Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: ljMjkKeFx+4HY4Oqx+r8sZCDDCXzMK6oycclT8BEs0Q=
Subject key identifier: F0:5F:E4:EE:29:C6:F1:4E:8C:E3:6E:6D:E9:A4:CE:B2:88:73:CE:95
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 019CABD97895F807D887DE740A4221D850BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (hash: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: szpuQDmrEojYebEwxOM4kKyt/H35yGBGjARrY1qi1WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:78:95:f8:07:d8:87:de:74:0a:42:21:d8:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=f05fe4ee29c6f14e8ce36e6de9a4ceb28873ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:35:42:31:50:d2:3d:13:90:4c:1a:f4:3e:
39:d9:63:e5:18:9d:f9:5c:de:82:a0:c9:cc:53:b9:
0c:9d:53:31:e0:88:df:08:55:e2:fe:8c:d8:6a:1d:
e9:70:20:ab:7f:52:9c:cf:f8:b7:b9:c9:b6:c6:53:
e9:5a:ad:ab:db:a5:f7:f7:3c:36:87:3b:b5:5e:2f:
1d:1e:8c:70:2b:5a:a8:e6:e2:90:6d:ce:58:05:70:
ce:c4:ec:95:6c:d3:a5:ec:4f:84:cf:20:3d:e1:38:
2f:61:ec:81:bf:91:3f:8b:f2:d3:2d:56:43:8e:c1:
c2:12:41:e4:b8:eb:0d:52:25:8f:08:ad:09:a1:8e:
f6:86:18:8d:3d:1e:f9:b7:dc:ad:d9:9c:f3:81:9c:
0d:bd:14:5b:13:66:a6:5c:8c:13:f9:f3:5a:de:5e:
0f:68:2f:6c:e4:30:13:1f:22:91:0f:43:97:ea:61:
7e:5e:b0:cd:40:8d:33:15:a5:75:b8:26:cc:e8:4e:
57:1d:4a:19:0b:3c:28:98:c7:2d:7d:8f:e8:d3:93:
42:e4:74:4b:12:5f:82:d3:c7:4d:d3:22:f8:5b:11:
72:80:d7:4c:40:35:ae:95:e1:dc:ca:94:cf:44:f0:
b4:95:47:0d:a9:0f:d2:04:19:4c:ba:1b:c2:16:25:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:E4:EE:29:C6:F1:4E:8C:E3:6E:6D:E9:A4:CE:B2:88:73:CE:95
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:33:85:3e:f8:77:a1:39:60:27:5e:2d:c8:d5:6e:39:87:31:
59:68:95:9f:93:c6:3a:d1:72:ef:b5:eb:b2:ae:37:7a:e8:ff:
d5:49:35:a1:54:9a:8a:b1:7f:e8:3b:a4:29:8f:06:ee:ac:0d:
df:e0:00:89:87:7f:72:9f:27:7d:9b:c0:bf:25:e2:ac:f6:49:
a7:34:21:03:f1:0c:5e:2d:ec:4a:8a:eb:26:da:ff:aa:e1:57:
94:75:af:47:74:e0:c5:dc:d9:3b:be:f0:38:84:d6:cf:5f:2a:
eb:e1:bc:4c:c8:74:49:0e:91:53:a6:0b:d4:a4:02:19:7c:f8:
e9:55:9c:f7:07:87:8d:60:e9:81:fa:9b:73:79:9a:36:a2:78:
bf:67:76:9f:70:07:4e:3a:94:7b:54:51:eb:ec:c7:0b:b8:74:
e9:1b:e8:f9:a7:6d:5b:04:df:4f:86:82:85:04:e8:36:75:05:
d5:4c:af:a6:04:ae:f9:83:d8:fe:3f:ba:d9:21:54:cb:c8:4b:
f5:99:73:37:d2:13:c9:62:38:51:ab:32:8f:ef:7b:da:11:ac:
73:b3:7c:a3:00:64:ec:63:04:c6:cd:82:f9:b3:0a:0f:4b:30:
dd:4a:c1:a3:c5:b2:e8:b1:cf:f9:bb:46:4c:32:5f:2a:70:cd:
19:78:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:18 2026 by rpki-client