Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: n4JcfFrqOLvKvOIvH2JCHo2pLbkVCRn12rNessayhKM=
Subject key identifier: 49:CC:AB:55:86:B2:64:AF:BD:3C:A9:3A:E8:79:61:59:5D:BD:18:D1
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019CAC46BDF8A61791A805EB5E5B420CFF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 18AA
Signing time: Mon 02 Mar 2026 02:00:43 +0000
Manifest this update: Mon 02 Mar 2026 02:00:43 +0000
Manifest next update: Tue 03 Mar 2026 02:00:43 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: hEOnip9KJ6QSuwo5UZYzyKixcjBHUC+HpwRt98MWVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bd:f8:a6:17:91:a8:05:eb:5e:5b:42:0c:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Mar 2 02:00:43 2026 GMT
Not After : Mar 3 02:00:43 2026 GMT
Subject: CN=49ccab5586b264afbd3ca93ae87961595dbd18d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:67:f4:4e:f5:62:47:76:8f:cd:76:7a:46:
3c:dd:90:06:1f:8f:0b:e2:66:0f:a1:e7:4a:27:b1:
c8:11:1c:6c:b6:0c:5e:93:d1:bc:ce:b5:b1:54:70:
91:e0:e2:77:87:96:15:1c:c6:1f:13:42:6b:c7:50:
2e:c3:20:c2:ed:08:19:df:8e:d6:eb:f0:f6:c7:13:
dc:14:01:52:d3:fd:74:b6:20:b0:c7:17:ba:1b:41:
99:f2:13:ef:a8:1a:a1:48:1e:e1:91:b1:b7:b2:07:
21:18:38:6c:3b:e4:13:06:18:d2:eb:86:29:dd:e3:
fa:07:14:18:71:d2:9a:d9:96:8f:30:6a:2e:86:f9:
76:04:4f:ce:8e:a7:19:30:df:43:f6:f3:b6:7c:02:
e6:a4:45:d0:0c:1a:b7:7f:9e:fb:a2:53:dd:96:9e:
9e:f8:59:7a:4e:06:c0:88:87:ee:8c:6a:9e:ae:02:
2e:1d:4e:a6:0e:aa:72:69:69:3e:5d:d8:43:5d:0c:
37:9f:ca:fa:61:09:c2:4d:51:db:f8:57:cd:35:91:
51:8a:fd:e1:1b:df:79:f6:c8:b7:cc:e5:00:9c:26:
c5:a1:da:74:32:5c:76:f9:cc:26:e1:60:f5:e4:e7:
f8:30:5d:31:b1:d2:77:ff:82:66:b7:3b:0c:8f:07:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:AB:55:86:B2:64:AF:BD:3C:A9:3A:E8:79:61:59:5D:BD:18:D1
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:87:82:21:68:6f:da:da:c5:43:2d:6a:b8:48:81:75:bf:71:
2e:d1:cd:ed:aa:74:7a:2f:a4:1b:db:b2:21:5f:d7:76:3b:70:
69:16:ee:6f:0d:14:88:bc:62:78:2a:b6:d7:71:7b:34:e9:31:
86:69:8b:d4:9a:7a:c7:36:11:d8:c7:0f:80:39:ca:55:e7:23:
de:fc:49:d9:41:2a:5e:42:44:70:0c:65:04:68:ce:1d:9b:12:
9d:6c:05:6d:7f:b1:a9:e0:5a:19:e7:da:2f:a0:e8:d7:1b:65:
0c:ef:3b:b4:66:2e:dc:ed:08:14:79:61:f9:c6:80:a0:27:5a:
58:a7:ad:4c:bb:88:ba:66:30:a5:6d:f2:b5:8b:e9:fa:30:62:
03:fe:b0:11:c1:f3:70:a8:b6:08:f0:ee:1d:25:44:f0:a5:4b:
d4:c0:e2:db:72:41:82:98:e6:28:ed:c5:da:cc:01:ae:17:f2:
f5:d2:a8:72:12:de:75:9c:9c:b4:26:dd:57:8d:f7:54:90:d6:
da:9d:1d:07:b6:db:ac:3d:6b:c4:49:ea:13:d4:d8:be:ee:10:
7c:d0:7c:bf:d1:44:fd:a6:96:26:51:76:9d:8b:79:4f:9e:d6:
bf:c4:ec:0d:1f:65:03:85:bd:d1:c8:38:01:5c:de:82:42:2d:
8b:19:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:08 2026 by rpki-client