Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: WCqWHGxEMng1EDNOUDJoewQven/2a+QOZzuBo2NGfBU=
Subject key identifier: A4:BC:66:3B:DD:24:E8:E4:21:C2:7B:C6:D8:E7:7B:99:90:49:B9:70
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019CAA58DC5926A55CBB11BA3C4ADAA44512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 9iE1CgX1W8QL+sMYoEXgoFuaQpJ8fjJvU0+coa68aZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:dc:59:26:a5:5c:bb:11:ba:3c:4a:da:a4:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=a4bc663bdd24e8e421c27bc6d8e77b999049b970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:86:35:fd:8a:e2:2c:3c:d1:ed:1d:99:e9:
d0:90:bb:02:96:75:93:24:70:29:c4:c0:38:f8:41:
24:23:d9:dd:a2:0a:cd:03:0b:e2:85:f1:42:05:c5:
5f:e0:d7:f2:12:c1:48:d3:c4:4d:79:ee:2b:87:b1:
66:a9:de:25:4a:9d:36:d8:bc:a2:52:b6:ae:c7:90:
cd:78:c7:a4:55:85:f5:a9:62:92:25:43:16:08:32:
ca:7d:a0:9f:73:3f:4d:e6:74:e8:40:ac:7f:9d:fb:
6b:e2:3c:5c:e4:1a:60:f9:7b:a6:8b:20:2c:0d:1c:
af:01:e8:61:95:e6:4e:24:d8:85:03:ed:7f:aa:91:
ed:ae:af:78:32:db:f7:8a:c5:1f:7b:47:fb:a3:7d:
94:e5:dd:82:c5:b7:a1:11:cc:c0:61:0b:26:6e:9c:
37:a6:88:f1:f4:80:50:1d:d7:70:34:b0:19:6f:e5:
59:dc:f0:28:f4:b3:09:a1:5d:06:09:97:a9:68:0b:
76:d9:db:58:0b:36:c5:cd:27:11:ad:08:9a:98:5e:
69:4c:cb:31:a2:be:78:6f:bb:2e:ff:21:a0:94:dd:
c9:60:09:06:b2:a7:7e:e7:59:38:41:a7:f6:93:78:
b2:8d:29:17:88:67:1c:aa:6a:c0:d3:20:63:40:0e:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:66:3B:DD:24:E8:E4:21:C2:7B:C6:D8:E7:7B:99:90:49:B9:70
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:d2:05:1b:7e:0e:6e:52:7b:6c:78:98:0e:de:ae:f3:80:
a8:06:63:c2:99:8d:90:92:cf:c4:aa:ae:06:6b:f3:29:af:cc:
c7:96:42:62:5a:13:df:1e:78:42:c4:02:2b:2f:2d:2e:4a:52:
87:f0:f5:96:9d:3d:f1:0d:5f:13:81:33:ae:4e:49:18:56:03:
86:4f:2d:29:57:df:69:1b:09:47:43:7d:d5:cc:6a:38:f8:56:
83:ca:20:9b:c1:5e:11:a5:40:45:cc:89:43:0c:78:7a:81:f2:
23:f7:09:51:86:7f:e8:15:01:e8:ef:cf:e0:a4:f6:94:97:37:
00:f8:ec:cb:ea:4d:d0:de:70:39:af:66:dd:16:4d:ea:6e:59:
1b:2f:86:a9:a8:7a:60:b1:44:1d:e4:f1:ce:d2:0d:92:76:b9:
46:f6:7b:80:d5:4f:64:44:96:59:8b:84:e7:07:cb:0a:a3:e3:
19:76:47:35:c3:dc:52:e1:2f:a2:e6:4a:2a:e3:69:e3:35:af:
97:b9:59:f8:13:94:bd:4f:62:f3:c4:2a:39:fe:24:3f:4a:6b:
57:f1:38:5b:98:00:83:5e:ca:ab:42:b5:88:b2:b5:0b:50:52:
38:79:0a:6d:01:4b:85:fa:66:8b:d2:c5:26:20:a8:eb:95:e8:
87:3e:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:32 2026 by rpki-client