Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: lq1X4kkMCZLSpAG+BMNS+Y3MYghy3pCjrTea9qjBJAQ=
Subject key identifier: 85:AC:94:75:38:3C:A0:3A:91:26:15:F4:7F:F9:EA:25:11:A3:D1:0D
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019CABA1CAA25C96DBA7699DAF31338B74BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 11CB
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: 0WpQwif52SVXyoGpw61Ctx6jLur42rfri0s25lkDpFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ca:a2:5c:96:db:a7:69:9d:af:31:33:8b:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=85ac9475383ca03a912615f47ff9ea2511a3d10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:54:ce:cb:98:60:91:e9:bb:5f:5a:2e:0a:
56:d7:b5:cd:73:49:1f:9c:14:81:c7:f2:84:0d:78:
1d:e8:8e:5e:46:10:65:a5:9d:09:f2:a3:df:10:ed:
8e:44:af:58:fa:16:6d:c3:6f:28:6d:c2:0e:eb:3b:
32:05:f9:da:8d:f2:2d:e3:cd:42:0f:fa:43:dd:ac:
67:50:e5:dc:65:8b:51:de:d0:2c:f9:c6:fe:83:fa:
e3:80:21:50:95:45:aa:ad:dc:9e:94:89:1e:c4:72:
8d:92:0d:e3:e0:6a:88:b3:59:75:9b:ed:90:5f:de:
47:bc:47:c3:d4:62:85:19:00:cb:17:27:e2:e2:cc:
f5:95:23:5b:66:31:8d:ad:10:c0:7a:26:dc:71:9e:
30:12:37:81:1d:6d:56:0e:a6:c2:f3:59:c9:38:83:
e3:0b:83:06:3c:2f:20:54:a7:47:98:f5:e5:75:09:
42:df:d1:3d:f5:22:b9:a3:33:34:0a:9f:d8:53:b9:
c5:4e:84:1b:02:22:b6:d6:d9:f9:d6:4c:d6:67:0c:
6c:d4:31:61:cd:3a:72:09:18:93:37:08:1e:73:8f:
a1:38:76:bc:5a:a5:93:d8:af:12:8b:97:50:9f:9f:
d0:c6:90:df:fc:cb:d7:d5:69:47:da:00:60:8b:23:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:94:75:38:3C:A0:3A:91:26:15:F4:7F:F9:EA:25:11:A3:D1:0D
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:68:35:a0:9b:85:5f:a4:b5:99:c8:1a:d2:86:33:f0:68:5b:
f1:e6:6a:24:a7:cd:49:f9:d8:d0:06:04:6e:5a:51:57:e7:26:
8f:f1:6e:f4:1c:3d:64:0d:cf:68:d2:cc:ce:99:cf:41:28:47:
46:73:26:59:a9:52:68:ff:2c:3e:e0:95:7d:c5:37:a0:6e:04:
b3:d4:97:da:ea:4d:8a:0e:be:b2:bc:2d:a6:2f:d4:59:14:e0:
0f:67:5f:8d:89:04:78:02:70:c7:a2:30:b4:5c:6a:c3:a0:4c:
14:52:01:a5:40:2f:7c:5e:7b:8f:72:04:eb:d5:dd:00:bc:18:
c9:2f:53:50:a2:13:f3:6e:ec:31:05:50:58:5d:4c:bb:d3:57:
f4:e0:84:9c:ec:17:46:48:60:5f:c0:60:17:a6:ca:89:51:e9:
6c:b7:d1:d5:31:e3:c1:7a:5f:bc:d8:8e:af:a5:fd:84:3b:19:
f7:37:2c:11:54:73:cc:c6:e0:7c:9d:a8:36:88:45:b2:ef:0e:
46:da:7a:e8:21:d8:38:11:c1:bf:48:f3:b4:e3:c1:6c:b2:66:
df:95:8e:86:86:b0:5d:fa:c3:d2:12:b8:11:69:fc:81:b0:ef:
e3:aa:a7:24:16:00:f9:e4:e6:f6:dc:35:9e:32:f9:6c:28:9f:
df:fd:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:07 2026 by rpki-client