Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: g8VAyMWdivcJKDx9cpCehz8mDWHQtvtoQAp/Op0ojeo=
Subject key identifier: F3:B8:79:C2:E5:78:6B:02:61:AE:B6:35:23:E2:47:80:72:A6:98:22
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019CAB342800D3DE159460E6A040FA8DC873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: vzDfKR22pT7vQerjwbupeTw81FBm50xc6sIxeuRGXtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:28:00:d3:de:15:94:60:e6:a0:40:fa:8d:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=f3b879c2e5786b0261aeb63523e2478072a69822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:db:a1:01:10:65:69:bb:65:1b:f3:45:89:
ea:13:8f:0a:fe:ed:81:25:d4:8e:36:14:e3:28:5c:
11:03:ca:76:01:00:0c:64:72:69:c5:94:35:22:47:
12:cd:e9:29:57:49:0e:d5:bb:37:9d:ac:6a:32:73:
41:8d:74:95:4b:7d:68:e7:70:04:78:46:5a:3c:ff:
a0:92:ae:47:21:04:26:b7:2c:9a:5b:07:fd:9d:75:
28:90:40:16:71:db:3f:1b:35:f1:62:9e:40:d3:8e:
4b:46:b7:ad:50:c9:72:03:55:c2:de:6d:4d:17:1c:
13:4d:23:34:38:99:f2:81:07:70:d8:bc:39:87:a3:
ce:78:ad:d7:8b:a0:2f:9f:c7:49:5f:a9:87:bf:f6:
e2:bd:68:e3:7a:71:a4:57:76:f4:c5:a6:03:a5:f5:
50:e7:62:f1:24:8d:e7:c5:08:19:b0:69:89:c8:57:
49:ac:78:46:68:e2:e1:aa:9c:eb:3c:16:f9:2e:73:
d7:29:f3:e6:08:94:e9:cc:c0:e7:d8:63:cd:c8:74:
c2:ad:69:1d:24:81:91:1b:70:6b:0d:2b:9e:3e:10:
af:a0:87:53:53:dc:9f:51:40:17:29:6d:f2:15:4e:
af:9c:00:64:d5:5c:55:2f:e2:88:66:b1:fc:cc:b0:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:79:C2:E5:78:6B:02:61:AE:B6:35:23:E2:47:80:72:A6:98:22
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:26:c8:8c:f7:15:0c:af:fb:b9:0e:3f:bf:1a:de:d2:55:fe:
5c:81:0b:f5:45:94:71:94:d5:36:c8:e9:c1:8d:f2:6e:fe:35:
ed:89:ba:60:a7:17:03:2a:63:76:7d:4e:59:c8:83:e7:34:2b:
3a:d4:fb:42:e1:ac:0b:b6:00:df:50:ad:4b:9e:3d:58:e6:97:
3a:58:bf:46:b4:e7:25:5c:d2:78:3d:40:d4:29:b7:ab:7c:ab:
8b:41:90:6f:59:42:76:fb:55:8f:64:2a:f4:38:1b:4e:40:8a:
cf:d7:4e:28:e7:e5:af:23:62:9d:c9:29:a7:8e:2e:c4:48:f1:
c3:e4:e7:27:99:00:12:66:73:fd:aa:83:53:d5:2e:42:ed:de:
a2:28:42:6a:a1:09:32:a9:0b:d9:e4:85:8d:92:af:af:b2:f8:
18:de:ef:6c:ad:53:13:14:b2:53:e5:d5:68:94:fd:66:11:b9:
15:f6:5b:c0:96:30:d4:72:11:06:bb:6b:bb:25:42:07:27:93:
29:e3:2d:87:e1:87:16:24:c8:d3:3d:ea:8e:9f:4a:ef:0c:63:
50:9c:a5:66:d2:90:98:12:27:cc:1b:e2:d4:08:49:e8:ba:d0:
7c:b9:1f:a3:a3:92:66:ba:1e:ef:ee:37:66:2d:9f:cd:fd:0e:
90:0f:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:09 2026 by rpki-client