Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: UcpCuyM+Rz+TGU8W2JGENo0ULsuGTfJiQL5pPLZujiY=
Subject key identifier: B8:97:1A:CE:7E:E5:3B:69:BA:EE:22:51:73:C2:5F:6D:C9:40:40:BB
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 019CAAC67495961C720CD891E988DD73FAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: j2kshuHVZgy_a_ks9i17d_oN-wE.roa (hash: pcR01H5nRjsqzd6YXqWm7ztOqd7e8cS1jZjUNHiylns=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: YJDfnUnwsRM/twkbUJIIKqLJs/GFItSmAME1PPUqsT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:74:95:96:1c:72:0c:d8:91:e9:88:dd:73:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=b8971ace7ee53b69baee225173c25f6dc94040bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:98:5e:90:42:24:34:ae:25:12:4c:f5:67:
29:50:20:30:ad:1c:fc:3c:ec:4e:a1:cc:d0:3d:59:
14:57:f8:3d:ff:ac:6f:48:08:ea:cd:ad:25:df:f4:
14:a3:e6:ec:3c:a4:66:54:ef:ee:0a:08:90:64:17:
ed:e6:d2:02:b2:df:35:b5:5e:ee:63:d2:14:fa:52:
2e:f7:c4:bb:3f:db:eb:c4:e6:65:d0:36:90:07:37:
86:36:ae:0d:d3:11:6e:c7:2a:c5:66:40:0d:b0:c9:
f2:da:b8:0b:70:e9:c7:b4:82:d5:2d:89:d8:7f:42:
34:4d:47:6c:eb:40:7a:72:3b:a6:89:19:47:d2:a3:
ae:4c:a2:62:e9:af:c5:9d:af:ff:4d:31:7c:73:f0:
eb:fa:f7:60:99:a4:68:34:c0:60:9e:1d:0a:ea:f9:
09:db:71:57:01:d4:17:1c:fc:6c:50:ec:fa:a0:53:
2c:68:a2:24:14:66:c3:48:73:bf:f7:30:83:1d:8d:
26:8b:35:14:65:3b:47:86:02:1d:b2:dc:4f:53:01:
96:77:f4:07:47:a5:f1:57:80:be:ca:85:bf:25:63:
ee:fc:ce:91:68:db:00:a5:d1:12:9d:45:a4:64:50:
b7:07:fc:5b:40:ea:d2:6d:54:44:1a:12:00:fb:d9:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:1A:CE:7E:E5:3B:69:BA:EE:22:51:73:C2:5F:6D:C9:40:40:BB
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:2f:6f:9c:41:81:01:82:94:57:4c:0a:25:9b:09:14:9c:
67:7d:b5:49:5a:74:e4:41:05:21:d3:87:cd:0b:7f:31:8f:1c:
10:80:4b:66:43:b3:82:c3:59:fa:68:7d:c8:2e:39:ff:86:6a:
6e:60:8c:70:30:18:32:3d:8e:ee:b0:e1:a6:46:98:41:ef:4d:
e5:9a:8b:09:d1:54:09:ff:7b:a5:86:9d:f1:32:4b:e9:b1:d8:
04:57:ed:55:13:d3:ef:16:ae:9e:05:ed:87:a1:c9:47:4e:74:
cb:f3:61:08:f1:16:99:62:5f:d1:4f:ed:e2:cc:4e:0e:24:b6:
1e:2d:14:46:88:2a:88:5d:d9:5b:63:5c:d1:4e:ba:1f:11:de:
54:3b:16:ae:c9:e3:a1:23:55:89:55:57:8d:fe:6d:ae:d5:c9:
0c:7f:f4:26:98:02:b1:1c:d8:f4:6c:b0:4c:9b:3a:94:76:93:
37:d1:09:75:1a:8a:d9:9d:4f:9e:6e:6e:27:bd:d1:79:cd:41:
ed:a6:92:71:b1:9a:d8:00:1c:c2:3a:98:2b:35:dd:c9:70:59:
3f:92:64:8e:98:54:3d:8c:a9:72:24:cf:41:e1:47:8b:16:3d:
ea:2b:05:f6:68:f6:c8:c9:b9:fc:ed:d4:6c:d6:96:be:3f:3b:
d6:5b:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:10 2026 by rpki-client