Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: +BckJFgS0ZU4vkojMA/+g3bJvUIMBkylzO826z8RbtA=
Subject key identifier: 9B:83:7F:E2:F9:D8:D2:3C:1A:74:0A:3D:9D:3B:8E:1F:C3:85:F7:10
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019CAB34510C63DC3B740768F76D0FFD5FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: sKCzrK4h2fUNFh9sjA++JuFvK0NuiDzt9Xw79MCNMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:51:0c:63:dc:3b:74:07:68:f7:6d:0f:fd:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=9b837fe2f9d8d23c1a740a3d9d3b8e1fc385f710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:55:31:2e:03:17:84:91:54:fe:32:cf:b0:
06:17:79:dc:3a:12:5f:77:91:18:3e:b0:ea:58:5f:
3d:5f:45:26:d6:a9:ad:8e:4f:c2:00:ec:47:1d:8b:
52:37:3f:75:22:4f:18:86:d4:77:0b:05:79:38:57:
da:8c:e9:38:37:9e:f9:da:d2:0b:dc:da:0f:46:78:
07:9c:f1:46:2f:65:1f:35:e5:18:86:ff:9b:55:19:
87:77:d1:4c:19:14:dc:a5:4d:58:89:ef:da:ff:21:
6f:30:d7:42:0e:47:be:ea:9a:4a:a3:38:a3:f7:95:
26:cb:8f:d6:9c:d0:58:86:da:45:b8:82:90:a2:69:
d0:18:e5:8d:96:56:9a:8a:f7:72:0f:c6:35:19:ae:
89:b4:4b:03:d8:50:96:81:a5:b5:cf:75:c2:09:77:
c0:c5:3d:4b:e4:b9:a4:d0:d0:18:ba:d6:2b:8a:e3:
70:81:7d:cb:98:ec:34:0a:47:48:c8:29:30:1d:21:
8b:89:81:13:81:8d:0a:e8:b2:e0:4d:db:33:e5:73:
2d:42:05:36:b0:70:24:09:72:87:59:d6:0d:8d:e2:
04:36:e8:f8:4b:8e:e6:12:84:bc:eb:fc:0b:5b:49:
41:12:c4:9f:2e:71:08:df:5f:63:d7:77:74:a5:25:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:7F:E2:F9:D8:D2:3C:1A:74:0A:3D:9D:3B:8E:1F:C3:85:F7:10
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:b9:24:80:fd:69:34:b9:93:a5:bd:92:a9:f3:b5:b9:92:
dc:9e:04:8c:fa:86:57:81:0c:88:a1:e7:ec:aa:9f:7d:90:f4:
18:8d:36:d2:f8:8c:e9:d3:a0:04:f4:18:a4:3a:7e:2e:d3:a5:
38:7e:94:8d:13:28:13:2c:05:dd:29:7a:95:e1:10:ff:77:80:
30:99:17:ef:8d:8b:46:aa:92:80:9e:52:11:3a:96:0a:af:d0:
5c:92:ac:5f:9a:2e:19:58:0b:13:97:2a:ea:49:b5:4d:ff:49:
27:e1:ae:80:c6:59:0c:7b:ab:70:38:e2:dd:42:73:2c:c1:31:
ea:38:94:87:60:b7:46:ba:07:42:b8:15:d8:c3:f9:fc:8e:37:
2d:50:f8:b3:3e:2f:59:c6:d5:03:59:a8:fe:28:40:c4:5c:2c:
67:8d:2c:00:9d:25:04:20:0c:8f:ba:60:b9:0b:4b:4a:2a:cc:
7e:96:c9:e1:de:0a:09:86:96:a9:8d:65:25:a0:84:63:a6:69:
ae:8c:ce:93:0a:f2:39:d0:fd:9d:52:1b:97:3d:b4:f0:ea:c5:
68:54:c0:23:4c:d2:2c:71:a7:0a:f1:9d:65:bd:c4:59:95:7c:
e0:49:f6:7c:08:22:ae:81:a9:ae:5e:9f:65:9e:1c:ec:9b:31:
09:da:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:09 2026 by rpki-client