Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File: yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier: hy6fwVW6tvtg9SaKUEBq/kSF8C7o6A0Wt0umTtJ8mU4=
Subject key identifier: 35:B7:49:EE:0A:0C:03:62:AA:AC:C7:EA:2A:3A:CE:88:4E:C4:5B:63
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial: 019CABA1BC9F658E60952DD58CD253A0207F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number: 07B9
Signing time: Sun 01 Mar 2026 23:00:29 +0000
Manifest this update: Sun 01 Mar 2026 23:00:29 +0000
Manifest next update: Mon 02 Mar 2026 23:00:29 +0000
Files and hashes: 1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=)
2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: UjdhDipYIhS4nuJ2lOcc5fr5npQDdTUrH4JP+/oL2IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:bc:9f:65:8e:60:95:2d:d5:8c:d2:53:a0:20:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
Validity
Not Before: Mar 1 23:00:29 2026 GMT
Not After : Mar 2 23:00:29 2026 GMT
Subject: CN=35b749ee0a0c0362aaacc7ea2a3ace884ec45b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:fa:8d:87:1a:9c:4e:16:05:6c:b8:b8:c1:
f1:4a:88:4b:59:b4:78:1b:f1:35:e2:fb:eb:e0:22:
28:b9:16:73:25:a7:4a:fa:0c:da:b2:b4:95:af:cc:
86:1a:c0:44:6c:15:70:86:37:49:7b:03:23:ac:bf:
7b:ff:fb:a3:14:2b:ef:0d:12:66:06:3c:bc:b0:38:
79:f1:03:a8:07:e1:d1:58:4a:e3:70:55:bc:01:41:
a0:f0:21:59:63:dd:c8:ba:40:57:f4:2a:18:76:46:
72:ad:2b:e6:c3:8d:bd:5b:8b:ba:e8:89:fb:ed:e5:
9a:94:96:9a:1a:ff:bc:d6:00:de:0e:2d:c3:f8:7c:
6f:bc:cb:7d:07:c9:d0:f2:24:6f:4f:0b:91:3f:db:
9c:9b:a4:74:25:07:08:7c:85:39:22:f7:ac:f2:1f:
72:92:82:60:7c:ad:17:93:c6:4b:d9:a6:7f:22:09:
a2:d3:47:e0:b9:b4:80:30:77:93:47:44:01:3b:30:
8e:95:3b:4a:94:b9:73:c8:64:b1:9c:30:2a:4a:b4:
d5:97:8b:3f:f5:a8:70:08:fd:ca:85:4b:e7:e3:02:
a1:b4:1b:a6:f7:15:14:d3:55:ed:00:80:26:b5:50:
bf:b0:50:93:6e:5d:aa:ae:b2:57:f5:74:60:34:87:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:49:EE:0A:0C:03:62:AA:AC:C7:EA:2A:3A:CE:88:4E:C4:5B:63
X509v3 Authority Key Identifier:
keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:c7:cf:4b:70:c0:b5:dd:34:5d:b2:93:d3:0d:b5:2e:6b:
b6:42:26:1f:0c:2f:72:39:02:f6:2f:0e:26:15:a3:ab:54:92:
8f:2e:5b:09:65:63:bc:aa:4a:62:43:d1:21:06:47:ca:f3:4b:
f4:44:ee:54:04:c9:f1:a3:7d:9a:3b:06:77:90:b9:a1:4e:a9:
9a:c4:d3:1f:52:ba:9f:1c:f2:80:62:36:93:c5:d6:b4:d8:5a:
90:f4:21:2a:e4:54:37:db:4b:ab:73:e3:ef:ee:92:9a:9c:84:
a1:44:46:89:15:8c:10:80:26:dc:db:9e:d2:40:00:c8:b6:00:
bf:12:81:c2:51:53:9a:85:0f:32:a9:fd:79:b8:d6:17:61:c3:
ba:d1:73:9b:57:d8:af:21:2c:ec:69:e7:46:58:b6:de:dc:48:
c5:0e:7b:fe:8a:db:51:f4:34:6d:77:47:b3:1c:58:73:3f:d5:
5b:64:7e:40:96:07:7b:74:bb:ab:ae:01:a6:f2:28:fa:15:4a:
e6:3a:6c:25:b1:5f:05:19:cd:f1:4d:47:62:63:02:34:20:b5:
11:b3:80:60:89:3d:c7:07:32:d5:16:bd:78:a1:a8:25:94:1f:
c1:4e:89:6c:b3:19:56:7f:79:b1:0e:ab:35:e9:20:05:cb:f2:
40:53:7a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrobyfZY5glS3VjNJToCB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx
ZWJiZjcwHhcNMjYwMzAxMjMwMDI5WhcNMjYwMzAyMjMwMDI5WjAzMTEwLwYDVQQD
EygzNWI3NDllZTBhMGMwMzYyYWFhY2M3ZWEyYTNhY2U4ODRlYzQ1YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI36jYcanE4WBWy4uMHxSohLWbR4
G/E14vvr4CIouRZzJadK+gzasrSVr8yGGsBEbBVwhjdJewMjrL97//ujFCvvDRJm
Bjy8sDh58QOoB+HRWErjcFW8AUGg8CFZY93IukBX9CoYdkZyrSvmw429W4u66In7
7eWalJaaGv+81gDeDi3D+HxvvMt9B8nQ8iRvTwuRP9ucm6R0JQcIfIU5Ives8h9y
koJgfK0Xk8ZL2aZ/Igmi00fgubSAMHeTR0QBOzCOlTtKlLlzyGSxnDAqSrTVl4s/
9ahwCP3KhUvn4wKhtBum9xUU01XtAIAmtVC/sFCTbl2qrrJX9XRgNIdpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW3Se4KDANiqqzH6io6zohOxFtjMB8GA1UdIwQY
MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt
MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5
LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwPHz0tw
wLXdNF2yk9MNtS5rtkImHwwvcjkC9i8OJhWjq1SSjy5bCWVjvKpKYkPRIQZHyvNL
9ETuVATJ8aN9mjsGd5C5oU6pmsTTH1K6nxzygGI2k8XWtNhakPQhKuRUN9tLq3Pj
7+6SmpyEoURGiRWMEIAm3Nue0kAAyLYAvxKBwlFTmoUPMqn9ebjWF2HDutFzm1fY
ryEs7GnnRli23txIxQ57/orbUfQ0bXdHsxxYcz/VW2R+QJYHe3S7q64BpvIo+hVK
5jpsJbFfBRnN8U1HYmMCNCC1EbOAYIk9xwcy1Ra9eKGoJZQfwU6JbLMZVn95sQ6r
NekgBcvyQFN6kw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:21 2026 by rpki-client