Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: vY2jGFnK2x9z81SsL3ZuEk6qCPDcRxzpAxDD56R4I68=
Subject key identifier: 58:4D:09:A1:79:A7:E3:24:08:A3:59:25:11:77:AC:F3:73:13:10:A2
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019CAB345D821DF982D6082CE4DAB2F52D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0BB6
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: dYXANXPUpTudeHSyZqAW/DUs3XzmNYBHZQvK6nQeMCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5d:82:1d:f9:82:d6:08:2c:e4:da:b2:f5:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=584d09a179a7e32408a359251177acf3731310a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:15:dd:b0:63:97:1a:13:17:4d:ca:30:4c:
26:9f:3a:56:28:0b:85:8d:72:18:79:4e:67:e9:2e:
c0:16:ab:77:fb:dc:fe:ca:75:86:89:34:a5:b3:2d:
5b:bc:ba:97:60:56:d6:dd:3f:fd:0c:ff:e9:ab:97:
0d:a8:b9:71:26:08:f7:99:97:f4:06:b8:b5:30:68:
27:e4:09:1a:26:c2:d9:d0:cc:e2:04:24:26:cd:dd:
cd:b1:bc:37:92:bc:fb:c7:d5:13:a2:49:69:d9:7a:
51:e0:e9:c9:f4:97:d0:0a:d4:c3:46:f7:d1:02:91:
0f:fa:4f:b1:14:03:c8:58:01:81:66:df:0f:cd:6f:
1b:8f:e4:a0:d5:9b:51:40:4a:bc:a4:92:9e:09:fe:
5c:4c:fb:c0:73:2d:56:17:90:ae:ca:cc:14:ac:8c:
8c:b6:b3:88:a7:c1:3c:e3:24:fa:11:c2:95:34:e6:
7d:0b:1a:12:82:19:82:09:c6:aa:60:db:a3:8d:cb:
3b:b0:59:88:f6:62:48:6a:44:98:db:c6:d5:dd:24:
71:bf:e5:e5:d6:28:99:ac:ba:34:5b:7b:69:5a:3e:
9e:0e:32:54:30:a7:82:0b:89:d6:0c:fc:c4:de:e5:
74:21:06:b3:c0:22:f1:e7:54:ba:66:0b:0d:17:25:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4D:09:A1:79:A7:E3:24:08:A3:59:25:11:77:AC:F3:73:13:10:A2
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:46:73:63:18:d4:8a:e5:55:3f:13:59:a0:85:68:dc:0d:
0f:3b:87:81:c2:07:ee:d6:e1:fc:a9:b6:ab:cc:54:e6:a7:10:
a9:cc:15:77:89:1e:74:b1:5b:73:ee:bb:77:e7:21:fd:1f:aa:
ee:a9:6b:4c:3c:ea:49:5f:fa:68:c6:7f:6b:b7:7c:39:58:a7:
20:85:40:ea:f9:b5:b3:9a:f6:2d:f7:ca:9c:0e:11:ba:46:54:
f6:88:02:0a:ac:f6:94:ce:df:af:36:e6:d8:16:27:21:4f:57:
2d:31:3b:7c:2b:b7:aa:2d:b3:2a:8f:1c:a0:df:46:9f:5a:85:
7f:80:ba:1d:ab:e7:26:a6:9f:a7:58:1b:55:64:e4:84:8e:b0:
fd:6b:ed:3b:33:cc:f3:08:5e:28:b8:e6:a6:27:f5:be:5e:c0:
8e:04:53:4a:11:d9:78:9b:dc:8e:5e:cd:b5:6f:f2:91:40:59:
c0:15:33:fa:a9:e4:63:3f:fd:bd:72:07:85:f1:e6:2a:3c:25:
0c:ab:80:0b:60:6c:ef:48:4a:65:0d:eb:2d:d4:29:eb:54:2a:
63:48:3e:27:0f:67:6c:17:e3:79:c2:3c:1c:82:ea:73:3e:1e:
d9:35:20:41:d7:d2:9b:5c:9f:13:1a:ae:39:62:2e:9e:6d:2d:
97:42:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:43 2026 by rpki-client