Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
File: y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft (raw, json)
Hash identifier: hEiKu2bqTUB9cpMqhbudi268ztyIbd5+t3o/GNMzuy0=
Subject key identifier: F0:11:BB:4D:D9:28:05:30:7D:AE:77:86:32:87:EE:5D:A6:F8:C0:11
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 019CA9B3C063B03F68D6753BF56A87EF589E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
Manifest number: 13E4
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: g8srjClL_WgGHUbPNnBUFgTpuTk.roa (hash: gDJAvf7gVoC2n87omYhiXK7E56pj3nGGaW/bXZGo4II=)
2: y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl (hash: FBg67qXLEeCwI/qa/LS+8gl8ZAXJho3L2v2hJsV1UVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c0:63:b0:3f:68:d6:75:3b:f5:6a:87:ef:58:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=f011bb4dd92805307dae77863287ee5da6f8c011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:e3:f2:24:ad:7c:5f:bd:1e:e9:1d:cf:61:
13:39:a6:d0:98:38:93:d6:3d:bf:95:49:e1:e7:d4:
2e:fa:ee:e5:d3:91:2c:0d:30:1f:84:5e:ac:4c:ad:
ff:dc:95:5d:e7:65:45:2b:82:3a:85:09:22:ca:7d:
b0:2e:ad:3f:92:65:d3:87:0e:4a:38:7f:bc:21:1b:
bb:8e:ef:fa:a4:fe:a0:33:f7:46:ed:43:55:f8:86:
fa:87:56:c8:5c:ce:db:5c:96:02:2f:0b:b3:08:3a:
54:26:31:4f:81:09:8b:ff:ea:94:0b:cb:6c:25:34:
8e:86:b5:f3:95:dd:4f:be:56:4f:e5:ea:bb:81:5c:
5c:1c:4b:c7:1b:ad:1f:a5:02:9f:1a:68:be:f5:59:
94:44:04:2e:55:52:28:87:c1:fc:03:4a:74:9a:5b:
9c:04:90:ec:95:f6:58:01:88:7c:27:22:2d:b0:f2:
4c:56:ce:9c:aa:be:8e:da:d0:29:2d:5b:7c:d9:2d:
27:d8:08:e2:8f:04:b4:16:64:ec:11:0c:e7:8b:ed:
fc:15:ab:4c:62:3a:9c:2f:3b:dc:7a:bf:7c:a0:28:
79:31:05:bc:45:2a:bb:51:5e:cf:e2:8f:b1:fe:30:
ad:2e:f4:bf:2d:8e:25:1b:59:8b:62:57:2e:cb:b0:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:11:BB:4D:D9:28:05:30:7D:AE:77:86:32:87:EE:5D:A6:F8:C0:11
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:f1:08:4d:14:0a:ed:fd:54:6a:b8:ed:af:dd:3d:f3:7e:
c0:08:c8:f1:0d:b7:09:f4:13:97:40:18:d2:27:82:c8:1d:a4:
77:3c:3f:6a:28:2c:46:3a:c1:78:7a:b1:2e:ac:89:52:3c:5c:
7d:9f:88:38:42:25:c0:fa:65:37:0a:36:bf:0e:fd:b6:72:78:
00:05:64:95:64:15:3c:04:74:64:0c:cd:26:4d:97:e6:71:2b:
82:a5:0f:77:33:40:ce:49:e7:49:b5:26:92:fe:6d:18:c7:41:
9f:c7:28:bf:b6:f2:4d:c5:b0:c1:3f:43:4a:fb:ca:df:ed:28:
51:4f:67:36:6b:3a:f4:cc:6e:6f:17:64:24:dd:9e:34:33:7c:
99:b7:40:80:92:aa:21:5b:3a:c0:77:99:46:7f:67:cd:d9:d5:
6c:41:c2:19:cb:13:64:76:e5:98:3f:db:04:22:14:4a:02:60:
d6:88:c0:7e:9c:75:80:86:ca:a3:ff:7b:3e:ae:c6:4c:f9:9a:
df:04:28:fd:b2:1a:69:a8:f6:87:a9:82:7b:33:d0:99:d0:a9:
cd:ef:ea:dc:10:3b:e5:72:a1:9f:df:ec:95:6a:ca:58:7a:ce:
67:1b:d7:6e:c9:6b:44:50:f7:a8:57:18:d0:6d:9b:ec:e9:63:
52:a2:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:35 2026 by rpki-client