Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: hCKl4vaSXI1sdzD++SZhOnsUQrLlPSS2rq6HV3MoGCA=
Subject key identifier: BD:0F:4A:32:99:74:32:72:4B:24:3A:6A:D3:EC:A6:BA:21:2F:63:6D
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019CABD9E91D149FBD187590072C7B4E28B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: f1CWm2x9NEP9XJ6QJ3/T/9rLyp5ryNQfTat67pB0qXo=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e9:1d:14:9f:bd:18:75:90:07:2c:7b:4e:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=bd0f4a32997432724b243a6ad3eca6ba212f636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:7f:72:f0:34:97:7b:a7:99:c3:35:f9:81:
a3:de:7f:55:bc:2c:b5:c3:50:2a:db:1e:cd:24:91:
19:5c:3e:95:75:fb:9b:1f:4b:e8:5d:69:3b:fb:d2:
e2:46:ef:08:40:e8:75:27:f8:11:db:1d:38:86:29:
9c:58:77:e2:c0:62:68:c7:c5:85:e2:fc:2f:a7:bc:
3a:6d:ea:f3:09:88:7c:9b:f6:d6:24:07:20:91:0e:
f5:e8:29:94:93:6a:aa:52:64:1f:86:f9:ef:0b:31:
80:f0:fc:ed:8f:23:5f:7d:1a:52:fc:c7:9f:aa:33:
76:d8:00:d0:7f:55:b0:59:fd:51:ce:ec:cb:80:37:
7f:de:1a:44:1e:da:ce:93:fb:29:02:79:dd:1c:28:
f4:52:c9:cb:12:d2:ca:c7:6c:63:97:93:00:d2:87:
71:d0:78:14:dc:8d:de:b9:8f:ec:a6:72:66:05:2e:
9e:ed:47:2e:05:ce:c0:23:01:25:fe:50:4d:84:d4:
af:5c:b3:11:b3:17:93:5c:8e:21:fa:8a:c5:0f:a4:
52:39:3c:89:55:84:cc:04:27:b7:52:d5:ca:de:f6:
68:f6:e7:16:3c:7e:a3:46:d2:4f:df:7b:39:28:d7:
92:ea:27:5c:53:5d:5c:07:3f:4c:7c:6b:e6:98:8f:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:4A:32:99:74:32:72:4B:24:3A:6A:D3:EC:A6:BA:21:2F:63:6D
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:71:fa:8d:55:8f:28:74:28:03:1d:a7:ee:32:87:c7:20:42:
2c:19:98:57:6b:9d:a2:3e:92:3f:4f:08:76:0f:bc:d4:83:ed:
0d:a4:ba:ec:6d:82:2f:5f:4b:e2:52:fa:f9:13:d5:e3:52:ff:
79:b3:94:42:2d:cb:3b:fd:04:b1:6a:5a:8e:c0:1f:f4:ba:a6:
08:31:08:7b:69:a4:8c:b6:55:1e:6a:a7:36:03:ef:d0:ce:35:
2a:e3:df:a5:fb:d4:a1:8b:c3:82:b1:7f:70:d7:e1:80:3f:fc:
a4:41:80:0b:56:fb:51:b5:e6:d3:39:d1:c8:72:35:9d:53:a4:
01:d2:3d:19:99:96:9f:56:7a:5f:d6:83:ea:41:a9:76:21:e8:
0c:81:5b:19:14:b2:84:b8:c8:b1:47:d7:05:d6:eb:da:28:e2:
ae:44:05:50:ad:b5:f7:44:eb:72:25:66:c2:43:df:38:7a:94:
d1:1e:2b:3b:8f:ea:8f:97:cd:80:a0:90:9a:53:cd:0b:1e:d0:
a5:56:3e:a5:a3:9b:86:3b:6b:2c:48:91:70:80:0b:11:f8:e2:
e5:5d:ce:2b:f4:df:da:f2:a8:db:60:87:f5:d7:16:28:f4:c5:
01:34:43:68:25:8a:da:b5:77:8a:b6:2d:eb:8a:a3:b1:d5:b8:
13:91:73:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ekdFJ+9GHWQByx7Tii1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD
EyhiZDBmNGEzMjk5NzQzMjcyNGIyNDNhNmFkM2VjYTZiYTIxMmY2MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OJ/cvA0l3unmcM1+YGj3n9VvCy1
w1Aq2x7NJJEZXD6VdfubH0voXWk7+9LiRu8IQOh1J/gR2x04himcWHfiwGJox8WF
4vwvp7w6berzCYh8m/bWJAcgkQ716CmUk2qqUmQfhvnvCzGA8PztjyNffRpS/Mef
qjN22ADQf1WwWf1RzuzLgDd/3hpEHtrOk/spAnndHCj0UsnLEtLKx2xjl5MA0odx
0HgU3I3euY/spnJmBS6e7UcuBc7AIwEl/lBNhNSvXLMRsxeTXI4h+orFD6RSOTyJ
VYTMBCe3UtXK3vZo9ucWPH6jRtJP33s5KNeS6idcU11cBz9MfGvmmI8v/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0PSjKZdDJySyQ6atPsprohL2NtMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHH6jVWP
KHQoAx2n7jKHxyBCLBmYV2udoj6SP08Idg+81IPtDaS67G2CL19L4lL6+RPV41L/
ebOUQi3LO/0EsWpajsAf9LqmCDEIe2mkjLZVHmqnNgPv0M41KuPfpfvUoYvDgrF/
cNfhgD/8pEGAC1b7UbXm0znRyHI1nVOkAdI9GZmWn1Z6X9aD6kGpdiHoDIFbGRSy
hLjIsUfXBdbr2ijirkQFUK2190TrciVmwkPfOHqU0R4rO4/qj5fNgKCQmlPNCx7Q
pVY+paObhjtrLEiRcIALEfji5V3OK/Tf2vKo22CH9dcWKPTFATRDaCWK2rV3irYt
64qjsdW4E5FzCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:08 2026 by rpki-client