Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: 6MIn15BFAl55CWMxj6RMt+xgo1HSLQi6fRVJXgImy+4=
Subject key identifier: 78:6F:CA:12:98:AB:D7:9D:27:7B:F2:F0:0A:45:DA:8C:4C:81:B4:B3
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 019CAA587E0B9297D949CAD11A76F423EF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: ScsWRL_Mu43RcB7Q3E8exZ3sAxE.roa (hash: a2qscDdrl/I7FMbIlIwybQ9A1yL+THmCfW/+aGHZ230=)
2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: LbklFOhrBdFmFp+tVzC1wFjxThacHgk9K6lwTnZtJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7e:0b:92:97:d9:49:ca:d1:1a:76:f4:23:ef:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=786fca1298abd79d277bf2f00a45da8c4c81b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:9a:fd:bd:fd:45:1c:99:43:75:45:07:22:
91:db:11:52:61:67:c0:97:b8:21:8c:01:22:60:0f:
86:cd:b3:a0:e3:aa:f6:4e:49:d8:23:35:c0:f0:79:
ff:dd:a8:6d:5c:cc:45:a1:93:ea:c8:13:4f:ca:9e:
9a:bb:a9:0b:f2:2e:8c:02:f0:1f:e3:cc:a6:95:29:
df:3d:17:a1:31:d1:d6:bd:54:42:93:90:ee:3e:6d:
43:06:40:aa:c5:a1:b9:46:40:98:03:40:aa:87:ad:
ba:4b:ba:3b:14:b5:b6:50:54:98:e9:9e:d2:50:30:
57:4d:e4:e6:21:2a:9a:12:59:b2:b1:90:9a:25:7c:
57:f2:bd:2d:4d:6f:3e:d5:4d:35:d7:af:eb:b5:24:
c9:c1:43:1b:7e:e0:c1:01:1a:98:3c:28:44:b3:8d:
95:27:d6:ff:18:3b:52:1d:6f:8c:d4:c6:64:62:4c:
35:95:a9:cb:5a:84:e6:a8:66:08:06:29:f1:24:c7:
0f:a5:a9:5c:80:3e:a5:0b:fb:0c:9b:b1:06:89:4b:
ea:ea:47:6e:bc:5d:32:6f:45:7a:11:e6:30:97:ac:
8b:5c:58:80:5d:e5:81:b5:8c:40:db:6c:c9:8f:8a:
1e:5d:65:9b:82:9c:9f:18:86:7f:fc:9b:d6:f1:44:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:CA:12:98:AB:D7:9D:27:7B:F2:F0:0A:45:DA:8C:4C:81:B4:B3
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7a:00:c9:91:88:fe:13:29:4d:0f:ef:57:7b:bd:98:ef:05:
46:aa:60:7e:de:1c:e1:94:0c:73:88:a3:0c:3f:99:53:0a:9b:
43:9d:40:71:b8:6e:89:76:61:34:09:19:af:5c:00:1d:a2:38:
1a:b6:b2:34:9c:56:a7:5a:97:93:55:82:5a:5d:45:d7:8a:58:
5e:10:81:42:51:4b:d7:bd:1b:a0:21:a3:f5:6b:53:9e:c1:80:
9b:ea:29:2e:da:2b:4a:47:b3:67:b2:1f:72:ca:41:df:be:c9:
42:72:57:a7:32:5b:8b:1d:ff:de:e9:31:35:c1:64:ea:1d:67:
1d:7d:a6:20:9b:84:0c:cc:1d:9b:36:18:67:dd:19:41:4e:bc:
ec:80:1d:c6:ba:11:5d:7c:7d:f4:3d:8a:05:1c:c5:d3:53:d3:
47:22:5e:33:f7:38:e8:b6:8b:3d:34:b4:78:f3:5a:d8:29:84:
90:76:fc:a6:b1:64:92:b0:29:be:8c:d8:78:9c:3b:15:ac:19:
22:26:5f:0a:c3:d1:3b:b8:5c:a7:1c:26:9f:20:19:88:42:d1:
62:9a:80:77:23:7d:df:3e:73:8d:e3:d5:a1:e7:79:2e:83:5d:
94:95:6c:ce:c1:c2:e6:35:cb:77:3a:6a:ec:9e:e3:7b:66:96:
d6:6b:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:29:27 2026 by rpki-client