Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: cHBtnRhNzRPhaTD0cjg4ls2hLNfNOKano9oEe9pjDaE=
Subject key identifier: CB:27:8A:41:FF:88:87:0A:57:83:5D:61:0C:FF:C2:B3:3A:F0:B7:76
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019CAD22DD0F5A9AEAEE857A9A03F0BFFDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 091E
Signing time: Mon 02 Mar 2026 06:01:08 +0000
Manifest this update: Mon 02 Mar 2026 06:01:08 +0000
Manifest next update: Tue 03 Mar 2026 06:01:08 +0000
Files and hashes: 1: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (hash: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: EXoehNH5TJkeSdn89HGlRuOUtvIU5b2Ds2aIS6Ak578=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:dd:0f:5a:9a:ea:ee:85:7a:9a:03:f0:bf:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Mar 2 06:01:08 2026 GMT
Not After : Mar 3 06:01:08 2026 GMT
Subject: CN=cb278a41ff88870a57835d610cffc2b33af0b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:f7:7a:bd:a6:d7:18:1c:70:d7:31:59:dd:
e4:88:2a:6a:9e:1c:75:ed:70:36:6c:63:0a:43:b3:
00:6e:30:c7:9d:b8:6f:ab:80:4a:40:27:b4:a6:16:
29:6a:b2:2b:97:48:d0:01:73:99:ad:23:22:87:8d:
41:e5:d8:b5:6b:83:60:3b:b6:f5:11:9f:5f:24:2f:
33:3a:ec:d4:1b:54:9f:b8:d2:73:05:43:e8:13:5b:
3d:1e:23:d6:95:a8:d1:90:1c:24:9a:7c:9a:82:61:
1f:05:75:60:b9:5d:5a:c9:b6:aa:c6:3d:27:10:37:
78:0c:2f:b6:15:cb:1e:32:ab:c1:fb:d2:ba:13:a8:
95:cd:ec:2d:8a:10:5c:a0:24:11:9d:f5:91:51:dc:
9a:50:fe:5d:a3:2b:58:7d:00:33:4a:2e:5d:96:df:
b9:d8:42:ae:f9:bb:ad:a4:e6:0e:bf:f3:ee:d9:f7:
22:30:60:98:02:65:61:bc:46:dc:1e:29:41:69:a5:
a2:d5:84:e1:2a:46:f5:e0:aa:2a:5f:e1:00:6d:ec:
5d:09:b6:19:f1:1d:44:a9:0f:69:d2:fb:a6:aa:8c:
31:55:82:0f:6d:b3:61:18:f4:21:c0:a4:87:41:46:
1f:47:a4:c7:c4:23:11:f1:cd:63:ab:43:87:52:9a:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:8A:41:FF:88:87:0A:57:83:5D:61:0C:FF:C2:B3:3A:F0:B7:76
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c8:e4:59:29:dd:88:ad:ee:0d:a5:6d:8b:67:f7:ff:da:ce:
ca:3c:92:57:e1:23:94:57:4e:8d:da:89:39:54:13:3b:4e:25:
7c:e8:03:03:f1:8a:2a:bf:1c:de:62:fc:61:50:a5:68:93:24:
58:d4:f2:e2:2c:05:5a:65:4f:af:c6:0a:19:c4:40:3f:20:38:
da:9e:25:93:80:8c:87:ed:a4:9b:b9:d8:e0:80:f7:8c:85:d9:
96:20:09:4f:3a:5b:9e:60:b8:eb:c7:a2:e9:20:79:22:03:91:
3d:b6:30:ed:b1:f8:bd:2c:f0:aa:50:e3:94:42:12:a7:00:8e:
19:66:18:4e:17:25:33:22:67:12:52:54:ff:78:52:f1:97:4b:
76:b6:76:a8:d6:bf:26:eb:2c:a4:9b:23:18:13:02:d4:07:d3:
a5:8b:25:c3:da:db:d3:63:aa:d2:30:71:a3:aa:8d:83:ee:f7:
02:28:85:dd:e0:f4:f3:5b:87:71:f1:72:e5:27:0e:84:a5:cc:
7f:9a:60:8b:e8:56:d3:05:a4:52:57:5d:4b:8e:f9:75:8b:6c:
29:35:e4:43:45:e6:cc:66:72:d9:23:90:d4:ce:76:c8:44:02:
96:2b:7e:a8:26:b8:37:f2:69:8d:8d:06:cd:0a:55:b3:0b:26:
c6:41:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:41 2026 by rpki-client