Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: A7BqeilgOYniDetJzEWz99Fl4tvPuDgezH0cVjqb3CU=
Subject key identifier: 8C:F6:62:BF:74:0E:63:11:6F:B3:6A:3E:72:E8:78:DF:41:B1:43:E6
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019CAA2151C947452B63639AE33D1D51E4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 08D5
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: BwXbiOo4RjFVj5Dj5ubs0OzhTEg.roa (hash: D/nZqGZDiargJ1WjN4WGCYH05fUuLBJs9tc1eSlRvy8=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: qAk1GJAzajGsoxnhMkkxNo/HifGOAVbMh5ID7E+qBEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:51:c9:47:45:2b:63:63:9a:e3:3d:1d:51:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=8cf662bf740e63116fb36a3e72e878df41b143e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:2a:fe:c0:5a:f1:b0:21:64:d5:60:67:44:
90:28:7c:91:92:63:db:46:0d:eb:f0:9f:d4:75:70:
22:b1:5b:eb:57:71:c2:9e:ed:54:45:a5:17:0e:60:
cf:74:94:99:b2:fe:16:ea:2f:7a:cd:cc:86:1c:16:
0f:ed:44:2d:7a:ac:8a:92:77:20:ad:ae:e1:e1:34:
c1:df:6e:15:6c:90:7d:d3:ff:03:9b:1b:00:d8:ef:
4b:78:17:f5:b6:1b:81:3b:a6:25:40:ca:48:c6:e0:
81:7d:69:c8:ce:59:d3:2d:16:84:63:60:cf:c2:6b:
b5:18:c3:c4:2e:11:91:86:bc:72:36:6e:79:15:eb:
b3:a3:64:51:b2:d5:1f:e9:bf:6d:ca:3c:db:5f:f6:
e7:a2:6c:5a:61:38:58:45:89:b7:e1:77:7a:c9:88:
e2:e6:69:ee:0e:a7:be:a9:17:8c:be:d4:68:cf:c3:
74:cf:16:f5:ac:b3:9f:d1:01:ee:34:66:fa:3e:b9:
76:ca:ee:93:2e:d4:f6:be:f6:ef:b5:e4:42:c8:a5:
98:e5:83:71:ef:e3:74:4f:a8:0c:13:5b:80:5c:2a:
44:97:56:96:d1:a7:a7:5f:12:96:9c:fc:92:20:3b:
0d:df:2e:25:bc:ef:a9:fa:93:2d:92:37:34:95:d1:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:62:BF:74:0E:63:11:6F:B3:6A:3E:72:E8:78:DF:41:B1:43:E6
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:7d:41:9e:6e:12:b8:25:a7:fb:54:f7:f0:65:a4:6e:9a:
0c:df:9a:83:cb:33:fc:79:38:e5:97:95:51:c6:54:46:66:22:
d8:e4:bd:b8:44:9f:20:c4:cf:fc:7d:9d:a7:0f:77:56:e2:de:
6f:4e:2b:42:a8:38:97:d6:39:71:12:ad:bd:99:4e:ec:8e:b5:
0e:92:dc:2a:03:ae:fb:40:2a:b8:55:ce:7a:d4:a2:70:60:d9:
7e:3a:4a:83:80:d8:a3:8c:c0:d9:31:78:bb:55:c3:a9:ae:6b:
a8:d7:42:09:71:3f:5b:27:c1:bc:6e:1c:f1:11:39:b6:4f:8a:
53:bb:3f:d1:56:d1:7b:f3:a0:be:59:d0:e6:55:c9:67:42:87:
66:01:c3:40:58:42:9a:d6:8e:8d:8d:8c:73:22:af:c5:8a:2e:
28:ee:75:c6:dc:c6:bd:07:5f:86:b7:8c:a3:87:5e:77:7a:6b:
32:e7:f0:49:b5:10:12:4f:22:3d:5b:56:16:c0:f1:e4:a6:87:
56:8c:f1:6b:15:f3:bc:11:a2:97:79:5f:71:8a:13:60:42:88:
91:3e:1f:da:88:97:1d:a2:f2:49:f3:d9:ad:00:8f:d5:9e:b2:
a9:5f:23:d4:70:b4:97:55:83:78:6b:09:bb:62:9a:17:80:83:
44:69:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client