Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: 4mx6ZpCC5u1DBBLzWuVqXxcbQWmtrWCUqhxOicGiACs=
Subject key identifier: 4A:FF:34:E9:21:3A:3A:E6:01:4D:40:F6:3F:BE:A1:85:80:E8:85:22
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 019CAD22C149CBE005284B57A635EE39FFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 10CE
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: Xxs4ldV2enfWsLfgfxEllPDWnWo.roa (hash: 8Cn8Jb6BuKTBrGl7OMfhVUGxRn/9grjWQRc7jCMSinQ=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: wk0jF2XnGMSWzitbxLQ597PLifaWqwv6bWOBxxwHt+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c1:49:cb:e0:05:28:4b:57:a6:35:ee:39:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=4aff34e9213a3ae6014d40f63fbea18580e88522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:e1:c2:45:bf:c7:59:66:91:18:da:c5:b0:
5d:a2:6b:19:a7:27:88:a4:66:29:26:fe:53:fe:32:
d7:16:aa:c0:c7:e1:21:12:9c:c4:a4:d2:de:1f:97:
a9:91:d4:94:ea:16:bf:fb:59:b6:62:20:de:52:09:
21:57:88:93:1a:4e:57:92:30:f4:ed:d1:2d:1f:31:
ab:15:78:24:85:5c:1a:b0:c3:a7:14:d3:04:3a:be:
46:c1:46:33:98:d1:8c:d3:ca:1b:6f:91:90:6b:61:
aa:39:81:5b:0c:c3:1a:81:ac:d3:6b:bf:cc:b8:f6:
b7:cb:a6:67:85:e9:46:6c:ee:d3:71:32:97:40:04:
e7:41:c8:6b:9b:45:e2:8a:03:ca:77:38:19:ce:7f:
f1:58:15:92:e8:f8:5d:e3:3b:c7:20:7f:40:57:41:
49:eb:46:4c:a1:7d:c3:94:68:52:bf:7e:2f:44:48:
b3:cf:2a:f8:22:26:9e:6e:4d:8a:8a:45:0c:3e:24:
a8:4c:0c:9d:ee:36:bd:1b:37:6d:ca:98:20:9e:92:
fd:15:94:8c:d0:5a:4c:1d:f1:d7:62:7a:9f:2b:ef:
fb:76:c3:9d:c3:ae:e4:54:96:03:f5:84:66:a0:bf:
fa:b4:e9:8b:ce:d0:45:60:44:7a:ea:63:0a:10:db:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:34:E9:21:3A:3A:E6:01:4D:40:F6:3F:BE:A1:85:80:E8:85:22
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b3:6a:25:89:4d:97:b6:83:6c:b4:48:09:8a:1e:51:b5:c3:
fa:c9:97:16:d1:64:65:f4:3f:05:f5:db:bf:96:e5:68:c1:45:
c1:ea:46:02:4e:58:94:4f:6b:34:d3:05:d5:2f:0b:72:e5:78:
44:ce:09:13:d2:a7:86:89:5e:09:d4:89:fa:fa:42:b0:54:45:
db:e4:02:00:6d:0a:0b:75:07:88:8f:be:db:70:ea:8e:de:51:
81:32:6f:d4:aa:10:d7:49:ee:84:36:c9:47:37:29:a0:ef:20:
1d:9e:cc:84:12:c3:2b:ec:89:dc:76:5b:6c:ac:75:b5:8b:72:
54:8e:7d:63:6d:5e:ae:98:99:58:10:d5:1f:9f:1b:3e:b9:a9:
4a:53:00:a1:0a:fb:9b:bc:76:b8:27:e9:7b:fc:dc:bc:d7:b8:
7c:f2:1a:e4:7d:0e:db:7b:af:51:4d:c0:58:ae:18:ae:01:04:
2e:e1:e2:a6:8e:84:33:b5:9d:19:10:19:13:da:54:84:9d:4c:
2a:07:db:99:81:e2:09:df:15:26:dc:a4:3c:7f:65:dd:3d:3a:
ca:48:9b:a9:19:c7:6f:32:60:c6:be:46:92:8b:2a:92:30:92:
f2:79:15:e1:17:e6:9d:c7:b5:0e:c5:20:5f:31:09:1f:a1:58:
dc:2d:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:51 2026 by rpki-client