Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: k4mnAJzYhpkmrfWbUqAdWAzWHm0sNf2ulxrjRsZ4qAI=
Subject key identifier: CF:BD:72:91:53:39:1F:19:83:44:E7:2A:00:93:E0:B7:11:46:B5:BC
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019CAC104F589454C8FDBB631946D4E1D91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 12AC
Signing time: Mon 02 Mar 2026 01:01:15 +0000
Manifest this update: Mon 02 Mar 2026 01:01:15 +0000
Manifest next update: Tue 03 Mar 2026 01:01:15 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: Yzp+kekqoThz1IQWEw3WhMe0UVJ5j+8eXQCqObSs+8w=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4f:58:94:54:c8:fd:bb:63:19:46:d4:e1:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Mar 2 01:01:15 2026 GMT
Not After : Mar 3 01:01:15 2026 GMT
Subject: CN=cfbd729153391f198344e72a0093e0b71146b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:93:9f:1f:f1:a7:fa:3b:05:e2:31:18:ea:
91:0d:b0:06:6a:13:27:3c:75:5a:9d:ca:15:7d:38:
e4:5f:77:3c:14:34:41:dd:bc:94:09:b0:87:9e:d3:
e6:9b:02:2e:d4:f3:74:69:09:01:18:cd:89:4d:d1:
d8:b6:e1:10:a1:38:a8:2c:17:05:8d:de:34:e0:41:
f9:05:c7:75:db:61:0d:ca:c1:52:10:3c:3a:b7:05:
bb:2a:4e:69:3e:ee:80:05:99:07:f6:7e:dc:be:c1:
02:83:95:17:0e:0a:ef:f8:5e:06:05:52:ff:7b:89:
1d:c2:5c:ee:89:86:37:e6:c9:75:68:6a:b5:d4:79:
62:7c:04:e0:8a:ed:6a:d3:4d:bd:4b:46:75:7a:6e:
07:61:6b:01:b2:f8:68:74:64:51:8e:6a:fc:d1:4f:
23:67:79:78:20:66:fc:46:bc:b7:ef:cd:c4:33:cf:
8c:5c:10:27:a7:89:24:7c:cc:cb:fe:ba:f9:9f:a3:
48:d4:2d:05:73:4e:ab:cc:fb:66:5d:19:10:83:59:
0e:7a:b7:70:dd:a0:46:49:f6:23:83:8a:fb:ed:fe:
2f:84:df:ec:94:66:f1:b2:11:71:bb:2c:dc:84:02:
2f:e2:41:3f:67:56:df:a0:59:0a:7c:bb:ce:01:c1:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:72:91:53:39:1F:19:83:44:E7:2A:00:93:E0:B7:11:46:B5:BC
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:45:50:c6:2c:ec:10:af:ee:19:00:b1:02:01:24:3b:13:6b:
0b:62:50:3f:55:18:a4:da:86:cd:36:90:b5:dc:e3:00:77:3f:
75:f7:ce:1a:f6:e8:8b:57:7d:0f:e8:fa:71:f4:79:9b:88:48:
96:9d:d8:5f:7f:02:fa:90:0f:2e:5f:eb:c8:7b:1b:2a:1a:b7:
75:63:0e:93:23:ca:bf:ab:a9:ee:20:cb:21:2b:bb:03:ee:36:
8b:d3:92:b1:ee:ef:70:8d:3e:f2:d6:25:d4:31:57:42:20:93:
d6:da:14:fe:43:df:d3:c0:f7:99:b9:b3:49:3f:e8:60:71:8c:
98:aa:22:eb:9c:4d:f7:e2:82:6e:93:75:0b:b4:04:be:99:32:
11:07:06:09:84:0b:91:29:ce:6e:d4:3c:a1:bc:ce:c5:c1:92:
24:1f:6f:a8:a4:c9:39:35:28:3a:a7:a5:b4:9b:fd:30:38:3c:
6c:4f:ce:a1:5e:90:5e:9b:93:85:12:ed:b5:bf:4c:e9:cc:d5:
0b:cd:df:45:c4:df:bb:f1:5b:c1:9e:31:6f:33:e1:ca:bd:d6:
aa:3e:c8:e1:4e:4f:af:9b:44:ae:34:f0:01:ac:a0:ab:2e:b0:
ce:84:01:4d:f7:d2:5f:77:44:ed:ba:cd:d3:ba:21:30:f8:62:
25:66:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:48 2026 by rpki-client