Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: Vat2dnaYf4N0A/M2JYFzIjcONOg7VfIzn5+BIMBPFp8=
Subject key identifier: 69:6E:AF:43:4E:80:03:4D:1B:97:E0:A7:FD:27:EF:90:C6:B7:75:55
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019CA9B3BE74D48045BB06C644D390B1FBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 14CA
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: v0+9wZQsDRCdek2icP8CDXyadry0UqF4k3vqZaji6/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:be:74:d4:80:45:bb:06:c6:44:d3:90:b1:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=696eaf434e80034d1b97e0a7fd27ef90c6b77555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:70:8d:15:31:0f:30:ed:9c:74:69:bb:16:
c3:35:22:e1:17:1e:9a:54:62:8f:2d:62:ab:4f:c5:
c2:53:e5:33:1c:f8:07:e7:8e:30:cc:40:26:3f:08:
9d:67:92:b9:12:4b:48:dd:d5:6d:18:d7:a5:90:05:
7d:8b:1e:32:0f:75:37:e7:7a:55:3a:a5:24:a6:2a:
f8:00:65:cc:45:99:f0:f0:4e:34:dd:1d:8d:36:a2:
8b:8d:96:c4:9e:40:b1:ad:e1:d2:f7:f7:68:8e:66:
cc:ef:d3:c7:e9:4c:90:dd:1d:a8:86:b8:7d:56:09:
08:83:21:99:50:29:f0:39:79:86:3d:20:63:5f:9b:
e3:14:d7:47:42:0e:6a:eb:85:38:9c:14:74:2b:de:
a5:30:1a:bd:30:b3:78:3c:74:f3:a8:bd:66:30:3b:
46:e4:c2:fb:28:22:ba:c0:95:8a:ce:d2:74:16:0b:
70:46:a5:f8:c3:b6:66:c7:33:6a:26:98:0e:41:3e:
ce:fa:3e:0a:40:4a:18:e4:f1:69:29:b0:81:e6:fa:
35:a0:b9:40:9f:d1:0f:0a:8a:d1:60:ed:61:62:1b:
2e:71:12:97:77:b3:95:f6:06:a9:07:36:c8:3f:ba:
53:e9:48:c8:5b:6f:a6:4e:6c:2f:88:df:4a:45:8e:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:AF:43:4E:80:03:4D:1B:97:E0:A7:FD:27:EF:90:C6:B7:75:55
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:95:05:11:91:2c:48:d5:89:70:fa:75:21:3b:54:d7:cd:
f8:88:76:34:23:10:e0:2b:4e:df:d0:5f:00:b4:d0:2c:28:a3:
7c:71:5b:24:53:1a:dd:33:cb:9d:f3:11:1a:05:2f:7b:9d:c7:
e6:41:8b:a4:10:c3:58:49:fc:a3:09:61:90:97:f8:dc:91:ff:
eb:9e:af:a0:ad:94:08:40:6e:08:7a:ee:fd:d3:c1:f7:49:41:
62:5b:4d:fd:a3:6d:17:de:e9:0a:d5:7e:6b:fe:b6:0e:87:6b:
03:66:d4:30:c3:60:c3:ea:28:56:ed:b8:a2:40:17:e5:ae:4d:
76:78:61:2c:9f:80:ac:24:dc:28:3e:cc:c4:b9:ca:0f:d3:89:
7e:86:87:a1:82:b5:cd:77:2b:4c:cb:57:d4:d4:53:c4:fe:e5:
b2:cb:4f:d8:20:a4:b6:9d:80:37:a8:58:28:e2:1f:ab:c4:2e:
00:87:1f:ec:21:40:26:75:2f:d6:d9:7f:7c:84:d5:b7:35:ae:
6a:d1:e4:7c:a0:84:e6:33:59:70:95:12:28:8d:ae:02:dd:ae:
eb:7d:ab:9f:bf:86:a0:37:1d:6f:2b:09:7b:34:ec:61:ec:75:
47:49:90:ea:7f:fc:d2:61:b1:d4:4f:4d:6f:38:bb:87:39:0e:
0e:39:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:44 2026 by rpki-client