Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: uJ1BeIOOyL2zW9AtSCuDsS/JniP/Z3vtR/wReLOTg5A=
Subject key identifier: 9A:FB:3F:65:A2:9E:19:D0:28:DD:08:0E:B6:5A:5E:18:71:B5:BE:E5
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019CAAFD837EDAD2999F8708B7670F3D813E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: Pf7AhUnXaKprsBS53Iasbf8vKSQ.roa (hash: EmnGUbW7DpEjL4TQ6sjZbo/JVLkBohhhsfWVRp/Hkx0=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: Tzvpii2MKWhM7C0Bqyb0V7aj8w+q9lnizV4pTs/Q/hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:83:7e:da:d2:99:9f:87:08:b7:67:0f:3d:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=9afb3f65a29e19d028dd080eb65a5e1871b5bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:ad:02:f5:57:c2:ae:75:c9:3f:d0:74:5a:
e6:4c:5a:1e:a1:3d:ce:86:3c:78:71:ab:9b:07:b5:
27:40:ba:10:11:2e:8d:cc:28:4a:27:9a:84:d4:d7:
da:4d:bc:b7:27:c6:de:77:81:8b:9e:23:d1:b0:e8:
71:42:17:e4:22:ee:8c:bb:69:95:2a:36:4c:3b:f6:
99:76:70:16:28:5b:63:6c:97:7e:7b:d6:0a:77:f1:
67:60:de:28:fb:98:fc:2b:96:ed:26:29:c4:24:47:
f6:60:b0:d3:34:73:15:c1:9b:3a:7d:7c:5f:83:1b:
f7:2e:cc:83:5b:92:d7:f0:d8:9a:e1:45:ff:bc:7e:
fa:71:0a:33:0f:54:ac:db:1e:f5:48:24:da:88:5b:
2a:f7:96:c8:44:fc:3c:6a:f1:31:0a:b8:47:5c:a4:
ca:b9:9c:99:f6:fd:bc:38:c8:c6:e6:52:c3:ea:45:
38:6a:29:0e:90:a1:11:b5:af:3b:f9:df:1e:db:75:
e2:6c:20:a9:09:08:ce:54:d4:b8:fa:19:a9:8c:ca:
6c:1e:e6:c0:56:c5:3b:ed:7b:fc:d5:98:b7:17:b3:
36:11:ce:aa:60:32:45:b2:5d:96:f7:6a:9d:c8:7d:
c4:e0:84:c9:56:59:9e:71:db:72:a0:91:63:bc:09:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:3F:65:A2:9E:19:D0:28:DD:08:0E:B6:5A:5E:18:71:B5:BE:E5
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:7d:76:50:08:a2:a6:22:a8:8d:3c:a2:82:ac:2a:ba:b4:
72:b6:6e:09:75:87:ae:d3:21:61:4a:48:32:12:5c:b3:7f:87:
7f:82:1a:12:c1:54:55:a3:51:86:87:96:31:63:58:d2:c0:c0:
79:76:45:76:c7:db:bc:6c:c0:a0:e1:0b:95:5c:cb:b4:63:1b:
d0:cb:e3:3f:c6:54:0d:7c:e4:fc:5d:29:8e:b6:ab:22:83:0d:
a4:73:91:a9:50:3a:ca:99:29:f1:6a:9c:90:d8:c2:c1:91:e7:
8a:1b:d9:3a:1a:b6:10:d6:62:5e:e3:2a:28:f7:54:63:3b:42:
28:d3:98:66:27:fd:fd:ac:14:9f:eb:a0:18:d8:43:6e:4c:66:
1c:f4:8b:31:31:5a:57:05:3c:8a:05:c6:7d:6b:09:a6:22:0e:
9b:1d:eb:e1:08:d1:ac:fa:7f:fe:51:65:93:46:8b:fa:7d:d5:
de:80:98:a8:54:0f:2a:ae:21:99:23:de:58:fd:a4:50:ea:f4:
12:4e:bf:06:ad:c6:72:2e:79:6c:74:7c:62:92:a3:56:9a:52:
a0:64:78:d1:fb:e9:e2:23:d6:a7:6d:c0:ea:5a:f5:7e:ab:b8:
c7:b8:76:78:35:4f:28:2d:e2:0e:1b:46:97:66:3a:60:2b:55:
00:de:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:13 2026 by rpki-client