Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: eA9x85zCOpEJhDnjz58K6ed5VKA9GII99tIuHNwte1U=
Subject key identifier: 01:9E:7D:A1:85:CE:F9:DB:F0:D0:F4:E9:A8:D0:F0:E0:ED:38:08:DC
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019CAA8F720CFCD2D7CD2D013487F0858CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0ECA
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: EezivFWywtbke89v989xRJOZtt4wX2sZWvf6f6QaYYo=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:72:0c:fc:d2:d7:cd:2d:01:34:87:f0:85:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=019e7da185cef9dbf0d0f4e9a8d0f0e0ed3808dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:27:96:e5:28:2e:a5:a6:63:59:3b:9f:d3:
ec:be:db:e7:15:c3:97:f8:b5:ed:96:6b:f7:a5:21:
a7:49:76:09:38:15:6f:bf:aa:9e:f0:5e:d5:e7:ba:
49:25:56:3f:bb:eb:aa:3e:83:32:29:50:38:62:c6:
df:ff:36:44:62:19:9d:dd:8e:73:40:8d:66:93:5c:
15:31:e8:3c:94:05:be:8b:56:75:e4:5b:41:e9:50:
db:f1:cc:1f:37:8c:a4:fd:0a:ef:aa:45:30:c3:fd:
0e:81:d0:de:fa:17:dc:a4:bd:67:45:8c:23:6d:0c:
74:1f:25:59:b2:b2:7c:6b:92:14:e0:54:a7:eb:d3:
0c:f3:ab:53:fc:39:c1:28:23:ab:45:db:9e:35:f6:
50:26:1d:e8:5e:12:55:a9:2a:06:70:da:1d:48:ff:
b1:df:c8:eb:b7:96:03:80:eb:c2:ad:07:34:a5:a3:
e5:aa:ca:89:c3:a9:21:75:c8:3f:eb:54:dc:23:f0:
d7:b0:cc:4e:1a:a5:fb:bd:10:be:fb:d1:0f:8b:03:
5a:1e:57:57:70:8e:5b:b8:13:34:91:d2:9b:db:42:
53:4c:24:46:fc:10:a6:7c:6d:cc:0a:72:fd:70:b4:
84:6a:4e:81:9c:1c:8b:d1:42:d0:af:bf:07:40:9f:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:7D:A1:85:CE:F9:DB:F0:D0:F4:E9:A8:D0:F0:E0:ED:38:08:DC
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0d:92:65:85:6a:98:01:84:83:ba:7d:15:60:4e:d8:a4:b6:
a3:47:1e:b9:ac:04:6a:79:26:2f:1f:5e:9e:1f:b5:70:f5:d4:
b4:90:86:21:c5:d8:56:fe:62:54:f3:91:f4:0b:14:a3:33:68:
23:4a:7b:1f:42:fc:d9:9c:d9:b1:50:c9:62:d7:35:13:cd:0b:
50:db:0f:41:31:09:25:62:1a:67:9c:03:0b:5a:9d:2a:10:23:
83:d4:b5:49:6b:78:63:8a:7e:ed:28:bf:e7:ed:f3:2b:84:aa:
a7:08:30:9f:cf:00:c2:83:4a:95:6c:d4:02:ad:a7:b6:2b:1d:
94:ed:b8:01:96:be:d5:76:f6:79:a2:dc:34:9d:43:db:09:dc:
e9:e3:a9:a1:bf:c3:4a:51:10:ac:a6:1c:cb:66:68:ad:1b:42:
44:d9:34:84:73:fa:3c:95:f7:82:d9:2d:00:84:be:90:3f:2c:
19:66:69:fd:a4:86:85:32:86:d4:27:03:02:be:da:85:7f:f8:
37:e8:06:52:18:b4:8a:ac:ca:ba:09:fa:66:94:40:45:2a:ae:
ca:23:10:d2:1b:2e:4c:fd:b0:ff:88:02:c0:cc:6e:a1:47:5f:
54:4d:ec:1f:0c:63:e8:5b:0c:0c:e6:ea:28:27:83:8a:6b:f9:
38:77:1e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:33 2026 by rpki-client