Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: +2JSmXNLqVnFmR0PZQq0/HWzhMj/8xBs5AvTolYkT7I=
Subject key identifier: 61:E7:EC:8C:CA:6B:1B:E7:95:DD:F6:73:0A:25:31:A7:B2:B2:C2:78
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019CAB6B530EA2F941D9E0D36DC8425BF68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0B63
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: AedgcNL8Ig_vUhjnBiaFjptK-_w.roa (hash: MX7QqsHI59rsb+txANol5zSV6ybo4HBl4AZOtA8MFPQ=)
2: RH-_P69EnY_CfaPrSpeX5TNaUIk.roa (hash: Kh8dA74PAzmGIT95EUvW7CM2vVdmLwl1/1xo5k7UCuA=)
3: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: UudV09Y1aq3VpLSxROVv8aMunPeJJzmwv8q+sEYyp/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:53:0e:a2:f9:41:d9:e0:d3:6d:c8:42:5b:f6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=61e7ec8cca6b1be795ddf6730a2531a7b2b2c278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:67:2e:2f:f8:e4:b7:2b:cc:41:89:05:4d:
6f:01:f6:50:5d:1e:50:5e:ec:90:24:50:64:b0:d6:
58:99:8a:09:78:d0:f1:5d:2c:cd:34:40:3c:c7:da:
f4:6b:fd:40:c9:4e:5f:3f:9a:1f:6f:28:4f:b0:a0:
24:d9:f3:54:fd:d5:40:76:eb:e9:bf:f2:74:51:af:
9a:8d:1a:1e:45:47:48:75:36:66:da:d4:b0:fd:aa:
b2:a8:56:54:1a:9f:f2:9c:9c:95:31:14:ba:5e:90:
34:ad:6b:13:6b:51:ff:71:b2:9b:47:94:46:b5:ef:
00:31:50:6e:9b:34:2f:bb:ba:7c:0a:10:0b:78:c1:
92:d0:1c:98:a8:f0:cb:1f:40:95:8d:c9:3f:1c:27:
82:32:d8:d4:c1:93:1e:11:1b:9c:cf:48:cd:45:72:
32:46:ff:1c:6e:aa:66:d4:2d:4f:e1:13:bd:b9:a3:
f5:31:28:d4:7e:53:8f:29:55:15:70:ee:0c:34:f6:
62:6b:14:ce:a3:34:b0:69:5a:97:2e:3f:7b:00:0d:
ef:b0:c0:ea:51:a4:8d:c4:13:b6:db:10:14:04:35:
a9:7c:c3:2b:90:57:b2:57:cd:12:12:21:4f:bb:a9:
17:36:85:97:79:03:6f:1b:4b:07:03:e3:b7:83:ac:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:EC:8C:CA:6B:1B:E7:95:DD:F6:73:0A:25:31:A7:B2:B2:C2:78
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:06:08:ee:a0:9f:7d:ee:51:e6:18:15:07:84:23:98:f0:c4:
6e:31:43:67:ca:e0:b7:9b:a1:ca:db:5b:a4:fe:35:86:7a:38:
d7:1f:15:5d:4f:a2:1b:dc:56:c1:8d:56:79:38:14:75:29:c0:
29:5d:19:af:fb:1a:d9:f5:a9:6f:6c:6d:89:1b:cf:ed:12:de:
ab:85:d1:26:0f:93:1a:39:c4:46:c6:32:59:fd:1d:79:17:c4:
97:5f:28:1f:3b:a0:e5:a0:cb:ba:6b:d6:b0:24:b1:79:be:22:
8d:ff:4f:57:20:c3:37:7d:0a:9b:25:86:d1:41:5c:d4:aa:15:
7d:10:33:af:36:47:77:e7:0d:65:d9:65:e3:2c:c1:d1:60:6e:
1f:39:17:3a:9f:cf:4a:8d:3e:56:7c:83:3b:ed:d2:e5:58:e0:
0a:19:5f:be:bc:9b:3b:03:47:39:bf:f7:29:0f:db:b7:e6:42:
34:ad:b2:7c:8e:23:9e:e7:8d:99:59:48:68:c0:96:c3:e1:26:
93:09:e9:25:90:48:38:ee:c0:4d:b8:0d:a6:58:f8:c6:69:d5:
35:15:69:01:72:48:26:58:5f:bc:a5:de:bf:bc:a7:ff:09:dd:
32:95:35:16:fc:e9:ab:d2:22:29:a0:83:26:12:a8:ad:d7:e4:
3c:f7:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:44 2026 by rpki-client