Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: 5PFlr5+8HHURGZmoC5T05Y+Bvsljxj20wQYkK8SVcr8=
Subject key identifier: 37:E8:D1:A3:9C:68:D2:28:AC:82:73:22:14:67:DC:E6:D4:09:1D:75
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019CAE6C827F851DE1E053802E32FBAF323B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1135
Signing time: Mon 02 Mar 2026 12:01:12 +0000
Manifest this update: Mon 02 Mar 2026 12:01:12 +0000
Manifest next update: Tue 03 Mar 2026 12:01:12 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: DQTrmDPFPg4pF0Q4jZQgjiyT8qTD9T4AIlSK+nfqPjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:82:7f:85:1d:e1:e0:53:80:2e:32:fb:af:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Mar 2 12:01:12 2026 GMT
Not After : Mar 3 12:01:12 2026 GMT
Subject: CN=37e8d1a39c68d228ac8273221467dce6d4091d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:e2:5d:92:65:32:fc:c5:b5:8e:c8:4d:4b:
16:c2:87:ca:b8:57:7a:d4:11:35:8e:4d:8a:2e:23:
ab:ec:e0:fc:9c:05:c5:96:4e:f6:4c:88:fd:5f:73:
f3:5b:07:f0:e3:a6:f0:70:dc:06:e2:71:23:61:82:
36:25:1c:8e:af:ba:eb:d7:ca:fe:2e:8c:0e:af:e3:
14:b2:89:0e:09:fc:fc:dc:7b:39:33:b2:9e:b8:fa:
11:9d:3b:51:f9:ed:aa:b6:38:f8:2e:a1:81:64:8f:
ef:a0:c6:df:61:bf:df:db:ba:58:bf:ce:7c:e4:20:
e1:6a:09:fc:1c:62:f3:7a:56:50:5d:48:ed:d6:be:
02:af:d6:69:78:81:14:99:4e:d0:31:02:b5:0f:8d:
42:f4:2e:48:df:c5:aa:0e:9f:04:bc:a5:a4:d7:cc:
aa:74:f3:fb:48:34:06:dd:5e:66:60:d9:96:9f:a5:
d6:2d:3d:29:ab:6c:ae:ce:c6:64:34:4f:95:08:1f:
06:65:23:5e:10:73:44:fc:05:45:22:ff:b6:17:26:
77:f8:64:4b:81:c9:27:32:f2:2b:7c:7e:f1:55:eb:
c8:c8:9e:a3:f8:70:2c:1b:43:90:db:c6:06:a4:7e:
dd:3f:03:e1:c2:72:1d:46:27:62:d2:40:6d:81:41:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:D1:A3:9C:68:D2:28:AC:82:73:22:14:67:DC:E6:D4:09:1D:75
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:49:62:f2:a9:09:2e:00:ff:22:0a:2a:80:f5:60:12:25:
0e:5a:18:ae:2d:51:cd:5a:0d:24:0d:70:8f:86:1c:fc:6d:82:
4c:61:9d:3b:86:54:5c:7a:13:e0:ea:52:84:55:7d:23:2a:48:
e5:a3:3d:0b:78:6b:c2:3c:64:09:10:3f:35:cf:42:47:26:7c:
79:0d:7e:e4:e4:a3:ff:b1:0b:72:cc:22:5b:ca:01:41:07:82:
70:65:72:c2:74:e7:b2:12:63:e0:ff:6a:44:2b:16:8b:c0:66:
d3:07:9a:d3:d5:35:70:43:33:1a:0a:25:b3:7e:d8:a8:c5:64:
c5:96:78:c4:4b:20:a9:1a:8b:57:34:14:99:b8:69:64:dc:d2:
89:f4:98:98:87:13:5f:82:e7:91:ea:7d:db:56:90:83:97:68:
46:42:c8:f6:3a:9d:b2:93:e0:b9:54:fb:39:92:e0:f1:d6:33:
0a:2e:35:fa:9b:97:01:e6:3c:f7:38:12:f6:0d:d2:db:00:ae:
6e:a1:fe:c5:99:a5:99:83:10:c4:70:bd:0a:ee:3a:16:e5:e9:
63:f3:b5:22:54:8f:03:1b:58:56:cc:f0:f1:bd:15:a3:c6:9c:
36:e0:8c:08:cc:a9:f0:df:d2:1c:5d:c5:bd:d1:04:54:b7:75:
ff:37:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:42 2026 by rpki-client