Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: eneNlSFbgXazKuoWTY/eg+cPCC4b6/I6O4vONhv6+Pg=
Subject key identifier: D9:EF:BD:0C:5E:38:EF:CE:C8:17:71:0A:B7:91:5C:92:E8:F4:5E:14
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019CA9EB10532977D937F1D23D5C20632973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 15:01:20 +0000
Manifest this update: Sun 01 Mar 2026 15:01:20 +0000
Manifest next update: Mon 02 Mar 2026 15:01:20 +0000
Files and hashes: 1: MH4I9xav4LfVDq-8qLH2rQsIB04.roa (hash: 4P+chNkfen2A5zyoEceMZTNyTkw02ot82WeO0g5JC48=)
2: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: Sv1HsIcGjsFM5OLTSk1oDTHr0hNp969RwxIO6PH0bKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:10:53:29:77:d9:37:f1:d2:3d:5c:20:63:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Mar 1 15:01:20 2026 GMT
Not After : Mar 2 15:01:20 2026 GMT
Subject: CN=d9efbd0c5e38efcec817710ab7915c92e8f45e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:60:2c:63:c2:23:7b:54:99:95:1b:a7:3c:
99:a3:7a:40:0e:7b:dd:84:7f:90:cf:59:e5:6a:07:
54:c3:27:40:64:ab:e4:93:0a:7f:37:f2:aa:ec:d5:
2b:f6:f3:d7:64:98:38:99:b9:1c:bf:93:58:92:34:
f0:83:a8:a8:8a:1f:45:1b:80:af:a9:36:67:3e:a4:
41:57:c2:ad:9b:3a:11:39:f5:6c:28:71:e8:b0:0f:
a3:19:53:34:ce:64:e9:a4:a5:46:f7:b9:b4:fa:28:
2e:35:5f:89:9e:b6:da:30:8f:bc:01:57:1f:f8:3f:
5d:a8:43:a2:f3:9c:cf:9b:d0:35:77:22:6a:ca:d6:
eb:4f:f3:34:9c:c4:fe:4c:03:2c:3f:f4:69:51:d8:
28:3c:60:4b:55:8e:53:92:b1:bb:42:0b:fa:de:29:
c6:cd:7d:6a:b3:bb:86:11:a1:60:19:89:e2:02:a3:
62:3b:d0:2c:1f:3c:68:32:06:61:62:58:79:2d:e2:
fc:de:e9:b5:80:59:30:24:d3:81:b0:a9:5f:1f:9e:
4e:49:12:81:6a:69:52:7b:43:67:b6:ce:e2:b5:82:
24:37:7a:03:39:1b:dd:79:12:31:21:f9:e5:4f:eb:
2a:e3:2c:57:aa:fe:2c:61:6b:69:ec:3f:76:b6:99:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:BD:0C:5E:38:EF:CE:C8:17:71:0A:B7:91:5C:92:E8:F4:5E:14
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:99:b0:ed:d0:97:dc:22:e5:50:84:0d:f7:7c:fd:95:22:96:
95:2e:43:f5:7a:0b:61:9f:25:2a:16:56:a7:59:33:08:09:12:
59:12:75:ab:d5:37:8b:d0:ef:b4:4d:16:ce:f6:68:45:d4:71:
2c:42:20:10:d8:06:60:93:60:fa:d9:62:77:0e:93:8d:cb:c3:
a0:be:7b:87:bd:ab:f9:f3:33:15:65:3b:44:d5:90:2f:7c:71:
cc:c6:95:3e:fd:50:cf:35:7e:74:11:56:fe:1c:43:2d:53:32:
1a:e4:3c:47:26:0f:09:5a:ff:ba:76:a1:b1:fd:0c:8e:41:ae:
a9:25:99:40:cb:7f:1e:33:a7:f7:99:1a:fa:2f:8e:56:92:c9:
31:84:d7:2b:f5:8f:24:67:0e:6c:01:d5:9b:39:f5:05:25:29:
83:5d:19:d6:4f:10:07:ee:90:cb:5f:8a:80:42:82:b2:c7:65:
80:31:b0:09:0d:ec:e6:4c:4e:2c:e4:cc:53:a1:ac:e1:f3:6b:
19:1e:47:6d:0e:ee:b4:ea:33:28:7c:cd:29:bf:24:28:48:ce:
ee:2a:91:b0:b9:df:2e:67:39:94:25:b5:70:31:46:a3:29:7c:
81:78:d6:8b:a2:c2:4e:91:b8:f4:47:e7:84:bb:3b:ea:44:9b:
1d:16:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:41 2026 by rpki-client