f:ad:41:c3:1a:21:ed:78:41:c9:d4:8d:
73:3e:11:64:74:64:6d:d1:49:1c:02:b6:d0:cf:df:1d:92:18:
84:c2:4a:38:30:12:eb:5b:cd:0b:5b:4e:ac:2b:59:f4:c6:5e:
b6:54:39:fb:3c:3b:d3:f8:c8:9a:de:c2:75:0e:db:db:63:8b:
c1:b9:a1:b4:e0:51:70:3a:48:39:10:ab:5b:2f:27:37:17:c1:
36:ac:3d:a0:00:01:1f:08:0f:5a:9e:8c:76:a1:f6:4f:0e:89:
c5:70:c4:4d:2d:a5:30:fa:39:63:1d:86:a4:17:6f:2e:f6:5d:
eb:98:8f:30:a1:4c:d6:d3:66:e8:ea:49:74:6e:1c:ba:8d:73:
e6:dc:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:33 2026 by rpki-client