Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: z+NRbWuuxD6GwS0rtSJN3wNi14KNRYI79QAWg3SToPU=
Subject key identifier: 5F:61:D7:5C:9F:AD:2D:D5:1A:3A:83:22:E9:E4:5C:23:DA:CD:65:32
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019CAB6BD6E7F88E6E04CE6C3A1655080B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: icbt3LtUe0uhyS3m4R0rKxzBZ5M18tB29d8NCOnx2E4=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d6:e7:f8:8e:6e:04:ce:6c:3a:16:55:08:0b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=5f61d75c9fad2dd51a3a8322e9e45c23dacd6532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:68:03:40:a0:62:63:49:65:c6:47:0a:97:
bc:bc:8f:1f:5c:2c:96:00:6f:af:3b:82:e9:09:7a:
b4:79:27:17:b4:72:f9:78:1c:41:ef:a4:df:a4:26:
f2:46:4f:79:1c:b7:af:a5:b7:c8:41:6a:79:8d:05:
f1:71:2b:97:05:82:e6:dc:a5:76:31:7b:e7:fa:5c:
13:d6:8d:19:ef:86:17:4f:61:53:f1:7d:be:c6:80:
05:bb:34:15:87:6a:54:ab:c8:4d:d5:0f:2b:9a:83:
05:0a:af:6a:32:f6:9e:51:fe:be:c8:72:e7:c4:18:
49:db:5a:11:86:ea:02:51:29:20:a6:ce:ab:61:58:
83:75:88:7d:31:0a:f1:b3:d5:44:b0:22:34:13:96:
e3:40:1d:2f:f2:52:58:ad:e5:5c:5e:fd:2c:44:b1:
72:21:99:63:f2:d4:67:b5:eb:1d:72:c8:b3:bf:a5:
82:e6:ea:0c:82:db:4d:5b:e4:ba:15:17:f3:6d:33:
4f:21:96:8a:a6:56:4e:23:6e:c8:50:45:77:8b:d7:
35:1e:03:7a:79:8e:26:0b:88:13:38:be:20:69:4f:
5f:f3:4c:61:46:d3:26:58:3e:7e:3f:ce:ea:80:54:
04:25:48:39:a1:8f:bc:15:20:c6:50:13:cc:77:fe:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:D7:5C:9F:AD:2D:D5:1A:3A:83:22:E9:E4:5C:23:DA:CD:65:32
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3e:0c:37:1d:98:19:80:a9:99:fb:a6:a3:15:c7:89:9a:a6:
06:e4:ba:82:69:b7:80:d0:23:9f:d8:be:e1:78:79:06:50:be:
6f:7d:0e:1f:67:5c:ef:e9:ce:57:d2:e9:8b:a3:e2:61:6c:01:
bd:52:5e:99:f3:de:b8:26:56:0a:ce:84:4a:35:3f:65:23:ef:
df:d9:df:48:bc:d9:5b:8e:48:98:32:56:4f:8f:30:31:ee:4d:
47:92:a2:f5:1f:3d:ad:a9:8b:95:b2:20:db:95:dd:dc:dc:a0:
08:c1:62:f9:0c:73:6d:74:6b:91:4a:28:1c:8f:b3:7b:c9:ad:
74:77:87:21:31:68:fb:40:4b:5b:f0:92:d7:93:63:60:b3:33:
32:e2:23:18:78:a6:f5:47:e2:63:eb:79:0f:36:c4:1c:5e:6e:
a6:78:b2:16:6b:55:21:b3:2c:b5:37:06:67:f9:20:3a:d4:d9:
56:0a:c5:a8:a2:34:6c:8c:58:6c:3a:98:0d:dd:4f:0d:fb:e3:
b2:9e:ed:39:b7:59:ad:0c:95:f1:1a:1f:55:1c:ba:01:34:8f:
92:a2:23:8d:bf:7c:d8:69:dc:19:6e:b6:d1:49:36:a6:cb:03:
d0:a5:52:2a:c3:b4:6e:29:ee:39:3f:b0:f3:36:39:16:a8:d7:
93:39:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:44 2026 by rpki-client