Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: EEazT/HyW99rGkGEus1Pch4d96KQkyAORN9kggT5pPM=
Subject key identifier: 6A:84:6C:53:61:6A:02:D8:CE:3E:90:C1:7F:88:80:14:09:D5:C3:01
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019CAE6BD541B1D81DE8D2F1CF33620242F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0D23
Signing time: Mon 02 Mar 2026 12:00:28 +0000
Manifest this update: Mon 02 Mar 2026 12:00:28 +0000
Manifest next update: Tue 03 Mar 2026 12:00:28 +0000
Files and hashes: 1: gISB5XKycKPv5hrE5ng7DwaTFZs.roa (hash: sJhtL2wlmJpjXzVIWne8fY+2r1IBnfbZ2BjwXpNs+R8=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: QbmevIhlHOl3iVMd1KRxlm/Wg4UIj/he0FoPB6P81VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:d5:41:b1:d8:1d:e8:d2:f1:cf:33:62:02:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Mar 2 12:00:28 2026 GMT
Not After : Mar 3 12:00:28 2026 GMT
Subject: CN=6a846c53616a02d8ce3e90c17f88801409d5c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:91:c4:34:e6:2e:f7:f5:86:e0:1a:66:45:
fc:e4:37:57:56:b6:40:dd:9c:13:25:e8:21:c1:14:
ad:a6:24:5d:1f:b0:f5:bf:5f:cc:25:14:3a:22:e9:
a3:e2:14:ad:2a:86:31:3f:a1:72:5e:60:5e:25:b2:
48:26:bf:b5:c5:f6:3f:c6:70:8d:b0:49:c4:1d:2d:
86:ff:f4:99:99:7e:4e:83:be:20:2e:65:8e:b3:88:
4a:35:3b:50:c8:03:d6:80:54:8a:a9:25:ec:23:94:
f9:69:71:bc:3b:72:23:a1:bb:d1:71:9f:de:db:9b:
fc:1b:a5:ed:01:8a:3f:7f:cf:59:6e:0d:e0:3b:17:
88:59:fe:a7:cc:9c:a8:0c:2a:6a:15:33:49:68:b4:
6b:dc:4a:91:8b:42:8b:ed:0a:f2:c6:ea:21:87:87:
93:be:c4:ef:d8:61:08:d3:ae:9f:7f:55:c3:de:b2:
d1:19:09:f2:f8:f0:b2:03:b0:b5:1d:7d:f7:43:8c:
52:3b:b6:c3:e3:d6:8c:88:2d:1f:5e:2b:23:41:47:
37:a0:b4:8b:fa:33:0d:57:a1:bf:65:41:9d:c3:72:
79:40:11:c8:f0:ef:25:15:7d:47:5c:27:75:d0:3f:
94:97:38:3a:fc:9a:15:42:1f:32:3a:cd:d4:03:76:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:6C:53:61:6A:02:D8:CE:3E:90:C1:7F:88:80:14:09:D5:C3:01
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:d8:65:8b:09:85:d7:d9:ad:03:89:04:31:0a:58:c5:d7:
a5:80:59:05:41:72:af:2a:07:b0:55:30:2a:6a:06:7a:53:b7:
64:f8:0d:88:ee:5d:cc:0a:4f:fe:88:e4:f9:39:b5:d4:05:5d:
24:24:06:17:cd:bf:0c:d4:b3:0d:ea:84:12:7c:bf:43:20:47:
10:04:71:b0:51:7e:e9:c3:84:c1:8d:88:b4:46:ec:15:b4:e5:
ef:ef:c4:44:c1:45:d5:f9:a1:96:ec:aa:46:7e:b3:31:3d:27:
c8:6e:9a:7a:de:f6:7f:f8:93:69:8d:db:40:9d:d0:94:4e:fd:
27:8d:e1:5a:6e:77:af:48:d8:1d:ea:21:0c:45:54:46:5b:d6:
b5:97:6f:9a:90:3d:b7:cb:bc:fe:e0:cb:2b:58:19:d2:d0:56:
58:67:4f:6e:24:c2:3f:6c:e7:60:09:88:74:05:3a:f2:95:cc:
0b:58:94:ff:f5:50:24:bf:01:dc:7c:46:cf:26:69:14:20:e8:
d5:cb:f0:43:0d:66:db:c7:1f:c7:16:f3:dc:78:82:6b:3f:51:
38:7a:3f:f1:00:ce:50:33:e5:f7:23:56:09:d7:c4:45:2d:27:
fa:8c:32:89:33:63:bf:03:1f:46:1a:d2:be:01:7a:dd:d2:75:
3a:19:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:16 2026 by rpki-client