Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: jMFMVhh8c3mPqM84+wTN20lTbkNe3k1YyCUHMETSrEo=
Subject key identifier: 75:1B:B2:C9:D7:D0:4C:5C:77:12:80:DE:CF:C4:5F:2E:66:EA:3B:4E
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019CAE35304E26235465EEE1980482F1F41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 08BF
Signing time: Mon 02 Mar 2026 11:00:47 +0000
Manifest this update: Mon 02 Mar 2026 11:00:47 +0000
Manifest next update: Tue 03 Mar 2026 11:00:47 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: sVCQBVtZBvLeFy2Kjj9U/Rk2eRUzC7Kn2CJY748MvNo=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:30:4e:26:23:54:65:ee:e1:98:04:82:f1:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Mar 2 11:00:47 2026 GMT
Not After : Mar 3 11:00:47 2026 GMT
Subject: CN=751bb2c9d7d04c5c771280decfc45f2e66ea3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:a6:05:4e:37:c7:97:ec:f2:ca:22:34:3b:
eb:09:2a:7f:4d:02:0b:30:ed:06:f7:8f:df:6c:e3:
4d:b3:85:09:dc:dd:a4:61:08:b0:1e:f6:da:03:54:
bf:3e:06:ca:42:d6:7c:53:91:04:86:7d:b6:7a:bd:
72:fb:53:d1:c8:72:46:01:31:9f:f3:a1:b3:0e:1c:
14:e7:25:2e:70:8a:db:bd:13:c1:ba:87:51:d9:3f:
94:ab:a7:e4:0b:b1:e5:fa:91:9b:b8:14:27:50:8d:
57:68:43:aa:ea:a3:1d:f0:c8:5b:f7:9d:62:de:79:
b4:50:47:01:d4:4c:d3:59:6a:d9:a6:40:a3:8d:c0:
79:5f:3c:e3:12:af:c0:81:62:41:3d:9a:2c:de:fa:
33:bb:c3:ce:b9:c6:09:7e:c5:9e:f5:15:72:42:4c:
ff:df:f9:e6:04:dd:71:c1:68:d9:5b:f8:77:b9:e3:
72:55:a2:99:55:b5:bb:08:3d:f2:cd:fb:70:1e:1b:
1c:7c:b3:16:f6:ec:33:7a:2b:66:c2:f9:52:71:2b:
6e:d0:db:0f:0a:5c:ca:2b:d0:b7:cf:6a:71:db:9c:
9b:0b:c6:fd:9a:13:b2:5c:91:0c:98:78:5c:9f:a4:
9d:f5:4c:b0:39:74:f9:7e:ad:d5:ef:45:b8:a7:80:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:B2:C9:D7:D0:4C:5C:77:12:80:DE:CF:C4:5F:2E:66:EA:3B:4E
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:a2:22:a0:9f:e6:2e:fe:ae:ed:a4:6e:fe:87:bb:3b:ac:
52:c0:53:6e:c6:7e:a0:b8:de:42:a4:63:43:d9:1d:0b:6c:5a:
ae:14:43:7b:b3:e3:b3:0b:58:7c:26:a1:6a:6c:01:50:b7:18:
13:2a:8a:d8:30:48:62:55:2a:15:c0:92:3c:00:13:e8:0a:76:
59:a6:c2:30:8d:03:20:99:39:b1:8e:6a:75:d2:b8:8f:fe:e1:
b4:eb:d2:cc:aa:09:11:25:5b:2b:3b:55:9f:02:7a:23:e6:c7:
99:2c:fd:04:66:d0:c7:24:0d:72:48:5b:48:82:d7:6a:eb:d9:
89:97:6b:20:f5:7e:fe:b2:ca:a4:86:7d:78:b7:84:5e:20:73:
5e:a1:62:2e:34:2d:ae:9b:15:85:74:b7:b5:35:d8:04:90:b6:
f2:f4:b5:9e:fc:f5:60:4f:7b:cb:b1:e6:46:5b:6e:70:9d:b0:
5d:e2:5c:0d:91:b6:bb:39:7e:7f:0a:6d:ec:b5:82:de:db:55:
8d:a1:fb:7e:f4:6b:8c:37:6b:ea:4b:df:2c:8c:5f:6c:bc:7c:
ec:f3:00:d0:f9:56:6c:85:a4:59:56:cc:45:4c:c3:cd:2a:e2:
0e:17:01:c2:dc:8f:43:96:30:5f:e2:9d:b8:5e:b7:e5:7d:82:
e8:b0:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:33 2026 by rpki-client