Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: 8kpy5eW6I0dfDkHbkhoH7Z1H4xqJgyyQoq/6XuxkNsk=
Subject key identifier: 5D:B9:8B:55:F0:B5:3F:5E:57:E2:5B:9E:0F:F2:A9:7D:AA:E8:10:55
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019CA945CF3419C538159B2568BA8FD9DA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 07A9
Signing time: Sun 01 Mar 2026 12:00:50 +0000
Manifest this update: Sun 01 Mar 2026 12:00:50 +0000
Manifest next update: Mon 02 Mar 2026 12:00:50 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: Zts8aj8PSizWys6GJkX2Onm3NhE4I88M6Oq+TkbaZ4c=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:cf:34:19:c5:38:15:9b:25:68:ba:8f:d9:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Mar 1 12:00:50 2026 GMT
Not After : Mar 2 12:00:50 2026 GMT
Subject: CN=5db98b55f0b53f5e57e25b9e0ff2a97daae81055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:66:cc:cb:06:23:b2:99:91:c6:c4:06:e0:
8f:01:82:af:7f:b7:e2:c2:c3:57:58:85:9f:e5:2f:
04:b4:71:f6:0f:a0:b8:c6:96:a8:9a:69:f3:f9:b7:
a7:dc:64:b9:fc:f9:67:38:6b:c3:4e:02:67:85:52:
0c:dc:14:e8:22:58:f2:6d:f4:0f:34:f2:fb:8d:2d:
78:f6:3b:bf:78:5e:9c:05:dd:12:0f:8b:7f:b3:75:
d5:22:d4:d4:ba:46:38:ef:f3:ca:95:7a:3a:62:13:
90:d3:19:2b:47:8d:28:4d:f7:7f:af:1e:37:b7:a9:
f0:68:86:99:8e:23:05:eb:1d:e4:82:cc:8f:83:17:
48:4a:60:54:01:f2:fb:a6:fa:ac:2b:1f:30:be:e9:
b9:c6:5b:c0:59:3b:d6:4f:f8:9d:0e:7f:7b:d1:c0:
a5:05:cd:d9:40:2c:f4:5b:55:3d:e3:a5:b3:72:e1:
8e:47:6a:e0:be:34:f8:2a:b9:a1:87:cb:51:8d:ea:
96:58:0d:8c:22:4c:eb:1b:44:96:99:af:f3:61:d4:
67:b8:c6:cf:93:28:b5:ca:92:d1:1e:fe:ae:13:fc:
07:0d:5f:2b:e4:c0:76:90:13:98:30:a9:a9:4f:ab:
ab:15:5a:fe:64:46:33:2e:7c:28:5c:a3:ed:c6:dd:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B9:8B:55:F0:B5:3F:5E:57:E2:5B:9E:0F:F2:A9:7D:AA:E8:10:55
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:46:4e:39:b1:c1:79:c0:0b:8e:5e:f0:a9:83:84:de:64:
55:31:d3:1e:da:f6:ae:40:5a:70:20:85:18:c9:a8:91:c3:a4:
61:46:14:ba:79:2d:74:48:29:a7:0b:a1:07:0d:24:1f:29:18:
cb:12:54:d8:25:ff:62:bf:80:63:93:93:27:9c:8e:f8:1b:54:
8b:f4:2e:99:c3:98:d4:3b:90:16:2e:b6:11:fd:77:e4:e8:93:
4a:23:d6:01:ad:5d:a4:22:ae:8d:b2:c2:87:6e:cd:98:4f:99:
38:8b:e0:a5:a3:08:60:15:ff:c1:a3:fc:bc:c3:4f:3e:d2:18:
57:f4:df:24:ba:75:41:8b:3b:54:08:3c:ac:e0:72:da:d3:41:
27:3f:a3:7b:73:d0:91:8a:fb:30:ff:cf:a1:36:63:ff:a9:60:
5f:ac:86:1c:c4:d8:63:d7:3e:fe:d1:84:99:51:4b:a0:e6:4f:
33:8a:70:b6:62:af:44:84:6d:26:6e:6d:ac:6c:61:5d:11:98:
30:60:d8:70:1a:c5:28:44:d1:ca:6b:f7:dd:d4:69:6e:2b:d3:
40:ed:10:8e:8b:c6:9c:e8:2f:b5:bb:93:e9:22:29:f9:c6:3d:
c7:22:d8:eb:0c:18:8e:84:d3:c1:b7:77:23:58:53:8b:ac:3a:
21:eb:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:01 2026 by rpki-client