Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: cnNyOHTkwYTwulPn/0Nmb8SUlKhaK/SSkNKwfmf7RtE=
Subject key identifier: 44:E1:01:0D:25:CF:DB:C5:4E:3E:DE:47:B1:92:7E:42:3C:5A:8D:83
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019CACEBB562EC6EDB77B5D93EB0DDB820B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: 05Rdwr--1tnXZPfu13z1-r9tQTo.roa (hash: wM0ntv3W1SWKI6P8cH7TnrdrNZlJdigMYw8TmLb1CoU=)
2: aE8_gVmck-wD_VyyQXZL4UyhlMU.roa (hash: GaAIUgFsYTQaT7thc7zx4Q22k1Bx49GbLq0/1lvEmRM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: h1GiiJqO/9JJv3DiH+nxX+YV4RV08k90eK7LfsLc4Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b5:62:ec:6e:db:77:b5:d9:3e:b0:dd:b8:20:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=44e1010d25cfdbc54e3ede47b1927e423c5a8d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:20:c5:88:c3:0b:be:56:ea:63:03:f5:5a:
0d:42:ae:6a:29:2a:de:57:ec:6c:08:5b:8c:34:e8:
6a:df:e5:e1:bb:ec:f0:59:35:a1:b2:c4:db:15:bb:
53:5a:f8:ca:07:e7:5e:29:2d:41:b7:94:6c:44:de:
47:bb:62:88:51:06:3f:b9:b7:ff:9f:2f:94:34:b3:
aa:bf:f2:95:02:1e:53:19:84:9c:2f:ec:86:4f:5f:
3a:f6:a7:9c:2b:2d:52:8e:59:98:fc:5d:de:f3:d0:
50:37:d2:b3:fe:74:99:ad:62:58:4f:12:ff:cc:07:
94:54:5c:53:e3:7e:22:b9:b3:8c:81:7f:b6:96:8b:
c1:6e:e6:0d:b5:10:87:17:e1:30:9b:4e:82:17:44:
2c:b9:ad:dd:3a:d8:0b:3e:b4:20:38:74:57:56:aa:
4c:17:e1:e9:35:da:c6:bb:ae:c0:3d:75:d8:ca:b3:
68:fc:88:5f:66:59:bc:75:8f:9c:37:56:1b:13:be:
70:c7:c6:67:78:13:cf:e7:c4:08:e3:cd:3e:b3:35:
13:30:70:54:a5:28:39:c0:7c:50:8c:e9:e1:cb:45:
f2:01:b4:d1:fb:da:45:10:62:3d:df:8a:06:5e:49:
98:2c:32:28:1d:ed:53:c3:4e:7e:d2:f0:b3:51:7f:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:01:0D:25:CF:DB:C5:4E:3E:DE:47:B1:92:7E:42:3C:5A:8D:83
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:1f:3c:7e:7b:9d:a6:e5:0d:e6:e6:6b:e6:ca:e7:d1:19:
21:44:6e:6f:cc:c0:38:f7:f8:20:8e:da:fa:2a:dd:57:fc:d9:
8e:72:e1:2c:e9:ac:26:9b:ee:40:1e:75:21:a0:05:cb:f9:86:
f4:79:02:23:cd:5e:b2:1d:95:b3:5f:58:61:e6:fd:1f:0b:17:
51:74:24:c7:96:60:e1:4f:eb:22:2e:94:57:bb:82:9c:16:21:
88:a0:67:fe:7c:c7:a7:52:a4:85:a6:25:d0:58:bc:dc:fa:a7:
02:33:77:dc:08:9b:4a:e6:f2:8f:5d:89:41:c5:01:e3:ba:4e:
cd:2a:aa:02:e3:a5:ae:09:c0:df:28:1a:29:6e:b5:09:a1:85:
d9:dd:dd:80:93:70:90:15:0a:e2:74:e6:7b:e8:8b:d3:7d:de:
c8:5c:44:aa:67:ab:a1:3e:a8:70:cb:fe:2a:07:6c:c5:30:78:
4d:e7:fe:33:59:ef:e2:a6:70:55:fb:05:37:e4:c4:29:24:eb:
21:c8:62:1e:22:a1:f1:5d:72:56:a4:25:b4:67:dd:74:a4:cf:
d9:e2:65:ce:51:31:99:94:40:1e:d6:53:ba:2b:ad:05:57:52:
c2:5b:15:6b:3f:58:2e:4e:ca:ee:6f:b9:75:33:8e:b1:e1:36:
b6:b8:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:15 2026 by rpki-client