Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: nEc1+pMuNCy1ZOUWpXq6TfInjT3GjHFAQFFS5pCTlEo=
Subject key identifier: 9C:0F:14:98:C1:00:3B:2E:3C:7E:A6:29:61:D3:21:EB:FF:FF:04:BC
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019CACB56196166D7FAB0112B01DA4CC35AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0B26
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: 9HYZrS2Bul0kBRLiuq0kQOxPYhy86zeX/0pShmyRicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:61:96:16:6d:7f:ab:01:12:b0:1d:a4:cc:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=9c0f1498c1003b2e3c7ea62961d321ebffff04bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:bd:3f:8a:11:6f:9d:28:60:bc:93:f1:32:
15:1f:cd:e7:54:93:78:ef:a8:92:2d:48:e9:97:5b:
4e:a6:12:ec:00:7c:8d:4b:43:e3:35:0c:e7:fa:24:
a3:14:90:26:4b:46:ea:a0:c0:07:99:65:90:7e:bc:
51:1e:2f:2b:46:54:86:95:f3:4e:6e:24:5f:fd:a3:
c8:cc:01:3c:89:94:56:57:3b:4b:bb:c2:c3:db:7f:
07:06:b3:da:a8:1b:27:53:ad:5d:32:62:81:f5:e8:
db:c1:a0:da:a1:18:eb:22:1c:0c:ef:d3:c8:bf:79:
1e:84:db:24:df:e2:3e:da:da:be:1d:92:f3:3e:98:
f2:78:a6:ac:51:fb:ac:b5:2b:a5:be:66:d8:9a:fb:
f5:16:71:d6:ae:6b:7d:03:c5:bf:79:40:92:9d:1f:
62:1a:53:91:c1:35:bb:84:76:42:95:28:bb:f0:da:
6e:bd:51:12:b4:e7:12:17:22:4b:4e:75:7d:52:b0:
44:a8:2f:76:d0:66:23:e0:24:2f:4b:0c:30:b7:02:
a6:c0:25:fb:f3:7f:70:f5:15:98:e2:bd:b5:45:28:
18:47:27:ad:a5:6c:20:ba:2b:90:a3:47:ac:91:0b:
26:94:e8:b9:38:87:b1:2c:ca:89:10:7e:73:ce:40:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:14:98:C1:00:3B:2E:3C:7E:A6:29:61:D3:21:EB:FF:FF:04:BC
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0c:9a:f9:99:e3:f1:ba:a2:d7:fd:29:fa:90:5b:ac:02:f4:
56:04:9f:1b:05:84:87:52:61:aa:1f:db:f7:aa:f8:03:6b:2f:
f5:4b:15:cf:78:9c:c3:f6:c5:41:a9:1d:51:05:62:01:ab:5b:
5c:04:83:39:1e:27:25:93:2b:4a:51:45:60:96:37:fd:48:43:
f9:42:ed:3a:af:db:54:04:91:11:1f:7b:11:05:9e:4d:a7:75:
cb:b5:ba:43:d0:fa:92:3e:b2:fd:8a:cb:1f:b5:5c:85:0e:1f:
4e:d9:25:a5:f8:3d:12:99:6f:69:f8:69:cf:40:e6:37:5d:f5:
d2:4f:da:a2:ee:cd:d3:5c:05:c1:fd:92:43:b5:5e:6e:54:e6:
0d:50:39:d4:97:24:e3:ab:5f:2d:11:1b:7d:35:dd:5a:89:f9:
ad:07:1e:60:c2:45:9e:78:2d:cd:db:fb:a8:c1:5f:d4:28:ca:
ab:3c:ef:3d:74:46:96:47:e5:46:a8:2a:2a:e7:40:8c:a3:e4:
66:06:b4:6b:c1:76:cb:94:8c:d8:fc:e7:f7:cd:5e:24:f4:0c:
96:d9:15:9c:74:a2:72:5b:d8:e2:5c:25:d4:34:f2:0c:eb:d8:
32:98:35:b0:e4:7b:3e:79:f3:40:1f:2f:5d:57:73:7d:15:6e:
51:ea:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:59 2026 by rpki-client