Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: DmlqDhvaf1vk8AhmCwVbe7AF7h3GIHyCtsixtltjlWs=
Subject key identifier: EA:D6:95:FF:DA:00:06:B1:A2:A8:AB:B7:FA:5E:D0:F9:C8:60:E6:EF
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019CAC7DFF7A26C012B6DCACE4FA83F2FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 06B5
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: GxNglowBB-qM4SyLCUpB8DxSym4.roa (hash: cXQ7oNvmgTnLy87CiQWasUFcfBCcYezCe1uKaHJSwpY=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: KCc2o9hxdYzectovHG0J0CCazBtmqP5FgQ9HQdp7pnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ff:7a:26:c0:12:b6:dc:ac:e4:fa:83:f2:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=ead695ffda0006b1a2a8abb7fa5ed0f9c860e6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:2d:60:62:e0:52:c0:01:c3:48:ea:3f:9b:
33:10:35:a6:59:31:ea:60:cb:42:bc:cb:08:ee:bb:
67:4f:c9:96:6b:46:7f:40:75:32:94:7e:16:ee:dd:
07:73:8b:56:ca:fb:26:28:bd:82:66:9c:c8:74:86:
1c:8b:30:64:e7:b9:39:56:b0:7a:84:3b:3c:45:13:
63:93:d0:e3:11:d1:b5:51:80:ac:96:15:de:bc:cf:
4d:eb:29:c0:4d:7d:2f:c7:2a:10:72:e3:d5:e8:13:
52:16:c9:ec:70:f4:e8:8f:00:78:73:2f:b9:68:ea:
a4:e5:e5:c8:7b:aa:f7:dd:5f:bb:4d:5a:02:37:90:
df:2a:d5:70:2e:80:9b:e0:68:57:2f:c7:f1:56:12:
c3:8e:67:2c:43:7b:e8:ab:e6:14:44:7d:d9:85:af:
40:9f:5c:1a:e5:f9:35:d9:4e:8c:36:d4:99:a1:f7:
8b:20:2a:73:bc:9d:71:db:d6:fd:10:ec:bc:72:bb:
df:16:8d:15:14:52:8a:a5:54:61:c2:ef:6d:57:bc:
01:09:3f:26:41:d7:d4:4b:92:62:4b:04:79:f1:79:
03:81:30:af:65:27:87:82:06:d5:ae:c8:90:dc:c7:
74:e1:25:e2:5c:ba:25:72:6a:9e:1f:60:9d:b9:05:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:95:FF:DA:00:06:B1:A2:A8:AB:B7:FA:5E:D0:F9:C8:60:E6:EF
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8d:74:c5:7e:ab:d3:1e:2b:c2:c5:f0:78:30:61:1c:6b:c4:
c2:42:7a:1d:af:73:ab:dc:b2:bc:0e:d8:13:12:1e:91:87:95:
f0:2d:3d:9c:01:af:f7:39:39:64:f1:d1:0d:82:06:83:f4:01:
03:8d:d2:6a:1d:2e:1c:ba:2b:c7:c7:f0:5e:95:a9:f4:85:59:
2c:68:2f:b4:ac:76:85:20:54:c1:2c:d8:9b:0a:35:10:ed:6e:
74:2c:79:56:cf:19:e3:ec:2f:31:60:a1:6f:17:ac:8a:dd:e5:
c6:18:5e:8d:a2:3b:b6:9f:f6:9d:c6:81:dc:8a:1a:da:37:ac:
a8:bd:ab:e9:5c:e5:e9:04:cd:d4:8b:85:fb:5f:ec:3c:0e:35:
95:b6:ae:fd:a2:de:b3:e1:d7:e1:e1:4c:a7:6c:93:88:97:98:
e0:72:65:91:ce:10:1a:cb:1e:4f:88:30:5d:0e:21:cc:b9:df:
ca:30:11:8c:85:4c:96:8b:f4:68:9f:f1:7f:3d:f1:f8:20:b3:
00:df:fa:b2:0e:47:e6:54:24:64:e2:00:c2:6c:16:d4:73:d4:
f1:c3:cf:31:26:e4:5e:67:a7:f5:13:b6:cd:12:72:ec:48:b5:
d9:7a:11:8f:73:9a:d4:bf:ba:fa:d3:ae:85:84:2c:c4:69:fe:
4f:ed:d5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysff96JsASttys5PqD8vqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk
YjFmOWIwHhcNMjYwMzAyMDMwMTA0WhcNMjYwMzAzMDMwMTA0WjAzMTEwLwYDVQQD
EyhlYWQ2OTVmZmRhMDAwNmIxYTJhOGFiYjdmYTVlZDBmOWM4NjBlNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nUtYGLgUsABw0jqP5szEDWmWTHq
YMtCvMsI7rtnT8mWa0Z/QHUylH4W7t0Hc4tWyvsmKL2CZpzIdIYcizBk57k5VrB6
hDs8RRNjk9DjEdG1UYCslhXevM9N6ynATX0vxyoQcuPV6BNSFsnscPTojwB4cy+5
aOqk5eXIe6r33V+7TVoCN5DfKtVwLoCb4GhXL8fxVhLDjmcsQ3voq+YURH3Zha9A
n1wa5fk12U6MNtSZofeLICpzvJ1x29b9EOy8crvfFo0VFFKKpVRhwu9tV7wBCT8m
QdfUS5JiSwR58XkDgTCvZSeHggbVrsiQ3Md04SXiXLolcmqeH2CduQXl1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrWlf/aAAaxoqirt/pe0PnIYObvMB8GA1UdIwQY
MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt
YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1
LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn410xX6r
0x4rwsXweDBhHGvEwkJ6Ha9zq9yyvA7YExIekYeV8C09nAGv9zk5ZPHRDYIGg/QB
A43Sah0uHLorx8fwXpWp9IVZLGgvtKx2hSBUwSzYmwo1EO1udCx5Vs8Z4+wvMWCh
bxesit3lxhhejaI7tp/2ncaB3Ioa2jesqL2r6Vzl6QTN1IuF+1/sPA41lbau/aLe
s+HX4eFMp2yTiJeY4HJlkc4QGsseT4gwXQ4hzLnfyjARjIVMlov0aJ/xfz3x+CCz
AN/6sg5H5lQkZOIAwmwW1HPU8cPPMSbkXmen9RO2zRJy7Ei12XoRj3Oa1L+6+tOu
hYQsxGn+T+3VLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:03 2026 by rpki-client