Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: T4vts6mI9q3N7Z3ga9DoPs2AvGwsnqIsg+BOx03CF28=
Subject key identifier: 50:B1:58:5A:D4:7F:BC:23:85:F6:DD:FB:53:DC:D9:8A:47:22:B1:34
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019CAC7DBF985F90786C44BC84289D07DAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: t+Rcn5BhdR0M1ILms31xlNu0AGs+3/rftlfyfP0pJD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:bf:98:5f:90:78:6c:44:bc:84:28:9d:07:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=50b1585ad47fbc2385f6ddfb53dcd98a4722b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:57:62:de:0f:b8:7c:0d:55:bc:14:63:43:
c8:9e:ff:b9:17:15:74:08:e1:c1:cf:f8:e3:93:50:
15:67:41:42:ed:4d:28:31:c7:e4:62:b8:eb:b1:7c:
9c:04:e4:12:4d:c7:63:f8:37:b9:00:82:59:fb:ce:
23:5d:67:79:5f:55:b0:0b:bf:11:68:15:81:07:55:
49:b4:f1:33:0e:a2:f6:d1:4f:10:e1:da:c7:f9:89:
35:6f:8a:a2:43:cd:97:46:12:35:24:4e:b6:d6:c0:
08:cb:ac:17:c0:15:62:9b:99:e7:b1:ae:61:fa:11:
7e:64:61:4f:19:ea:92:f9:9f:5e:03:72:58:34:c2:
3c:cc:33:27:37:ea:5c:4b:91:2b:21:1b:55:9f:29:
d1:67:fe:c5:84:50:f1:9d:70:0f:5a:a5:42:38:96:
2f:30:8c:89:89:96:7a:c7:c4:dc:a2:b7:88:f5:5c:
f1:cb:77:fa:ad:c9:9c:69:4c:ab:30:b0:70:66:2c:
da:73:78:13:b9:87:a0:94:e8:40:b0:c3:f8:da:98:
e7:b8:30:49:3d:4f:e5:53:9c:59:3d:55:f7:27:3c:
66:1e:14:6b:6f:6b:21:57:10:8e:ae:21:e9:28:e3:
51:5e:19:7a:df:cf:dd:a0:ca:7f:fd:91:3f:73:09:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:58:5A:D4:7F:BC:23:85:F6:DD:FB:53:DC:D9:8A:47:22:B1:34
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:06:30:00:77:41:85:f1:d5:82:7a:fa:ff:db:55:7f:d7:
2b:4d:10:f2:e7:bc:2a:f7:86:a8:c5:ef:0c:91:31:1c:93:c7:
3e:e0:32:90:31:c9:1c:68:a6:57:7e:05:a0:8c:08:dd:4c:ad:
00:11:87:57:31:9b:82:64:02:55:ad:39:1a:93:b9:56:06:9e:
e8:ab:7c:34:52:77:82:23:b3:67:cf:9c:77:a6:5e:0a:34:e7:
12:8e:0c:b2:ed:40:16:c8:dd:af:79:9d:5c:e8:7e:c9:ef:45:
0c:39:8a:00:84:20:92:b4:27:73:20:7a:af:7b:ed:a5:dc:34:
97:a1:a8:bd:7d:a2:5e:16:4a:61:ee:3d:5d:49:c6:ab:db:64:
1d:87:fb:2d:67:c5:28:f0:ab:9d:f8:51:95:ca:1a:47:df:e0:
4b:bf:77:0b:9e:55:65:bb:31:b2:5a:4b:e9:c6:fd:04:62:e1:
07:58:c9:4c:14:5b:28:16:18:a7:fd:7c:9f:e3:f8:e4:ac:cd:
fb:3d:ef:bd:4b:cc:8d:04:61:1b:79:1b:2f:f1:13:66:e2:bb:
0f:7b:ef:88:46:5a:24:e1:ca:1c:aa:57:37:2a:01:09:02:f9:
65:24:07:b8:8e:5a:4a:0c:a7:bd:c3:9b:e6:4d:c3:fd:6e:15:
0c:ba:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:27 2026 by rpki-client