Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: Aqbp6zPbLFuBUSapzxy8X+gGIMnWfleiMTogbyb48Os=
Subject key identifier: 91:48:64:DC:D7:5D:C5:1D:67:7B:B2:64:08:0A:43:68:3A:80:3A:3E
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019CAC46B1094140B07A41DDDCBDB11DCF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: kRt9bUyJdFBB9Urf88wqGCyD9z8.roa (hash: ru+g8q6Q2p0jDg0nGr5M9c3LVV0Tl9BDqYju45TyK18=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: 1y5WX6dfdfCwOZ+esza9qm7oIdNReIn8Mb5REePSK04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b1:09:41:40:b0:7a:41:dd:dc:bd:b1:1d:cf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=914864dcd75dc51d677bb264080a43683a803a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:bd:e5:58:ff:5d:9b:e2:e7:2b:b8:d1:c4:
ff:53:48:e0:33:ad:0c:79:38:f3:20:84:4d:1a:53:
9e:61:37:be:a4:e0:02:66:1f:b1:dc:2d:8a:94:fa:
5a:b0:be:5f:aa:9c:53:b5:b0:57:d6:50:dd:7b:fa:
92:26:c5:23:1b:83:05:fc:a5:26:61:58:89:85:f4:
6f:ec:2b:d6:5e:63:54:52:36:db:2f:4e:00:07:fd:
ed:c9:31:f1:c4:16:d5:e4:4c:f0:fc:25:c9:41:e0:
af:e9:84:c2:02:f8:01:87:e1:5f:f2:f6:12:88:b8:
22:a4:77:14:f0:31:08:46:74:55:71:58:2a:b9:5f:
89:5c:f1:a2:3d:8b:18:dc:00:1f:89:91:3e:01:53:
6d:c6:a3:e8:5b:5e:64:66:cf:02:13:5b:4a:10:1f:
d6:52:3d:ad:f9:43:3d:7f:49:46:be:45:f1:0b:fb:
79:12:1f:36:0a:bc:8e:e5:55:8a:e6:de:79:e8:53:
e6:ea:54:4a:90:1f:66:6d:ae:6e:18:48:ba:d5:37:
e6:94:c0:e6:02:75:68:14:f4:6c:67:6e:43:aa:53:
79:89:82:b2:ba:60:e5:cd:2f:f3:c1:7f:e1:80:62:
cc:07:32:6d:f9:8b:61:91:a5:b3:5e:5f:c8:83:db:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:64:DC:D7:5D:C5:1D:67:7B:B2:64:08:0A:43:68:3A:80:3A:3E
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:94:18:d5:80:ea:64:48:46:f2:1e:52:2b:11:5a:b5:6e:
2a:64:90:09:82:0c:dc:04:cf:73:8f:b4:48:a4:6a:cd:ba:c1:
91:c0:e3:42:02:75:fd:9b:ac:fa:79:32:f1:aa:66:59:21:75:
db:b9:07:23:98:6c:60:56:37:27:1b:9b:fd:38:dd:60:53:31:
17:21:eb:16:f0:35:aa:97:25:21:f4:7a:2a:c4:7b:2b:80:35:
53:38:e8:68:1f:30:0c:4f:1d:07:0d:c9:ac:d6:00:9e:34:7f:
38:c7:cd:eb:f7:fc:c5:60:87:cc:d1:2e:ff:b0:6f:0b:2d:d4:
27:8a:60:2c:1d:c7:e4:5a:0c:ed:83:82:de:89:77:7b:f5:96:
28:56:67:d2:d9:9b:c6:a5:2a:4a:9c:2b:5e:90:1f:3f:3f:e3:
db:ea:1e:df:8f:21:9d:c8:6a:31:36:29:96:b8:47:b1:d6:66:
97:24:39:37:6e:1f:d9:a4:b7:5f:fc:f5:ad:09:cc:e2:67:49:
cb:7a:1e:73:09:7e:e2:15:33:af:a1:af:35:b5:81:78:f7:9f:
40:05:8f:c4:43:3d:83:34:34:6a:46:47:d0:be:df:6d:a5:c6:
45:ca:9b:77:e1:f2:d0:cd:fa:c1:29:7f:0f:9a:57:b8:70:b3:
0a:36:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:26 2026 by rpki-client