Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: 0ByaV/OPkIewBxJW3WrHcHf4NCf7916A0VOR7lXIquI=
Subject key identifier: 8F:F5:E6:1B:65:04:F2:82:E7:DC:57:C1:A4:C3:10:8E:B0:90:9E:3C
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019CAB33FC7BE0481BC111F66F8BD3227801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 05E1
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: Bsd1C4EUBTwXsUC50Yk+pWNVS7I1VmFoqRh2VdROfrU=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fc:7b:e0:48:1b:c1:11:f6:6f:8b:d3:22:78:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=8ff5e61b6504f282e7dc57c1a4c3108eb0909e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:80:38:b9:f5:3c:6d:e3:35:80:ba:65:5c:
83:d6:45:6e:8a:08:9e:73:df:eb:df:f0:21:58:f8:
f3:dd:fd:6a:4c:5b:84:17:8b:9f:17:22:2f:86:8a:
69:6f:f6:79:16:1a:21:1a:84:4a:e0:fc:62:37:68:
20:b8:4b:82:1f:c4:8f:d5:db:12:92:59:2c:e9:32:
23:52:db:78:df:60:d2:74:a2:6a:9a:d9:f6:8b:f2:
34:8c:dd:98:79:17:c4:73:49:06:19:05:2c:37:6e:
b8:4b:d4:da:25:48:2c:bf:d0:eb:9f:9b:ee:e8:71:
be:b4:67:69:99:ed:f9:4f:18:b6:fa:27:3c:84:1f:
e6:4a:b0:44:e9:ac:4a:d9:83:e4:0b:83:7b:dc:c5:
9e:14:37:e4:c3:b8:2b:73:7e:77:82:f9:48:99:aa:
f3:6b:75:78:12:b0:8d:c8:82:d2:22:15:27:37:b4:
cf:bd:c8:ef:c3:cf:4a:28:ff:87:b7:47:4f:0f:f7:
e0:e2:93:af:e1:61:f6:ee:3b:7d:d7:5a:50:09:49:
92:04:78:47:2d:d6:b0:5b:e2:50:c2:43:b4:f3:78:
b9:73:02:2d:b1:99:2e:6c:c1:25:33:4d:73:cd:c7:
0a:0d:df:c5:cb:06:41:59:7d:cd:2a:86:3e:dc:87:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:E6:1B:65:04:F2:82:E7:DC:57:C1:A4:C3:10:8E:B0:90:9E:3C
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a1:13:c3:d1:72:7a:7c:d6:61:92:1a:c9:01:8c:79:49:d5:
0f:6b:b7:c1:ae:9a:24:e4:56:ce:e0:1b:26:5d:68:bf:e6:40:
5a:8a:99:f8:ce:93:e5:87:62:fa:6c:7d:40:91:aa:4c:4d:a9:
4a:51:45:62:09:36:98:eb:6c:83:3f:ce:bc:dc:64:29:09:e2:
dd:24:6a:e3:4d:4c:11:e3:5d:ba:9d:f7:8d:68:a8:dd:03:c9:
fd:72:f3:0f:a9:81:6f:c3:fa:f6:e2:27:75:31:c7:eb:53:d3:
ec:51:c9:2e:2a:b4:b1:e3:dd:34:11:dd:a4:a5:66:92:be:fd:
3a:55:24:ec:e2:65:89:66:5b:71:9c:00:df:94:e9:3f:13:0f:
32:57:b4:c8:51:d3:22:66:dd:92:3c:4b:3e:46:96:c6:ea:d8:
4a:f3:cf:62:48:d4:cb:7d:a6:ad:a8:cc:94:03:ad:8b:1b:66:
b3:a6:b5:b6:0c:5c:2a:36:0e:66:59:24:2f:f7:4a:a5:1f:dd:
ee:46:08:8a:30:28:5f:9d:90:63:74:a8:56:15:18:fd:19:4e:
7d:33:ef:71:e9:57:75:5c:df:2b:1e:99:d1:b7:da:0a:42:a8:
29:3f:39:c8:05:93:4f:70:41:f3:ff:44:52:53:fd:34:c4:8a:
bb:3a:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:44 2026 by rpki-client