Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: n2IWUAI8iZ+eP53uuzeG3CPvWW/ovqP+mwPeFpPCkHM=
Subject key identifier: CA:48:4D:23:CA:29:A6:C7:C8:50:96:48:E6:D9:EE:EB:9C:99:D7:C5
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 019CA9EADEF768B47AA1CFFDB6074BEA29FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0BA3
Signing time: Sun 01 Mar 2026 15:01:07 +0000
Manifest this update: Sun 01 Mar 2026 15:01:07 +0000
Manifest next update: Mon 02 Mar 2026 15:01:07 +0000
Files and hashes: 1: VhcZAOMO7N09LPQIiVy-ZSyhJt8.roa (hash: YOyQI4AeCxujnK36EwQ68GRZtvK8FNB5/s4x1q9BUjk=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: KKUXI2XlOsivbF0aGdOqqEEG/NaImRYDn4hXfrjAqYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:de:f7:68:b4:7a:a1:cf:fd:b6:07:4b:ea:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Mar 1 15:01:07 2026 GMT
Not After : Mar 2 15:01:07 2026 GMT
Subject: CN=ca484d23ca29a6c7c8509648e6d9eeeb9c99d7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:de:43:25:ed:ad:54:cf:c1:19:bc:4d:7e:
ed:57:55:fd:ae:f3:67:4a:0f:01:23:a2:a4:2e:09:
17:ca:0a:73:27:df:29:b7:1e:51:9a:d1:86:28:85:
70:a2:69:19:d8:05:3a:f2:87:a3:db:e0:27:85:3e:
b0:83:df:0d:53:79:17:94:45:8a:11:8d:a0:35:1d:
14:07:ac:25:80:f0:d5:fb:62:05:f3:e8:21:8b:6c:
c0:a6:6b:46:fe:fa:b0:99:c7:12:6d:19:92:c8:e1:
db:21:32:ef:b9:3b:12:df:98:1b:be:bd:72:b7:19:
93:ec:1d:4a:ae:ea:79:a8:02:d9:77:6e:35:e4:be:
38:fa:e6:d7:47:93:03:cd:c5:0f:fc:72:1e:95:66:
60:99:89:a9:56:e2:6e:f3:4c:ea:82:72:1b:ef:0a:
7f:4a:46:8e:88:e5:01:3e:9a:20:d3:8d:15:96:2c:
57:44:58:fb:80:06:58:2b:4e:a1:52:9d:22:bc:b1:
80:a5:c3:df:6b:d8:3b:57:16:f1:94:b4:48:f5:6e:
d5:1f:e2:7c:da:8d:f0:fc:de:6c:81:7d:2c:09:4e:
9c:b6:a7:89:67:43:81:a3:65:35:97:23:de:7c:20:
ba:d9:59:9f:9a:74:4c:ec:fe:bb:bc:14:e1:92:ea:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:4D:23:CA:29:A6:C7:C8:50:96:48:E6:D9:EE:EB:9C:99:D7:C5
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:36:ea:23:40:d0:ec:f5:4e:d8:07:43:82:33:65:83:4e:13:
5f:a0:7e:70:d9:ce:78:02:c4:7b:35:43:55:70:4c:10:24:c0:
c8:1f:44:16:fd:72:61:e1:96:fd:86:1b:0f:a2:b2:55:11:86:
4f:69:03:9a:dc:91:5a:c8:95:31:63:c1:0d:79:02:ad:6b:6e:
17:d6:30:6b:6e:1a:48:2b:cc:de:c2:4f:46:fd:2c:44:85:ec:
57:e5:8f:9d:ea:03:47:0f:1e:61:81:2b:a1:1f:6d:65:34:b5:
a4:ab:a6:1f:ab:9e:fd:3a:79:53:15:c6:4d:81:08:b4:10:24:
85:02:d3:2b:64:b7:b4:82:8b:d1:4c:a5:48:17:e3:eb:0e:6f:
0e:e6:62:e5:80:ce:3a:6c:8a:91:ec:27:f3:61:57:57:d0:e4:
c4:f8:8a:84:bb:fd:e8:2d:f2:18:05:cc:be:6d:c5:f0:ff:31:
3e:d5:34:83:70:70:76:cb:aa:49:eb:84:62:1a:e0:0d:fd:ca:
74:38:3e:fd:62:db:9d:b2:1c:97:bc:af:4e:56:ef:0d:d3:0e:
02:46:cb:4a:ae:2a:49:26:02:ce:36:2e:f1:76:93:9f:1f:0b:
6d:8c:f8:e8:5e:74:bf:1c:e1:33:54:b0:59:50:f6:c3:dc:33:
74:70:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:32 2026 by rpki-client