Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: zCgiFPSkmjsCAfFFnSCh0JhOo01BYVGyhAF+/H2fNdo=
Subject key identifier: 53:9E:CC:93:B3:C0:54:17:BF:5F:B4:12:22:35:3E:66:49:22:EA:8D
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 019CABD984F1BCCB110BA16A41C04CB40CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa (hash: DuYV9Jw3WnzlLPMbHeqIhbHSehBiGNJ5e+2xEYBYW3w=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: dD7YpWQwgootqIhC8RWl+6Fxeg92iQ3rIOOJmuiy0yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:84:f1:bc:cb:11:0b:a1:6a:41:c0:4c:b4:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=539ecc93b3c05417bf5fb41222353e664922ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:ef:ae:0a:92:5e:68:92:5b:ee:f9:a6:f9:
45:ca:ce:11:65:31:6d:2b:d2:09:cd:9c:40:68:e7:
3e:93:60:05:41:90:43:f8:bc:5b:38:87:1f:1c:3e:
de:63:05:de:9e:e4:be:e3:78:80:e0:d4:4c:92:83:
c0:72:07:71:c1:0a:aa:71:1a:14:c8:ae:70:3b:ad:
86:10:b0:ff:ed:06:9c:cc:da:e2:57:09:64:18:10:
5a:9a:83:1d:0e:3b:5a:55:e6:31:b2:99:cf:b9:ad:
5d:b8:0b:de:b4:cd:af:3d:21:81:82:75:22:ad:21:
3d:6a:da:34:97:fe:2f:07:87:d7:ec:c9:eb:8e:33:
87:4a:23:b1:29:8d:dc:8f:45:b9:f7:e1:b6:62:e8:
7f:41:04:91:4e:4c:ad:e6:fc:ae:89:03:51:35:47:
ec:6e:8a:b1:b8:fd:2f:82:d6:97:fb:1d:4e:98:e1:
37:45:f4:6b:e3:67:4b:0f:e2:ec:c2:56:f6:13:7a:
f7:85:58:3d:2a:84:98:49:f0:13:48:06:fc:6b:78:
38:57:78:ce:89:e1:16:c1:cb:7c:29:4d:b7:0d:3e:
44:ea:02:68:dc:12:cd:d8:e0:b5:cd:0a:fb:4a:ff:
42:93:91:c2:c4:1f:3e:5d:af:2d:f3:00:4e:91:c9:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:CC:93:B3:C0:54:17:BF:5F:B4:12:22:35:3E:66:49:22:EA:8D
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:31:2f:73:88:84:75:78:c6:eb:16:d8:b5:bc:4a:d0:e7:61:
5c:8f:e1:8e:63:b8:f3:09:82:55:c1:83:7d:fd:f1:8d:2b:e2:
63:15:2f:49:e1:de:36:1d:07:3e:ab:c2:2b:e7:3b:5a:fa:82:
aa:ad:6c:df:f4:bb:cf:dd:7e:cc:93:3e:92:1d:2f:66:72:d5:
81:a8:65:20:c6:7b:62:2b:32:0a:a9:25:84:40:13:12:be:80:
0e:ed:42:e7:c9:4d:2b:ed:73:5d:6f:5f:8a:12:19:d1:8c:67:
8d:6c:db:29:de:18:25:18:51:f6:cd:e0:b5:f9:dd:6b:fb:3b:
40:e0:64:90:a9:f6:64:12:88:eb:00:46:bd:ee:56:03:5b:3b:
0f:2a:8c:10:82:2a:77:8c:a6:cb:2b:47:7d:ce:c3:26:bf:d2:
e3:d2:35:ee:4e:60:83:46:f5:d5:c1:8b:98:ed:1f:6f:a6:3f:
83:a5:b8:44:e3:77:5b:a9:e0:4b:72:67:6a:64:c5:68:aa:79:
42:94:9f:88:8a:89:87:67:31:a6:46:68:bd:7f:f8:30:44:53:
2f:ea:bc:59:35:68:78:94:69:1e:a6:04:21:46:c4:16:3a:60:
03:65:9d:5f:ad:2b:96:d0:38:9a:be:2b:5a:01:3e:4a:41:1d:
13:4b:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:13 2026 by rpki-client