Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: /m308GYf7Rznu/LcEORFbLsQmNytxhalt6Rb/cfz/PM=
Subject key identifier: 62:84:BA:68:C7:B7:0F:DF:90:4E:F8:8C:46:54:77:5E:78:4C:C6:70
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 019CAB34AFBEC6AB1F07D9E395024EF47BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 158E
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: duSbs1Y82ux4jGzdWzwYO9FVG00.roa (hash: QHGY5HrFdT382Sq+4MEu4KIOluOvbBf/5zNCTvenn7M=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: rGXhul+SBmjF/lTUR/RzDYlJk+vzACRgYAAtTcFthwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:af:be:c6:ab:1f:07:d9:e3:95:02:4e:f4:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=6284ba68c7b70fdf904ef88c4654775e784cc670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:fb:76:71:01:b1:57:97:2e:a0:90:2b:3c:
9c:26:3c:b8:6e:f0:31:10:17:3c:18:d5:c0:94:2b:
bb:ce:fe:09:79:a1:31:98:f4:f6:74:5f:00:a1:b3:
6f:75:6a:ef:c8:d4:90:c9:85:f6:15:8f:e5:e9:5f:
4a:c9:5d:7b:9b:e8:b1:c5:c8:fd:0c:40:45:90:e8:
71:31:92:80:28:2c:bc:4b:f3:33:8e:b8:84:94:29:
7f:31:5d:de:15:af:ca:16:5f:ed:c9:35:e3:3e:86:
8a:33:67:73:3b:44:91:6e:ec:91:b0:46:b0:66:f7:
07:11:6e:f5:9f:5f:5e:71:d1:00:a8:73:8e:73:bb:
32:86:f2:9e:c7:e8:05:15:e0:c1:4a:6e:21:a6:3b:
e5:fc:46:b8:6b:f7:fe:da:07:0c:14:30:9c:f3:8f:
89:7a:65:a2:d0:bc:c4:6f:83:c0:18:19:97:0e:d3:
84:51:e5:2c:94:38:37:22:43:06:67:c3:ad:4e:08:
0c:43:de:76:48:18:ca:8d:5d:e7:79:a4:1d:ba:ad:
d7:04:73:8a:09:18:27:54:48:68:26:09:25:09:eb:
59:9b:d6:3e:e3:3b:ea:25:66:dd:3c:e3:6c:7f:f3:
0e:92:ef:5e:0c:46:17:0a:6e:83:aa:2b:07:94:9c:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:84:BA:68:C7:B7:0F:DF:90:4E:F8:8C:46:54:77:5E:78:4C:C6:70
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:61:36:e9:5f:4b:ac:c0:13:99:19:3a:1f:7a:0f:6f:29:
47:ac:b2:a0:71:b7:3d:82:7a:64:16:22:d5:2e:d8:5c:32:ad:
14:c6:69:15:7a:47:fb:3e:4f:9d:5b:00:39:7b:8d:8a:c8:2e:
24:09:06:a3:44:a0:65:fd:da:8a:63:9d:1a:19:10:19:b3:4c:
2d:8f:36:82:b7:81:93:fd:06:46:43:76:5d:aa:5a:e5:ac:d2:
1a:68:6c:33:eb:53:e0:34:ee:48:62:b7:1b:2b:13:56:54:84:
63:60:b6:d4:b7:f7:3b:43:2a:b9:e8:13:1a:37:cb:38:24:ea:
4a:31:99:96:78:8e:3c:7f:6b:fd:1c:ff:bd:52:e2:ce:3c:59:
da:72:07:7d:60:5f:1e:41:df:54:6c:fe:0a:b4:36:62:74:32:
ec:b5:1c:b9:c6:e3:4f:94:16:4f:6f:3d:43:a1:c5:bb:3d:05:
e3:76:f6:66:dd:cd:b6:e4:72:fa:e8:f3:f9:11:e9:ba:d0:dd:
1a:bc:84:e3:4a:25:57:84:a0:87:37:50:21:d9:45:44:f9:27:
99:b4:81:90:f3:62:9d:af:76:29:a3:cc:fe:03:ec:ad:4b:8a:
32:ce:1e:08:4b:5f:8a:48:65:3d:80:14:11:ac:35:0a:4e:f1:
24:cd:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:25 2026 by rpki-client