Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
File: y1bGreHiphfnx3VXuV8GlU2TkLo.mft (raw, json)
Hash identifier: SP6dAXfEdG9N7IeHV/NsIC8/ewJdVmTDqpMBrjL+xrg=
Subject key identifier: AE:3D:A3:06:D0:6D:60:6F:FC:84:E7:49:46:2B:5B:7D:3F:C3:FE:55
Authority key identifier: CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
Certificate issuer: /CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Certificate serial: 019CAFB6106A70F9A8F4CB58061D7C015FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
Manifest number: 55
Signing time: Mon 02 Mar 2026 18:01:10 +0000
Manifest this update: Mon 02 Mar 2026 18:01:10 +0000
Manifest next update: Tue 03 Mar 2026 18:01:10 +0000
Files and hashes: 1: 3P0VzD1dKCF2UiQ8qkWCmQrm2Gw.roa (hash: gjopDXHjONuosWi6hy78AAJGtkv7Tbfx273i024Q360=)
2: y1bGreHiphfnx3VXuV8GlU2TkLo.crl (hash: 8TY8Tegh+3Ec/Vx8OXA45h1/89Mz1YLG2PFFu217AjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:10:6a:70:f9:a8:f4:cb:58:06:1d:7c:01:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Validity
Not Before: Mar 2 18:01:10 2026 GMT
Not After : Mar 3 18:01:10 2026 GMT
Subject: CN=ae3da306d06d606ffc84e749462b5b7d3fc3fe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:c0:4d:ca:9c:f2:dc:89:99:74:76:e3:ec:
83:27:f5:7e:40:f0:c6:be:4d:e9:00:7a:bd:ed:c2:
56:05:48:7d:2e:a8:04:45:62:94:25:86:05:b2:78:
fe:ab:9e:e5:8e:6b:6e:9b:e1:56:d4:f7:77:11:ea:
6a:ef:8d:70:13:cd:92:8a:1e:48:65:9a:bf:a5:28:
cd:b8:0c:fa:79:70:ee:87:4c:e1:cf:c6:9a:d8:46:
5f:2b:b4:f6:d4:4c:c5:07:0e:50:f2:52:0e:13:e7:
d7:a0:b5:16:37:36:be:63:8a:d6:28:4e:5c:ef:63:
a6:59:8b:db:ce:fe:a0:78:6e:1b:5f:54:a5:8e:5e:
dc:a7:b8:3a:88:98:27:74:61:56:a1:14:7d:d9:75:
65:2a:fa:67:87:11:fa:1e:f7:6b:1d:b2:e2:46:c6:
ae:3b:43:c4:ca:84:dd:b2:1a:48:07:c3:23:55:1c:
b9:3c:32:d8:ed:98:a6:d8:bb:cf:8d:02:24:83:75:
9c:50:bb:9c:30:bb:78:c3:54:88:ae:9d:3f:3f:66:
99:99:77:b1:be:de:24:ae:80:69:1b:5b:cb:1f:8b:
3c:b2:d6:44:f0:52:de:7d:e7:94:f7:6f:e9:70:85:
35:db:63:0e:b1:5d:e3:3d:0e:0f:fe:7b:a2:98:ea:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:A3:06:D0:6D:60:6F:FC:84:E7:49:46:2B:5B:7D:3F:C3:FE:55
X509v3 Authority Key Identifier:
keyid:CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:33:60:2e:c9:63:2b:69:b1:dd:19:c7:56:b9:d2:35:e1:
5f:6c:05:12:9b:19:bc:e6:00:3a:88:26:2d:96:bf:fa:6c:e1:
d4:10:a0:db:4b:67:4d:fb:7e:32:46:3a:ef:01:f2:77:ee:00:
09:66:94:25:6c:8b:98:e4:fb:59:1f:5d:c3:13:27:a6:6c:7b:
cc:66:92:aa:5a:d4:90:bd:cb:ea:c0:4d:5a:31:34:49:e4:4c:
35:f4:df:c3:39:5e:e8:8c:23:1b:02:2f:d3:2d:c7:67:0e:e8:
84:75:a0:5c:98:8c:67:98:96:b2:3b:a1:7a:7e:94:c8:3a:36:
2b:1a:15:f2:fa:b5:9e:56:50:61:a6:9c:a5:e6:21:28:3e:a1:
5e:d4:82:68:d1:0f:01:51:3f:81:aa:cf:2c:2b:06:c1:43:bd:
7f:b0:d6:ee:0d:9d:9c:b5:c5:44:4c:31:cc:62:de:68:dd:6a:
01:8f:70:5b:3d:bd:1c:1e:62:1d:84:bb:00:56:e1:00:2a:e4:
84:df:b6:a3:02:47:ef:a8:0a:b3:9b:08:54:0c:2c:c5:5b:7c:
5c:03:4f:d7:9a:1e:dc:9c:85:05:f8:0e:f4:e6:c1:19:88:df:
99:58:6a:77:9c:35:5d:48:b7:60:e0:a0:cc:0f:89:da:aa:9d:
a2:b2:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:23:14 2026 by rpki-client