Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: MqYXAsmyIOSOJdEym9fkSipdTiioecrnSZlmN/BZBD0=
Subject key identifier: F6:EF:D1:32:F3:22:03:BE:78:FA:BC:FF:CD:F0:32:39:6F:9F:B9:8A
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019CB023FD273110D86245C169452BFDE93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 20:01:14 +0000
Manifest this update: Mon 02 Mar 2026 20:01:14 +0000
Manifest next update: Tue 03 Mar 2026 20:01:14 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: Slee+fHflDJgw1SgzHhi0WDHNQjlB85Vb6sWfQ+ZYBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:fd:27:31:10:d8:62:45:c1:69:45:2b:fd:e9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Mar 2 20:01:14 2026 GMT
Not After : Mar 3 20:01:14 2026 GMT
Subject: CN=f6efd132f32203be78fabcffcdf032396f9fb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:1a:8b:cd:68:81:a3:66:16:c8:da:42:5d:
b0:24:06:32:38:cc:8b:30:07:0b:97:a0:7a:52:f5:
e8:64:4c:5b:f1:c2:2c:a3:fb:3d:59:5c:fa:8f:c6:
db:fd:8d:1b:73:f6:d1:45:aa:5b:27:18:20:5f:27:
5d:23:e3:3b:89:89:62:ab:92:f6:44:e3:9f:65:1b:
13:77:40:8f:dc:6c:e4:52:0e:f0:5d:8a:f7:f7:27:
87:a4:0a:5e:84:8c:62:49:93:a2:45:33:2b:f8:a5:
13:57:bd:cc:b0:44:97:12:a0:f0:38:91:b8:b1:1e:
42:80:90:1f:65:12:ad:b5:91:7d:1a:fc:47:b7:ef:
e0:bb:6b:a0:18:26:67:a8:23:e5:0c:e9:61:49:3f:
e7:1d:36:95:89:97:5b:51:d6:12:db:e5:36:19:e5:
0b:af:e0:9a:8f:4d:bf:5c:eb:ff:40:66:c3:3e:a8:
61:82:2b:75:53:99:ee:e2:7f:65:28:8a:37:16:61:
00:1c:c6:b4:33:0d:a2:6d:53:5e:a5:93:65:0c:6c:
9b:5d:8e:70:a5:e1:14:7e:6e:0a:2e:f3:0a:11:4f:
e0:26:db:46:1d:25:25:ee:a4:0c:63:af:10:59:09:
2a:c8:a5:64:dd:61:d1:a1:af:ea:6c:6a:7b:ba:80:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:D1:32:F3:22:03:BE:78:FA:BC:FF:CD:F0:32:39:6F:9F:B9:8A
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:af:e9:47:f4:20:13:f3:cd:de:91:53:08:bc:77:78:c1:
04:f1:36:da:30:fd:c1:4d:69:86:49:df:2d:a5:99:ff:cc:8c:
29:a4:70:b9:fe:62:f1:8f:87:b6:07:b2:63:c0:b8:da:6a:d0:
25:fa:99:a5:90:1a:d1:06:92:bd:80:d1:4b:4b:d2:59:7d:a5:
43:48:3d:85:5c:d5:93:f1:65:f3:e5:17:57:7a:4c:60:77:ea:
89:c6:84:0d:cf:46:2a:41:e5:75:8d:20:6a:3c:c5:fd:59:16:
87:53:4c:7c:f1:d4:cc:da:8a:44:fa:a8:e3:94:2e:1e:cb:f6:
6f:50:18:db:90:cc:dc:29:7e:da:5c:9c:08:d9:da:35:7f:c9:
b7:da:66:75:41:81:d5:89:f5:5f:7d:5e:4e:7e:a2:9e:44:2a:
b7:b8:1d:5a:d4:ef:c1:d2:f7:7a:87:5e:45:43:96:7e:e8:92:
48:6b:ca:08:d5:22:a0:8b:b7:32:5b:0d:0c:8c:14:09:80:b6:
c8:21:71:15:6b:d1:2f:ea:a2:89:0c:f9:ce:cc:a9:52:2a:0a:
d7:1a:ef:25:38:c0:36:2b:59:e0:1d:e9:8d:6e:b3:52:e7:a3:
4e:4b:3d:8b:83:36:cd:da:dc:f4:ba:d3:a5:db:b1:56:47:db:
36:74:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:11 2026 by rpki-client