Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: MWhB4HC/2xargaLTUf1MIz8A4BZbq4DifTPChykuv5w=
Subject key identifier: EE:A5:9D:ED:3F:97:A9:A5:D1:D1:AC:8C:B7:26:76:4B:07:6B:0B:3D
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019CAB6B16E56702B1830A419CB977AC085D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 07E9
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: 13O+BH8ayXh5sdBPw4bumn1QrBiI4BvwsSk6k/15lb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:e5:67:02:b1:83:0a:41:9c:b9:77:ac:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=eea59ded3f97a9a5d1d1ac8cb726764b076b0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:a7:a7:77:2f:40:14:aa:78:cc:ef:3b:f2:
96:fb:16:97:f8:77:bd:e7:b7:23:63:62:09:07:06:
63:15:06:3f:9c:52:ce:5a:f2:e8:46:48:50:b0:ef:
46:62:3e:5a:92:6e:01:0f:c6:40:b8:a0:d1:d9:cf:
40:41:ec:20:8b:b9:07:ae:ab:08:75:bf:81:8e:cd:
38:05:46:80:10:b3:53:58:e8:80:cf:43:68:e5:a5:
5c:f6:85:36:39:4f:cd:4a:66:e9:15:a7:f5:89:dc:
c3:a5:bc:ee:91:d9:ee:43:69:bc:8f:fd:e1:a5:46:
cc:6b:03:72:64:e8:2a:73:49:db:47:0a:53:f6:7f:
fa:20:90:9a:7e:f8:0d:0c:e3:ac:37:1e:a6:0c:99:
54:03:42:f7:c3:f9:05:cd:3e:14:ba:de:6d:a5:8d:
9d:bb:95:06:a5:11:89:4c:7e:46:4a:fc:ad:a4:25:
45:b5:3c:c9:35:a4:f6:dc:d6:be:33:11:82:90:e8:
85:24:56:51:06:c6:3b:76:42:5e:18:38:49:32:bf:
fa:b4:88:84:48:0c:99:d9:58:ea:a7:ed:ac:7c:91:
be:98:0f:db:99:58:9e:64:a4:99:32:d5:cf:0a:22:
63:ad:5d:24:34:9b:b7:eb:22:0a:06:7c:56:a4:13:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:9D:ED:3F:97:A9:A5:D1:D1:AC:8C:B7:26:76:4B:07:6B:0B:3D
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:75:36:d3:cd:1e:da:21:42:a1:fd:16:8b:74:d6:ef:0f:d9:
fb:e1:ea:6e:28:fb:c3:75:e9:cd:6c:76:34:66:47:30:db:21:
d6:31:a2:6b:f7:b0:2c:4e:27:32:3b:1b:c9:3e:69:10:83:79:
ec:a6:9e:b7:a9:2e:34:fe:5b:33:6c:79:78:13:27:45:00:eb:
88:5f:00:58:c4:bf:a1:21:3c:9a:8a:93:94:0e:6d:e3:73:e5:
aa:b7:c8:46:35:27:9d:f8:e5:7c:bb:b7:05:15:ba:80:e0:47:
32:77:95:ae:7a:cf:3f:c1:65:c4:0a:2f:7a:21:ce:9f:a1:de:
72:e1:9f:c5:90:10:ad:2c:c5:7e:dc:93:26:59:d7:c3:85:75:
83:aa:bb:68:6b:40:5c:34:ea:aa:fe:4b:e0:ed:79:56:3a:93:
5a:c6:06:7e:42:72:70:cf:7b:98:4c:0c:6e:5e:9d:d2:33:a2:
ee:02:78:b6:c8:77:1b:98:29:cf:cf:6c:42:93:60:28:dc:cc:
8a:37:b8:30:de:eb:16:03:56:3f:eb:4d:1c:42:73:f1:a1:91:
92:3c:ef:19:e2:cc:a8:8d:b4:47:cd:3a:ed:1c:2a:b2:9b:d0:
64:c2:ac:4d:30:3f:ee:aa:95:63:09:ad:9f:de:c4:e3:bd:63:
97:8f:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:06 2026 by rpki-client