Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier: HtF8znftSX2ZCoalYZaPEpKlabUw0mQkR9tTUT7LCU0=
Subject key identifier: 1D:18:15:F7:EB:62:85:12:EA:35:A7:95:F6:97:4E:96:B5:7B:D0:7E
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 019CAAFD2EA14B5EB5A7BB4F4A655C8B4AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number: 1771
Signing time: Sun 01 Mar 2026 20:00:45 +0000
Manifest this update: Sun 01 Mar 2026 20:00:45 +0000
Manifest next update: Mon 02 Mar 2026 20:00:45 +0000
Files and hashes: 1: QX-Yd6enYEasfQySbQcOpc-S1R0.roa (hash: l4a+bU8pCXlKF2s60/wU4ac6DKkHq3Tb0TMI5WXKiic=)
2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: GaaQ1tiAy91T8zMO7BNjnXMp7y8Su+zIOuFUC/ENfqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2e:a1:4b:5e:b5:a7:bb:4f:4a:65:5c:8b:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Mar 1 20:00:45 2026 GMT
Not After : Mar 2 20:00:45 2026 GMT
Subject: CN=1d1815f7eb628512ea35a795f6974e96b57bd07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:87:e7:64:81:aa:31:a9:bb:5c:de:84:d9:
64:12:15:ba:dc:bb:92:a3:c8:07:a2:47:6e:cc:b2:
2d:2e:c1:d5:66:0d:b7:79:00:f8:04:f3:be:a7:28:
42:d3:8d:db:20:8c:75:17:47:48:27:03:77:cd:d6:
9b:a8:1b:c2:42:50:59:71:44:33:eb:2c:71:7b:dc:
5b:6c:d4:83:30:7e:ee:70:9f:4b:06:4b:5c:46:a4:
1b:59:ae:97:a9:40:80:4a:5b:a5:2d:6e:79:cc:ab:
6b:19:6c:96:53:fb:eb:ad:80:4e:2a:cc:e6:9b:6b:
92:a5:3c:4a:ad:66:63:4e:d7:7b:ea:52:66:32:6b:
4b:f1:82:f0:5f:ee:e6:a0:35:a4:18:11:7b:a9:6c:
93:e5:f9:b2:b8:d3:66:c4:70:c0:d2:d2:ea:5a:4a:
ec:5b:86:73:12:7e:18:ef:85:a6:2c:9d:29:d0:28:
72:d6:fa:79:b0:cc:34:1f:e3:c6:e0:43:75:dd:0d:
0b:68:a9:90:20:a8:a1:e9:c4:19:18:a1:ed:33:1f:
77:ce:da:e3:9a:1b:3c:bc:55:09:6f:b5:50:f6:dd:
4c:e5:0b:4f:61:56:80:9f:25:c1:68:5e:0d:24:e3:
fa:cf:1c:53:65:b1:33:be:c3:d2:54:3a:e8:19:ea:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:15:F7:EB:62:85:12:EA:35:A7:95:F6:97:4E:96:B5:7B:D0:7E
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e0:64:86:68:cc:ef:12:b4:e7:6c:15:28:bf:8f:a4:dd:51:
6f:38:61:6b:fd:8c:76:3f:ef:da:1e:a0:23:bf:c5:e5:0d:45:
f6:de:bb:6c:63:72:46:87:8e:33:87:a6:e2:27:86:a3:b7:96:
8e:fb:72:82:2f:2c:1e:6e:33:06:be:5b:5a:35:04:0d:58:c0:
2c:73:a1:ea:fb:df:38:46:b7:1a:d3:a3:4a:44:98:0b:43:fd:
6b:b5:4c:04:a4:2d:e7:5c:18:3d:2a:77:19:49:91:3b:a7:cf:
43:32:70:c2:62:61:52:0e:4d:12:91:ff:f4:d5:9d:41:6e:eb:
bf:f1:02:df:f8:5c:66:ba:5e:32:a2:00:93:6d:50:c2:a9:c5:
c4:34:e9:aa:f9:0c:9f:e8:ef:c3:77:01:41:69:fc:c2:32:26:
4e:32:85:bf:50:df:e7:54:34:ca:30:28:56:c8:6e:8c:10:d2:
d5:da:e0:33:54:b0:22:57:c7:fc:fa:16:e4:47:fd:d9:d1:1c:
07:90:41:2c:46:d3:79:e9:e8:db:15:31:9d:22:87:eb:3c:c1:
d4:ac:59:89:f7:49:36:87:7e:52:9d:ca:ae:c4:bc:11:98:6e:
8e:6d:04:ec:1b:41:b7:7c:89:99:f0:38:81:9e:a0:b1:27:46:
c2:53:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:11 2026 by rpki-client