Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: 1hcHADfhY6WsW8sYOIR5+TpJIXS6u8AsZlKMjILPnVM=
Subject key identifier: 8A:A1:3E:68:4F:43:6E:42:4C:C8:D5:58:86:1B:D6:04:31:71:22:5F
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 019CAAC6051DACF90BCB5032BFC295BE3DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 0953
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: 5cWjha-GN6V_9NCDJSfw9KGOEhk.roa (hash: H2Otkpibc9NdK0JV6LzlQxY+/YrLYIKAppuBF7pGTck=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: kTzEDAsEwyWpcDhPTb9GL+wEu7ChMrylLTRy7RyogyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:05:1d:ac:f9:0b:cb:50:32:bf:c2:95:be:3d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=8aa13e684f436e424cc8d558861bd6043171225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:33:d4:9d:b1:38:e3:a9:a6:21:8e:42:86:
77:f6:6a:cc:13:a4:36:5f:fd:35:56:d7:0c:95:cc:
24:ec:f2:33:9d:ba:af:10:18:39:7f:8c:7b:8d:48:
76:7d:a5:be:5d:91:ac:2e:57:9c:0a:1c:27:92:3d:
4e:07:e8:86:08:57:9a:23:73:d5:e1:60:7a:56:3b:
c5:dd:7e:02:8b:bb:7d:2f:e4:72:aa:91:9f:d7:0c:
a3:44:90:df:46:37:12:ef:65:ac:5f:a6:97:1b:d8:
89:2d:fe:11:ca:18:a9:5c:7a:24:3a:db:d0:63:53:
19:e5:76:ef:f1:99:52:f5:af:e2:fa:1c:7f:7b:63:
a7:78:d1:25:2c:e5:e0:f6:13:20:60:5e:b1:a1:b4:
e3:06:a3:12:a6:d3:08:6b:c4:d7:3c:00:25:06:6e:
32:80:ae:22:39:60:4d:84:3f:d0:ed:8b:3f:c0:d6:
05:54:97:4d:27:d6:69:e0:02:a1:d4:bb:52:c2:05:
b3:22:aa:fa:c9:3e:69:71:b3:cc:d9:a2:49:f5:09:
d1:c1:25:b0:d9:3d:5d:95:40:61:6d:41:74:dc:04:
10:f3:88:78:dd:70:72:09:6b:a1:c5:de:d9:4d:a1:
05:ad:2b:fe:72:b3:1b:f0:69:26:24:ed:0d:61:26:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A1:3E:68:4F:43:6E:42:4C:C8:D5:58:86:1B:D6:04:31:71:22:5F
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:24:4d:9a:13:20:3a:42:4d:c4:d1:1a:2b:09:b8:63:49:
af:67:97:b9:a1:42:19:16:53:32:a5:16:e7:58:f2:7d:9a:43:
a8:88:4f:bf:a3:37:39:ad:7d:42:03:3f:bf:ef:59:d7:af:7e:
22:de:57:19:73:85:4f:83:48:cd:90:e1:19:c8:65:a7:94:9e:
d2:b7:ba:d3:9e:de:6c:4e:f6:74:d1:a3:8e:79:77:b9:82:81:
c1:30:27:3f:6c:25:42:69:88:bb:0c:40:30:0f:a6:69:d4:e8:
c5:68:26:7d:5c:bb:36:63:48:c5:97:53:44:11:30:a9:87:b3:
86:5c:f1:69:33:aa:df:6a:4a:a2:cb:20:cf:fd:9b:66:49:6f:
48:98:06:a1:3d:b7:19:c0:cf:38:11:d6:cc:ea:9f:5f:28:f2:
64:41:db:76:a6:d7:ee:bf:fc:f9:29:36:b3:63:63:45:24:f2:
42:13:ba:af:55:fd:ea:b9:e5:4d:36:dd:be:e9:b2:4e:92:b5:
69:1d:e9:8b:53:0d:6b:07:3b:49:bb:de:a6:c6:5a:3f:e6:e4:
86:68:ad:62:19:df:d3:47:e3:93:9b:99:42:7f:22:81:ed:e3:
4c:c3:d8:17:ba:3d:bc:d3:f1:b2:f2:24:3e:a3:db:c2:d3:7d:
19:53:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:22 2026 by rpki-client