Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: nqRD+sdSYBQ99o4AGTVjBecVVNKaa+3P5LaWAbJTJ0U=
Subject key identifier: EA:9F:0A:28:2A:AE:EB:94:25:91:94:AF:69:BF:F0:8D:FB:BC:6F:22
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 019CAAFD24137DB40433339A779067D5C771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0A48
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: tQjGX2OSv90Keg4TnOBZZe2fLcnTe1XLU36sd8qfCvM=)
2: vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa (hash: mQvtqYD2eC+84hVmHavb+1UIl2NHrV+2/J+tCnR9oyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:13:7d:b4:04:33:33:9a:77:90:67:d5:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=ea9f0a282aaeeb94259194af69bff08dfbbc6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:08:84:ba:c0:be:6f:25:0f:c4:cb:58:15:
d6:46:01:6c:5a:5a:e0:f4:ad:a8:50:e2:61:10:ae:
f1:61:a4:e5:25:8f:a6:34:79:ad:0e:a0:d0:4f:df:
ed:b2:c1:d4:62:e6:d8:0e:69:bd:54:0b:e4:02:7a:
60:cb:ae:bc:e1:0c:b8:be:e6:a3:4f:d7:77:f3:ee:
a4:f7:71:72:94:8e:66:99:b8:d1:e3:4c:1c:df:f6:
30:ee:dc:7a:1b:04:75:94:76:8b:6a:01:8c:6d:b0:
80:3b:78:00:b8:92:64:0f:5b:d9:74:1f:4f:29:44:
ff:ec:0a:dc:e9:f6:b0:05:74:a3:2c:54:2a:df:87:
d8:e3:88:05:5a:a0:d3:d8:5d:b9:ee:ee:ab:db:b4:
3e:a1:3d:b5:a9:fa:d2:55:04:c3:49:08:7d:ec:39:
26:cb:b3:81:2d:91:58:c2:25:e8:f4:74:29:8d:82:
6a:f4:4b:ba:94:f6:c0:1a:4d:7d:8c:39:b5:45:f7:
48:61:39:b0:07:cb:94:39:f3:d7:37:04:00:4b:ab:
8e:c8:f7:59:4e:0b:dd:82:3b:0f:f7:8e:6a:74:03:
a7:a4:f1:27:1c:de:96:7f:8b:cc:96:de:2c:f3:3b:
db:77:75:b7:4b:77:fe:63:c9:28:cb:66:a7:7f:36:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:0A:28:2A:AE:EB:94:25:91:94:AF:69:BF:F0:8D:FB:BC:6F:22
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1f:0c:d9:a6:e4:cc:5f:c3:16:c2:11:42:b6:2a:7a:03:3d:
17:a8:23:fb:5f:c0:58:91:1e:cf:bc:b9:42:0d:c4:4c:cb:2f:
ce:f4:82:f6:af:26:6e:fe:84:39:6d:5d:ac:f8:5b:89:9c:bd:
dd:29:ec:10:45:f0:a8:37:a2:a5:88:a6:1b:f5:38:77:2d:c0:
14:f9:ba:d6:1c:de:25:c6:27:c5:33:0e:e4:c1:fe:f2:34:d9:
d7:36:fd:4b:c3:c4:87:73:a4:59:fe:0c:7e:30:f5:24:5f:b4:
76:ec:9d:df:8c:26:a7:a8:e6:58:41:a6:5d:e3:1a:e5:37:d6:
93:33:c4:29:bc:65:62:a6:1f:44:72:bd:d4:a6:ff:0a:61:a2:
39:19:02:56:04:b6:74:33:bd:61:07:95:1f:c2:e2:72:62:cc:
3c:0e:ed:53:75:9d:3b:b7:e9:c9:4b:4d:fd:db:9a:82:9d:5d:
35:ac:50:2c:b1:fa:16:c2:27:73:c6:69:7b:4b:93:50:1d:b2:
18:8d:11:66:10:e3:52:72:f9:eb:27:52:57:11:4f:17:25:6e:
2b:da:21:8e:05:a4:f3:d1:92:39:ec:c7:7f:c1:f7:1a:bd:e4:
7b:e9:c4:00:c7:9d:f4:23:a0:29:b9:70:18:ef:92:1c:7b:1d:
ca:5c:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:05 2026 by rpki-client