Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: 0ycoIJdGa+k9ui1APw15VpR50p5XoJcCZHvoaeGfNck=
Subject key identifier: 8B:CD:19:8A:AA:26:20:F7:A6:21:16:1A:C9:DD:95:72:EF:3A:0F:09
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019CB02353500B7C8BA023539CCDD24B84D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 150A
Signing time: Mon 02 Mar 2026 20:00:30 +0000
Manifest this update: Mon 02 Mar 2026 20:00:30 +0000
Manifest next update: Tue 03 Mar 2026 20:00:30 +0000
Files and hashes: 1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: pEU8axMeVNBMZyswm+ljrHqZ4RbZvjRh8BJA0BnDcoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:53:50:0b:7c:8b:a0:23:53:9c:cd:d2:4b:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Mar 2 20:00:30 2026 GMT
Not After : Mar 3 20:00:30 2026 GMT
Subject: CN=8bcd198aaa2620f7a621161ac9dd9572ef3a0f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:c7:cf:ea:11:bb:d7:8e:17:c8:68:f3:cd:
05:9d:16:99:3a:fa:75:62:9d:83:82:b0:3c:b3:3a:
1d:f7:ed:f0:c6:3c:55:7f:13:e2:d5:b1:4f:0a:ae:
b8:48:4e:43:a3:a2:8d:30:f5:03:bc:6f:81:d9:02:
69:cb:d8:ea:49:25:de:f4:c6:ce:3d:5c:ec:4b:b5:
5c:78:a0:b4:f4:d8:ea:5a:95:8c:3a:f8:de:6c:38:
e6:18:e6:5f:ae:53:b7:bf:b8:ed:ab:50:95:59:47:
a8:c3:83:9b:69:4d:e3:56:a2:23:41:a1:0c:e0:15:
3f:a8:9c:04:f6:67:63:b6:ba:66:df:2b:19:25:7c:
09:58:b3:ac:25:39:35:ea:e2:94:7b:e4:90:ac:8a:
a4:84:7f:b5:f7:b3:d4:00:26:00:8e:27:3d:3b:d9:
10:26:0d:01:68:46:e5:1f:81:7d:27:de:0b:f2:ac:
3a:dc:d8:b9:54:69:8e:d5:00:e4:b9:8f:a7:dc:05:
71:de:f0:8c:82:1d:c0:00:21:8e:be:d0:80:ca:5c:
d7:58:f6:fc:fe:05:32:32:62:97:33:c3:4a:e2:65:
8e:2b:d6:9b:16:1b:3a:90:01:45:bb:aa:30:80:6e:
50:00:f4:4f:a7:ef:d6:07:14:41:48:b9:f7:96:3e:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:19:8A:AA:26:20:F7:A6:21:16:1A:C9:DD:95:72:EF:3A:0F:09
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:bd:cc:24:7d:dd:72:69:e6:42:5c:35:75:62:2a:e7:2a:
2b:1e:9f:f5:2a:78:1c:8c:37:8e:6f:ef:f8:7b:d7:57:9c:b3:
6d:8e:37:15:0c:6c:d6:34:3e:d2:2f:34:cc:d6:ce:16:3a:80:
41:dc:dc:04:ad:53:b4:a1:60:05:be:ef:48:30:75:71:72:61:
e2:3b:0b:fb:0c:a3:69:f7:8f:37:2d:3e:7f:8e:f9:9e:4c:cb:
68:87:66:ef:f6:5f:1f:c2:ca:63:63:b8:b7:c7:0f:fb:df:ac:
59:81:70:00:9a:d7:f2:7a:33:99:02:e3:2e:d2:f6:88:7a:4b:
61:24:2e:78:fd:95:59:cd:0b:30:55:0b:f8:ee:ef:4b:ee:ba:
2f:b6:c8:5a:ca:38:dc:53:8d:e6:a3:48:ad:d0:d6:94:8e:6c:
ea:86:d5:2a:59:18:b4:8a:45:ae:42:d1:fb:33:0d:92:29:1e:
59:c1:89:37:00:94:1b:b8:67:8c:b8:10:37:f0:20:0f:f2:b7:
ae:9a:ce:7d:44:f5:a1:27:c1:2b:a6:6c:63:c5:d5:1e:ae:d5:
0c:b9:68:13:ba:89:4b:3b:da:c4:c7:08:a1:b2:ec:56:bb:7c:
83:e4:c2:46:09:43:d0:86:97:ac:37:c9:9c:ad:98:86:78:2d:
7e:b1:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:23 2026 by rpki-client