Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: nztEDegKDdD4Ci7mlWWfizOOGRj0omTfv18/znu9NCA=
Subject key identifier: 6D:FA:74:0A:04:D1:A4:FC:5D:58:AD:92:7C:1E:3E:F3:5F:DE:97:21
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019CAB6BFDCB79495396582BE5F9DBFE8E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 061A
Signing time: Sun 01 Mar 2026 22:01:47 +0000
Manifest this update: Sun 01 Mar 2026 22:01:47 +0000
Manifest next update: Mon 02 Mar 2026 22:01:47 +0000
Files and hashes: 1: UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa (hash: jpEDe24rlUn3pxTT1qasWKlz+X8T9bS0HUXdOUhAmHA=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: 50ceRTOPKIcFeM0bwUOAcTFy1UqR5NFQijLfAqBJy8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:fd:cb:79:49:53:96:58:2b:e5:f9:db:fe:8e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Mar 1 22:01:47 2026 GMT
Not After : Mar 2 22:01:47 2026 GMT
Subject: CN=6dfa740a04d1a4fc5d58ad927c1e3ef35fde9721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:58:95:88:55:72:ca:9a:d7:1b:cc:aa:8c:
4a:24:43:ba:b8:41:c9:a3:0e:45:4e:23:6c:6c:b6:
44:a7:3d:a0:b9:5f:66:ba:e5:e5:ed:0b:12:db:85:
5f:26:12:b3:fe:d5:58:ba:57:a3:0b:07:0a:c7:7c:
2c:c1:e8:ea:7d:da:e7:65:9c:33:34:e1:0d:7a:17:
38:cb:47:f6:eb:83:01:d1:84:cd:31:c9:ea:59:1f:
68:6b:c2:28:4f:53:6b:29:91:18:f4:53:be:f4:ad:
6a:20:8b:2c:1d:e8:c7:a3:6c:93:fd:53:7f:0d:18:
87:49:9a:ab:6f:50:34:b1:6d:2c:a5:15:32:25:6b:
96:4a:4c:78:0e:86:29:41:16:32:6a:38:9f:4e:b7:
4a:aa:c2:86:de:11:ac:27:f2:7d:d4:16:6a:0e:bc:
51:3a:fe:9a:de:e5:10:5c:7c:76:3b:bd:30:33:5a:
bb:66:0a:70:0e:77:e2:e1:28:76:4f:07:c9:ff:1f:
3d:23:42:a2:37:0b:87:41:75:29:bf:ce:d4:13:b3:
47:64:61:6c:3f:2e:63:52:96:54:16:94:a5:25:5f:
ac:41:19:c9:c5:02:ee:62:7c:e0:70:9c:83:14:c4:
3e:a1:47:f0:72:f8:75:76:02:93:ab:e4:a6:e1:1d:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:74:0A:04:D1:A4:FC:5D:58:AD:92:7C:1E:3E:F3:5F:DE:97:21
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fe:cc:1d:e3:ff:8e:1d:a0:32:42:db:19:b2:25:e3:f0:92:
93:51:ab:20:62:25:f9:7d:82:49:2a:97:51:72:fe:81:a7:cb:
1c:4f:ab:6b:57:d9:df:18:c5:fd:ba:0b:21:de:85:2a:18:f9:
77:fc:3e:05:56:0a:4e:c7:0a:ac:a4:1e:7a:8f:a6:bb:44:25:
3c:4e:af:3b:9f:81:64:e5:2f:65:dd:85:94:35:de:1c:8a:20:
05:36:cf:2d:62:70:6c:49:d3:21:39:e9:07:b3:8e:c5:94:28:
90:a6:b3:c1:00:8e:29:af:bf:e7:2a:32:be:5b:67:2b:78:89:
b8:53:48:79:f7:da:24:bc:a1:6a:a1:9a:b9:41:b3:74:e0:7d:
27:23:ba:8f:79:7f:70:92:63:f6:9a:40:33:b1:72:82:f7:11:
54:b6:2f:30:97:c9:18:10:17:5a:14:6e:e5:2c:97:27:25:5c:
a5:65:98:c9:45:83:18:01:b4:43:d4:2e:5d:d1:44:69:93:12:
67:ea:b3:a6:13:de:7a:cf:ce:54:f5:df:75:be:52:49:0b:73:
53:a6:a4:b7:2e:15:53:b4:8b:0a:eb:e1:47:87:71:1d:74:a8:
c4:16:f6:0c:ec:73:1e:b1:1f:23:ab:9c:64:18:16:3d:e1:4b:
b6:fc:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:05 2026 by rpki-client