Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: JQZC7RhWeSXipVbW39++t63Jpd+2OKEIfiEo/9m9kc8=
Subject key identifier: 52:D9:27:3F:F5:0B:75:FB:6D:ED:E7:29:0E:98:BE:BD:1D:7F:6B:82
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019CAB33DE32BEC6226D15DA7BE70170C1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: 0mSbJudsm3h8c2nZ1DIthnCP3qrnYKimf0EbEE+GjR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:de:32:be:c6:22:6d:15:da:7b:e7:01:70:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=52d9273ff50b75fb6dede7290e98bebd1d7f6b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:41:e2:51:f8:58:34:1a:8c:76:e6:b4:f9:
a1:46:a3:f5:65:48:e5:02:f4:96:5f:90:c4:79:6e:
6b:2a:02:e2:cb:6f:66:6b:af:fb:a1:09:91:3e:84:
78:79:6b:2b:7e:42:10:f8:2c:99:b3:11:38:92:27:
7d:4c:87:6e:fe:88:e2:e7:00:8f:5c:6d:a4:51:4d:
20:c6:1b:7a:bf:56:d7:44:55:32:6c:c6:33:72:f5:
e2:50:f5:a6:fc:c0:da:2e:8f:b7:87:b7:96:5b:b1:
92:a4:6c:1a:39:44:53:bc:ea:bf:19:fc:30:c5:07:
d1:23:9c:7c:9b:7d:4c:8d:61:d2:28:b4:a8:94:4b:
50:1a:71:67:3b:b6:a1:1d:3b:a7:75:ef:b2:83:06:
16:d6:fd:09:43:41:ce:af:8b:f5:81:8b:35:d6:d4:
7e:e6:fc:e8:98:8b:8f:5d:48:e7:0a:2e:21:e9:ea:
9b:f5:44:a0:2f:c0:ad:d4:14:16:e4:dc:5d:0e:9d:
1f:a3:9b:6b:8c:d2:66:75:65:a0:cb:3e:3b:a9:0c:
22:27:85:12:67:45:3b:35:35:d5:6f:f4:10:b7:d6:
99:07:b1:59:8c:b5:e2:82:f4:e4:0c:9a:0a:6a:5b:
9d:5c:cc:0b:7d:67:c1:60:53:83:2a:8d:9e:43:37:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:27:3F:F5:0B:75:FB:6D:ED:E7:29:0E:98:BE:BD:1D:7F:6B:82
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:21:5f:20:a0:58:0a:ce:71:cd:6d:25:7b:81:1f:5e:c1:
77:c3:39:11:9c:10:d9:66:21:7b:45:c7:db:74:6e:b3:7f:0e:
5f:fd:df:f1:45:95:0d:cc:4c:d7:a3:64:8c:7a:53:6a:0c:ae:
f8:f7:66:f2:fa:b4:71:0f:85:71:00:0a:14:36:35:10:6e:61:
2a:c4:46:b6:0c:0f:c9:83:bd:ab:f4:a3:07:50:1d:45:c5:1d:
39:f8:e9:d8:d0:50:47:b0:c2:1a:a4:e9:ab:8a:c5:84:8d:be:
20:3d:0a:7c:83:f8:47:24:80:33:e7:e1:0b:83:f0:b3:04:d2:
da:a1:63:ad:c1:7d:e1:bd:04:4e:1d:45:82:4e:fa:67:2e:92:
e0:e9:ce:7b:e7:58:30:f2:c2:8a:f2:50:55:50:05:6c:58:fc:
04:36:06:82:dd:aa:c3:9b:cc:ad:d8:f9:e3:c3:04:ff:a6:92:
b5:56:8b:b2:73:23:6a:dc:54:65:5e:3e:f4:4b:7b:e5:04:0d:
10:bf:74:ed:bd:ac:2a:60:f3:f7:2f:f4:a4:de:11:d3:b3:7a:
15:63:16:34:3b:fc:c8:d4:77:28:bc:39:a0:01:3f:65:35:66:
35:3d:00:85:81:37:d4:95:e7:54:7f:ae:74:63:fa:4b:f9:d1:
a6:d5:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:40 2026 by rpki-client