Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: gZK78qSC6pbiKkLM+Vl0JIyO41X3HDbJIg7WoJdc5BM=
Subject key identifier: A0:5F:23:5A:87:9A:EB:6F:2D:FF:10:09:98:80:CF:DB:0B:74:F2:54
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 019CAB6BE1D6CD368D111285D6365EFD2911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 044A
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: s7yoUaWs_cdTcfxb23hHNbYxU34.roa (hash: HOPZhoocxgo394BFWR+fVdoYGl8HfSPhqPdNa7STymE=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: JdbBWwdGShJl6YXqcfuA+hJQUMRrHamkuLTMjXw3zmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e1:d6:cd:36:8d:11:12:85:d6:36:5e:fd:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=a05f235a879aeb6f2dff10099880cfdb0b74f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a9:ee:68:a3:6e:26:20:5f:86:20:a9:89:9f:
15:a9:f4:50:0c:b9:4c:01:31:01:10:45:bb:af:6c:
7f:d0:48:17:6f:57:18:74:fd:ea:ea:7f:05:0b:74:
b4:23:38:f3:58:05:f4:99:1f:7c:67:46:ba:07:a0:
e7:0f:83:27:14:05:f4:5d:3d:4a:f2:f2:30:52:ca:
31:4f:e4:6b:54:f5:41:b1:b5:7f:fd:be:03:ad:21:
c4:ca:e9:b1:4b:dd:19:9a:17:62:59:73:a2:86:f6:
33:8b:e3:3e:6f:21:2a:ee:21:ce:6f:9c:ad:16:a0:
e0:5d:d8:76:40:3a:bf:a9:e1:a2:58:31:16:38:28:
d5:2e:86:02:56:52:5c:d1:c9:51:6d:6e:a2:fd:db:
85:a6:4f:2f:13:e1:62:e9:90:56:ee:92:be:43:d8:
4c:47:00:81:c6:2e:02:55:e4:7e:0d:b2:75:ab:b4:
3b:6e:92:3f:1b:28:61:44:96:5c:93:49:50:87:ff:
30:27:6a:f9:f0:0f:08:12:82:8d:fe:c1:f4:bd:77:
a8:c7:57:c8:8e:b6:36:8d:ab:52:0d:11:b7:b5:d2:
9e:20:20:36:b4:f4:5f:cc:4d:27:37:2b:e2:46:3d:
65:b6:0a:10:5f:08:0e:f1:0b:b7:1a:1f:52:a3:fb:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:23:5A:87:9A:EB:6F:2D:FF:10:09:98:80:CF:DB:0B:74:F2:54
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:3a:45:56:ce:f9:5a:e4:ca:de:0c:2a:45:ba:26:f9:81:
d4:02:2c:03:be:ae:5c:b7:d3:00:b2:4b:c5:bb:79:e2:ad:a6:
f0:65:9a:55:b9:a0:c0:65:e5:41:10:fa:e4:e6:8b:27:16:c5:
90:16:79:49:a1:bb:57:f2:4b:64:97:2e:07:3a:09:8a:15:bb:
b1:38:2d:f1:33:c3:67:f4:35:61:53:be:11:29:34:79:9a:65:
e7:1b:e0:f9:a9:a8:a3:dd:41:8f:43:f2:92:70:c0:81:1f:ed:
84:29:78:52:e1:06:89:c0:cc:62:38:e6:c6:71:bf:d0:f8:c5:
72:90:5f:2a:6e:05:1e:ae:5a:89:68:4b:95:37:4f:d7:c0:77:
8d:88:ea:32:c2:a7:d5:d1:bf:5f:87:2f:7c:97:34:01:17:9d:
6d:ba:d6:5b:99:1d:62:d9:4e:d5:ed:39:6b:25:5a:25:70:bc:
42:35:30:36:a2:19:63:6d:1b:db:53:1b:d1:68:6e:e2:ee:23:
f2:a9:4f:71:48:a7:57:42:d7:66:4d:fd:67:4b:8e:4b:47:16:
f2:06:e8:05:46:12:1b:cd:fc:aa:29:01:5a:f8:6f:5b:03:9b:
1c:ac:ae:2b:34:7c:45:fd:71:da:10:2d:4c:4d:65:74:1a:3a:
a6:0a:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:41 2026 by rpki-client