Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: RRnDPN52JNq44QVVCIxVX6+Nn2/1Eon4yRW4y9HCyzs=
Subject key identifier: 7C:68:3C:F3:59:94:FD:1B:2E:D1:A3:96:1C:03:D1:92:5C:17:18:AD
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019CAC7E3D559CE9B1BA965B9E1D9E085A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: 1w-DEGovWlGeUvxZrEhAkhZFri0.roa (hash: erRkVrb3pyj6Yu2qx5hIETEqq580z4OTzTDEWJgauCE=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: xKkqc3iTnyYH4hvfLjH+hGx49GcOFebY/XPbqqE35nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3d:55:9c:e9:b1:ba:96:5b:9e:1d:9e:08:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=7c683cf35994fd1b2ed1a3961c03d1925c1718ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:ae:62:8b:23:51:92:53:b5:ca:2a:94:a6:
49:11:e3:66:a1:39:a7:59:6d:0d:3b:1f:84:e5:44:
50:97:1f:28:56:11:3d:5f:08:04:cc:e6:cc:7f:28:
8a:79:a5:34:cd:dd:0c:e2:fb:70:bd:8f:f9:5c:30:
d7:12:49:58:ea:b8:d2:98:07:40:19:f4:9e:21:d1:
34:9e:5b:ef:70:5f:23:89:1e:fe:a3:65:5b:13:f8:
fc:1f:a0:a5:f6:5f:50:ac:e4:cd:6e:2a:1a:26:e9:
84:66:da:f1:eb:38:9a:49:77:ad:4d:fb:ff:3f:8b:
d6:ae:68:3a:74:a9:45:7e:d8:69:8e:54:68:07:b8:
2d:18:40:17:f8:58:15:ba:97:c9:b2:90:8f:f5:7f:
9a:f0:66:3a:7a:47:07:18:6e:0b:e5:fa:29:57:de:
b9:1a:e8:61:7f:78:41:77:65:89:03:2f:cc:cf:2c:
3e:5f:bb:2d:66:6e:29:79:4a:07:8e:32:1b:13:cb:
87:e7:56:1e:48:1a:2b:b7:ac:6e:5e:8a:e4:ec:a6:
01:30:0f:93:de:b2:9c:23:df:a6:b9:ef:93:fd:cd:
8f:b5:1f:17:74:68:a9:6e:3f:af:c6:ac:ca:d4:d7:
2c:ca:78:86:88:ed:22:8a:76:7c:00:23:a3:8c:03:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:68:3C:F3:59:94:FD:1B:2E:D1:A3:96:1C:03:D1:92:5C:17:18:AD
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b5:37:20:c4:c1:ac:8e:ae:d8:f6:da:60:52:b9:46:3f:ac:
ef:22:a9:79:58:1f:7e:52:a7:5a:a4:67:84:80:b5:1d:98:ea:
7c:73:a5:46:42:c7:a6:8f:fd:80:1f:b8:fc:d0:3c:0b:08:9c:
9d:49:62:54:f3:8d:99:83:81:be:76:27:dc:fe:d2:8a:f0:98:
e0:e4:c2:a1:a7:e3:45:69:00:7a:bf:8b:d0:2f:2d:23:2e:ac:
e1:d3:1a:37:ae:d4:6c:5b:94:06:a8:2e:b1:93:3b:aa:45:b8:
7b:10:fa:00:c5:c1:50:a7:3e:25:71:a3:05:02:18:71:b3:f8:
7d:0b:52:59:94:ad:70:2a:6c:9c:e1:9a:54:0f:9a:a3:e9:89:
e0:62:2f:87:c6:db:b5:d3:87:f0:5c:8e:16:d0:9c:ac:ce:d8:
c1:dd:59:9f:cf:a4:c7:ff:cd:d8:df:ce:c7:58:0e:05:4a:76:
6c:06:87:ae:be:d1:fc:5d:ba:cc:f6:fb:4a:ea:28:cd:c3:67:
88:d0:2d:f9:b1:ce:1d:6e:e9:11:b9:4b:27:71:c3:e8:d0:9f:
50:5a:64:41:4c:35:89:6b:99:05:79:fd:6b:93:ad:36:e6:56:
fa:f7:28:15:06:4c:12:1e:8f:c8:09:00:b5:18:2d:ee:83:6b:
1d:cd:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:38 2026 by rpki-client