Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier: xUCUudXjjDPhyOIvvJFIyhPRQ7xbAG7HbnAp0XuUa4o=
Subject key identifier: 2A:28:B7:FA:AF:DD:EE:D5:A8:76:3A:3F:5F:70:EF:C2:35:1B:10:A2
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial: 019CAE6C850E909FAE02377C9B861B82875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number: 6E
Signing time: Mon 02 Mar 2026 12:01:13 +0000
Manifest this update: Mon 02 Mar 2026 12:01:13 +0000
Manifest next update: Tue 03 Mar 2026 12:01:13 +0000
Files and hashes: 1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: 7K/FFh6mZ0hApy/4a4SFrPdIq8w0TpmdN1BMDWoTXl4=)
3: v5l5rLmhty_z4zNPYoM2CqX13sQ.roa (hash: iWmastkcHsmmH7pnaTSnEYzWRuOsX68BKyoXtSdp4wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:85:0e:90:9f:ae:02:37:7c:9b:86:1b:82:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Validity
Not Before: Mar 2 12:01:13 2026 GMT
Not After : Mar 3 12:01:13 2026 GMT
Subject: CN=2a28b7faafddeed5a8763a3f5f70efc2351b10a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:9f:5c:ad:67:a3:0c:34:9e:b5:84:b5:fc:
08:e5:a5:c0:ac:bb:40:62:24:ab:b1:96:96:9d:2b:
92:58:ad:b7:dc:07:51:2a:97:96:6c:01:cc:a1:05:
41:b5:67:6f:e8:54:fc:bf:fb:e9:a2:bb:f0:5a:cd:
cc:d2:b5:8b:a5:01:e4:5a:89:62:3e:a8:a1:49:c3:
a3:27:0c:42:25:6b:03:dc:2e:ec:ad:29:a9:54:74:
dd:e4:5f:71:b3:0d:be:9f:b4:f2:3a:d5:16:4d:28:
4f:5e:4b:59:66:10:b6:71:9e:c1:32:38:3f:97:f5:
b3:03:e2:3f:68:5f:74:f6:e2:2a:74:b8:3b:90:fb:
b4:62:bc:a6:01:c6:fc:1e:4e:90:0b:76:5d:ae:ac:
ff:bb:ed:16:a5:37:aa:7c:f1:be:87:40:07:fa:5d:
1b:da:5f:bd:be:90:0d:41:73:86:cc:d9:d2:68:d6:
1c:f6:a5:e6:c6:06:97:d8:64:46:43:28:51:cf:7c:
5f:a8:8c:95:aa:a1:f9:e9:f5:49:b0:d1:85:a9:7b:
9e:e9:ef:7a:29:36:46:08:3b:a4:a9:b3:f1:67:83:
15:ae:96:ab:ab:47:d7:5e:ee:f3:f0:ec:ab:00:34:
0d:be:01:2a:9a:9a:db:6f:dc:21:87:40:a9:cc:57:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:B7:FA:AF:DD:EE:D5:A8:76:3A:3F:5F:70:EF:C2:35:1B:10:A2
X509v3 Authority Key Identifier:
keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:8e:f5:22:3a:28:eb:49:93:24:c4:2b:86:63:4c:14:94:
e5:44:0f:87:a5:11:a2:44:11:e7:d2:ac:de:7e:c4:79:1c:e8:
3b:5a:8a:73:5b:6e:bb:ea:99:4b:a6:a6:da:7d:4e:87:0e:34:
e4:57:cd:54:24:4c:1e:39:3d:33:3e:2d:2d:cb:51:40:67:ba:
21:36:4c:49:11:dc:ec:33:1c:51:1d:c7:7c:d9:bf:f6:ec:aa:
58:72:cb:e6:41:4e:cd:21:b5:b4:41:72:57:36:71:03:31:3b:
e5:a6:8b:fe:50:7c:54:8f:59:02:b3:31:55:d5:f9:83:1a:47:
c8:77:5a:8e:90:b2:d1:7b:00:e1:58:98:a4:72:a4:a9:03:bf:
a0:2e:86:25:04:e1:c2:b5:9f:b4:89:57:bd:2a:93:eb:be:50:
ca:46:ee:5c:e2:26:03:26:bd:78:30:a4:0e:2a:ea:1b:fe:11:
13:48:dd:4e:c2:39:db:bd:24:0d:05:91:b8:fd:38:e9:ad:d5:
21:99:2c:00:7d:06:02:cd:02:46:27:c4:85:3b:2e:bf:b6:f9:
6f:3d:1f:a9:44:7f:04:74:90:1e:fd:79:70:b4:4d:dc:88:58:
1d:f9:a1:28:a0:81:e2:81:6c:33:fc:33:36:9a:38:bc:de:84:
90:ee:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:16:07 2026 by rpki-client