Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: N5clJ/3uTgByVRRDRC255a1mEMlW4GAjKlFbS+id/98=
Subject key identifier: E7:C9:0E:E2:1B:98:DD:0C:6D:73:E2:2F:1F:B0:A6:1A:5C:A4:27:49
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019CAD59FFEDC698741C049758A638E0FD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 11B1
Signing time: Mon 02 Mar 2026 07:01:22 +0000
Manifest this update: Mon 02 Mar 2026 07:01:22 +0000
Manifest next update: Tue 03 Mar 2026 07:01:22 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: iP+7jz4DoV+IquBiZIzhq3XhJ/ibMks+9j532nt2hW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ff:ed:c6:98:74:1c:04:97:58:a6:38:e0:fd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Mar 2 07:01:22 2026 GMT
Not After : Mar 3 07:01:22 2026 GMT
Subject: CN=e7c90ee21b98dd0c6d73e22f1fb0a61a5ca42749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:06:7e:27:0c:98:9d:ca:74:fe:ad:a8:a8:
0a:13:ef:37:00:60:d4:3e:59:a8:05:b0:d9:91:9f:
05:ed:bc:98:4d:80:67:dd:31:da:ca:22:d9:67:cb:
a7:40:f3:66:83:60:51:00:00:53:26:69:8a:c4:63:
1f:26:59:7e:34:17:ea:a7:fc:d3:98:d7:a1:e2:42:
62:ae:e5:ff:76:57:c3:e3:46:e6:ec:09:a0:48:63:
34:53:a0:d6:8c:43:ca:c4:e4:bb:d3:16:38:e7:c9:
b0:a6:19:87:64:7a:75:e1:09:8e:26:cf:9d:6f:13:
6c:44:27:78:1b:d8:e8:c2:a9:ca:3b:d5:d5:52:87:
c5:67:5c:be:33:18:6f:24:f5:fd:12:f2:a5:c9:55:
90:c8:85:08:fe:3b:6a:44:bd:70:51:c9:19:84:ac:
4f:b8:10:27:ab:53:4e:2a:6b:f2:1c:8b:1b:8b:de:
e0:61:cd:30:08:63:9b:0b:52:41:a3:58:e1:86:01:
b1:30:55:06:5d:61:56:cc:96:40:0d:f9:7f:47:bf:
4b:92:66:24:06:6f:5a:90:4c:0d:c1:d4:17:96:62:
04:3d:d6:9d:16:5b:ca:89:25:d6:28:45:fb:25:08:
05:34:8b:86:dd:1e:f2:74:47:52:77:6d:30:eb:2f:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:0E:E2:1B:98:DD:0C:6D:73:E2:2F:1F:B0:A6:1A:5C:A4:27:49
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:da:a7:9b:6b:d0:85:68:da:07:a8:92:c7:05:b8:1e:2a:5a:
9e:a1:00:6e:d6:ca:fe:77:56:9b:32:40:e7:bc:a7:9c:3d:e6:
a9:02:67:a0:88:7e:a2:7b:fc:14:2f:3a:88:c7:1e:fd:0f:07:
49:b8:30:b8:f9:a5:07:1a:58:ff:84:f2:18:74:ed:2e:6a:0e:
64:ab:c0:30:86:48:0c:f1:24:c3:44:7f:40:43:bf:3c:49:3c:
f1:f3:f1:08:97:20:7c:5e:62:d7:f6:9b:69:88:47:73:a5:45:
3d:13:a6:2d:bf:35:4e:6c:fe:ea:9a:91:d2:6d:a9:62:92:e8:
db:38:56:70:69:8c:48:ce:96:13:cf:29:3f:c3:b0:12:56:a7:
90:2c:9f:46:5f:5a:bc:79:6c:cd:bb:4f:21:0f:31:50:6d:d3:
1a:92:be:52:cc:7c:a4:5d:f5:a1:fc:6d:2d:0c:e2:62:07:3a:
d3:61:6f:39:66:db:48:fd:15:8d:a9:1c:1e:be:5b:50:c1:13:
41:9d:2f:98:be:87:70:c6:9c:1d:96:41:ab:d2:d6:ef:dd:40:
17:ab:6a:9b:26:ef:fc:f9:23:1f:c0:6a:03:dd:f2:0d:37:71:
7c:87:3e:0d:69:0e:dc:be:c1:37:e2:f7:78:6e:43:dd:72:ce:
1b:f6:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:44 2026 by rpki-client