Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: uuD5YedrHPrJRkMCuc29nwIhB++aR8JNsi6r1w8sg6w=
Subject key identifier: 6D:22:CD:44:C3:85:31:C5:76:5B:24:98:0C:1E:6A:17:73:86:3A:7E
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 019CAA8FE456DD1221DD5933EEA01C361E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: mDqresBCjx5tB2O9064HotHQuTM.roa (hash: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM=)
2: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (hash: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: MDkYgYXmXB8ShJsdf1vaxMtS8NlaoKAJ8Ay2ITDQvq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e4:56:dd:12:21:dd:59:33:ee:a0:1c:36:1e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=6d22cd44c38531c5765b24980c1e6a1773863a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:65:4b:ea:c9:17:c0:b0:e9:e7:b1:6d:75:
f8:e6:69:38:29:26:39:a7:8b:5d:82:1f:f3:ab:d5:
2a:f4:a9:39:b6:10:29:77:8b:32:9c:71:cc:28:c5:
cf:24:4c:13:e8:5d:78:45:a1:62:06:35:5a:28:d3:
83:4d:fc:32:d4:cd:1a:f2:a5:66:10:6b:ba:64:1e:
89:07:b0:36:fb:0c:12:4b:80:aa:ae:6b:30:8f:17:
81:f7:b5:b6:ef:61:ae:aa:64:7d:b9:93:f2:5b:88:
d1:c5:31:b5:29:d0:ad:46:b8:bc:84:8e:fe:9a:11:
a7:3a:09:6c:5e:c1:4a:df:d7:f2:b9:01:8c:9e:02:
12:73:f7:99:b3:99:44:b1:ca:44:e5:ae:20:ae:9f:
8d:fa:11:39:1a:04:52:f0:38:0d:76:db:df:46:9a:
24:b5:18:7c:0e:b7:5f:62:f0:42:a6:33:5d:66:3c:
ff:42:86:26:09:53:e2:cf:5d:f7:a7:aa:19:52:33:
92:96:cd:d4:f1:9c:e6:be:07:6c:29:76:55:07:63:
d9:d7:4d:6e:b0:e1:f2:62:e5:26:f0:23:64:ed:ce:
1c:27:24:30:d0:00:49:c7:c5:1e:fd:3c:a7:02:92:
a7:96:65:5d:b5:cc:2b:55:52:ec:d1:24:f1:d2:fb:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:CD:44:C3:85:31:C5:76:5B:24:98:0C:1E:6A:17:73:86:3A:7E
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:d8:a2:05:ea:18:a1:37:3b:42:6c:4b:40:8f:fa:ba:92:
1b:28:09:2a:50:41:28:f3:97:74:77:00:d2:df:5a:35:a1:95:
aa:bd:bc:50:80:4a:19:66:cd:2b:af:26:04:be:72:98:d7:bd:
14:79:01:00:7a:0a:73:d9:17:ab:f2:76:f1:81:56:80:2d:d2:
6b:99:e7:a6:7a:33:9a:10:5d:40:e2:1d:0c:f1:38:85:0a:bb:
14:f4:76:16:27:78:0c:09:18:47:4c:dc:c3:b3:2d:60:ef:72:
9c:a3:ff:0f:9f:da:ac:41:77:8e:34:51:75:f2:3a:ca:5e:51:
cb:56:23:df:3a:bc:61:7f:c7:81:64:c9:08:da:6c:ff:77:59:
68:e5:c5:b1:45:1b:a7:61:73:85:e5:da:3f:70:02:5d:bb:b7:
5c:7c:71:40:2d:d0:50:ff:78:92:7e:34:10:bd:39:07:ab:8f:
f1:43:d3:c0:10:dd:34:fb:6f:21:8b:12:cc:39:da:e3:2f:c4:
67:94:16:d1:f4:65:1d:af:2a:b6:02:74:44:34:b4:81:07:e1:
56:51:e6:21:d9:b5:52:aa:dc:ba:63:74:e1:19:d7:c6:be:94:
2c:0c:4a:34:cc:33:f3:d3:34:83:b4:4d:a9:07:50:69:5a:e6:
cc:c9:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:38 2026 by rpki-client