Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: VWE/m0zSNX79niQ+K0KKmw6byCYniH6yMJhGLYvmcg4=
Subject key identifier: 12:4D:71:B8:EF:3F:01:06:5E:76:CE:6D:6A:13:5C:18:9B:49:CF:12
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019CAC7E66D27C140E6F2AA1B2687AC5710E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1134
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: uaXIdO1eCZkfTEW+/qbGt33EhuM4rYEvWvsHQi2vEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:66:d2:7c:14:0e:6f:2a:a1:b2:68:7a:c5:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=124d71b8ef3f01065e76ce6d6a135c189b49cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:57:83:24:4f:52:81:2b:32:30:04:7b:bd:
de:2c:03:be:2c:0c:70:86:4a:25:90:9e:95:c6:3b:
08:cf:ac:3e:a1:f7:d4:27:ae:57:00:75:fe:b4:cc:
21:4f:2b:29:6a:73:11:99:42:3f:aa:f8:23:ef:04:
46:ee:44:3b:05:ec:1f:78:76:3a:b8:5f:ea:ec:55:
eb:7b:76:86:f0:8a:6f:1c:1d:7f:9b:22:c8:8c:f2:
00:cb:7a:8d:f1:4d:b6:2f:71:81:c6:fd:22:3b:2c:
05:41:c7:66:9b:ec:18:ba:56:da:94:a5:3f:57:5d:
2f:90:4b:ed:fe:35:3e:42:e3:cd:05:e4:52:8e:c3:
f1:88:14:99:55:c1:f1:e2:7b:65:57:cf:68:9f:72:
91:12:2d:07:d9:34:d5:0e:bd:d2:dd:b3:04:0f:a6:
23:08:da:6b:cb:d3:e1:78:42:e3:2f:6d:d5:72:51:
81:f9:1a:24:11:7d:a8:3c:9a:db:0e:0d:40:26:da:
00:4e:7d:4a:0e:47:44:93:f3:79:01:bf:8c:d0:5c:
ce:9c:ee:39:83:c3:79:2d:f8:e3:6f:04:88:44:12:
86:4d:36:21:e3:df:16:2c:0e:6f:a5:07:02:31:cd:
7c:dd:64:97:1b:1c:39:3c:c4:c0:7d:98:72:e7:34:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:71:B8:EF:3F:01:06:5E:76:CE:6D:6A:13:5C:18:9B:49:CF:12
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:35:49:2d:f0:49:9b:44:39:e6:75:29:f2:77:d0:a1:6c:
40:13:19:09:f1:ba:b8:38:0e:b3:ee:67:fa:07:04:7c:fc:fe:
75:54:e8:d1:36:aa:b2:25:3f:2f:4c:44:40:4f:2f:2b:3c:e4:
5e:5d:7b:d3:90:ce:8e:0b:23:59:7c:99:ba:86:e4:8d:44:ba:
ad:47:d1:96:a2:76:cd:84:f5:71:e8:ff:44:0f:c0:44:c1:7f:
d0:b9:00:ef:9f:17:97:b1:c1:c6:15:06:c8:bf:3e:f5:90:6b:
98:03:86:7a:64:95:74:37:65:ec:91:d3:ff:2e:e1:a2:81:e9:
b0:ba:a7:38:8c:5c:19:78:e8:7a:7c:29:6c:72:bb:68:3a:a9:
03:41:ca:f4:76:42:34:a8:94:17:c6:db:5e:70:3b:5a:73:d6:
57:ab:34:f8:cc:9f:b0:5f:ae:6d:3d:bb:2c:3b:92:dc:11:29:
a4:9d:a7:29:a4:f2:26:55:1b:a6:a4:92:85:e3:6e:33:08:d6:
18:66:89:16:0c:86:c5:db:88:1b:54:34:73:6e:96:90:2b:3c:
13:41:16:5a:94:b2:07:bc:34:6a:ac:d3:4c:a0:01:f3:62:b8:
b0:18:e2:19:8d:e6:fa:93:e1:e9:9d:7d:f0:79:b7:ab:96:f0:
8a:cc:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:34 2026 by rpki-client