Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: WZjLxw3o7ofeqXQckkENOYjEhtxpHCCfCsvOx24ASeM=
Subject key identifier: 9A:23:5D:A2:BB:55:3D:8D:E9:00:DE:FD:9B:C0:F3:26:8E:D3:BC:91
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019CACEBD50BCCE11461C13E350DCA9C7C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: pEMOAtuePyeesz_PpC1UjRHNACE.roa (hash: 6RgHrtS23ZSyoQWavExnsqZLXuo4UZSBu3C0i/+czxA=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: 0x1fRvXNOET3cNfaAag4mH9WOPL18dVHdlBG8UIX7xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d5:0b:cc:e1:14:61:c1:3e:35:0d:ca:9c:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=9a235da2bb553d8de900defd9bc0f3268ed3bc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:ea:28:3b:77:1f:67:1b:5c:3f:86:f5:63:
7b:6c:d4:d9:c7:5d:81:52:02:00:0b:46:78:e9:5a:
8a:47:de:94:1f:b8:d9:5b:02:14:f7:37:70:c7:82:
15:d6:c9:c9:e0:57:15:2b:0d:73:33:b1:ec:80:e2:
f4:a2:79:e3:2a:0c:77:34:e3:ac:18:b5:fd:b5:90:
41:fb:4c:0e:c4:05:d6:ae:fd:2e:db:b3:13:3d:59:
14:25:51:c6:64:24:6c:63:d8:1b:18:4a:9d:ba:74:
df:28:0e:49:b1:3d:ba:34:2d:ff:dc:10:bc:53:7b:
05:65:9e:e0:8e:e6:4d:19:e2:f8:a9:80:92:c1:bb:
6a:71:36:9b:c7:a5:df:cd:ad:d9:11:3e:ab:b2:04:
df:a7:17:93:5e:c6:a6:5f:a4:69:69:d5:fb:f6:20:
87:f0:7e:fd:9b:1f:40:f0:51:b0:2b:3a:76:ba:0f:
18:ba:d8:62:dc:c3:c6:8a:83:f6:65:2e:90:7f:2f:
24:9e:1f:b5:cc:31:18:72:79:70:fa:e8:d1:c8:e4:
7d:0f:00:13:0a:cc:be:52:57:e7:1b:9d:b5:4f:80:
93:73:aa:8a:2b:f2:9f:37:bd:67:ae:9b:be:14:69:
34:f6:d4:f7:2f:fd:62:2e:77:16:01:f3:38:fd:6c:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:5D:A2:BB:55:3D:8D:E9:00:DE:FD:9B:C0:F3:26:8E:D3:BC:91
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:25:be:e9:07:29:24:39:fa:ef:db:db:fe:c2:b0:88:17:
b6:5e:47:02:a1:b0:8e:d5:98:25:70:7d:cc:23:4b:47:f4:37:
6e:0a:66:ec:7d:b1:49:1b:09:a9:dc:ac:cd:b3:39:83:fd:b9:
7a:b0:25:9d:73:bf:6e:2f:0f:fe:2d:f9:d4:52:2e:44:18:27:
30:96:ce:ef:76:4b:52:98:5e:b0:65:54:7b:4e:15:37:25:97:
4e:dc:8b:41:04:bc:dd:ab:6f:64:f1:5c:64:31:97:d8:97:bf:
73:8d:e8:e1:77:0c:aa:7d:52:c7:ae:2f:24:c9:0b:5e:65:40:
6f:bf:80:ce:38:e7:b4:05:2b:5b:46:2f:1f:f7:e3:6f:0d:f1:
e8:7f:3b:40:e6:4a:dd:fc:26:a5:7b:37:c6:7c:49:a8:52:7a:
de:10:16:a7:ba:b6:93:02:4d:85:92:9d:da:db:87:8b:03:d4:
39:f7:19:08:d6:88:01:75:c7:ea:92:9b:13:ad:ba:ff:32:bc:
bc:21:ca:88:f1:ae:cb:ea:89:d2:05:fe:4e:3c:c2:a5:15:15:
5f:00:05:0c:8b:b2:1a:bd:83:a5:27:c6:27:f1:12:9d:ae:7e:
bc:65:82:1c:cc:06:43:83:92:bb:c7:cd:e7:98:31:86:cb:9d:
45:95:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:55 2026 by rpki-client