Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: UT5oAN5Rt21KpwoCOjpqGeefrlUW7qqqbJ8PMNj3ZbE=
Subject key identifier: CA:17:E2:0A:87:46:3D:0F:CE:B9:FF:2C:A2:08:DD:7E:E4:61:98:9B
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 019CAAC671A62CB27DD10C67758D52495DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 094E
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa (hash: GlJGpBWeWcsOeO74Qp/VHrmeF+iq8Z/F3boS8FvHYJQ=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: 41R2e2g4PlquqYzvA9gsxNen4zJHja9BmdUyUcLPTMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:71:a6:2c:b2:7d:d1:0c:67:75:8d:52:49:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=ca17e20a87463d0fceb9ff2ca208dd7ee461989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:b9:8b:47:cf:22:51:67:e8:04:0f:1a:5c:
24:85:23:ca:dc:82:08:07:1b:ba:c7:19:c2:77:bb:
e4:8f:9a:09:8c:fb:34:9c:0f:b1:44:04:fc:e9:ba:
a3:63:ca:07:f0:a8:bb:0d:0b:07:88:d3:b5:70:e4:
81:12:19:e7:eb:d7:8c:77:b1:7c:6c:c6:ac:1e:bf:
a5:54:f0:9f:3b:fb:a4:be:4a:69:18:5c:42:4e:ef:
aa:ba:8b:38:30:54:86:70:70:9c:58:33:e6:93:fe:
3d:6c:44:f0:4c:8c:2c:a7:78:ca:bf:15:86:23:02:
15:57:b4:e6:f2:75:f3:cd:d9:27:57:86:5f:6e:22:
f7:96:ed:2e:47:1a:71:8f:27:2a:40:60:71:85:e5:
39:7b:ff:dc:ec:04:6d:34:43:f2:1c:85:9a:97:0a:
43:fb:e4:43:40:d3:2f:88:a5:47:7b:c2:8c:be:49:
5f:da:3d:97:31:0a:74:cb:ad:d6:02:a2:26:5b:47:
cb:b5:4e:ea:75:59:22:11:c6:d7:b4:6a:75:0b:fc:
87:73:1b:22:c5:a3:f0:44:f0:21:6a:8f:1f:d3:92:
00:32:bf:68:79:86:3a:62:db:02:2d:b3:8d:07:3b:
9d:dd:80:bc:fd:74:93:c8:f0:f1:5a:08:d2:07:b1:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:E2:0A:87:46:3D:0F:CE:B9:FF:2C:A2:08:DD:7E:E4:61:98:9B
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d0:4d:fc:eb:01:be:f9:64:ec:34:de:89:86:bb:fd:2b:75:
3f:3f:9c:77:27:ec:72:c6:27:72:df:8d:30:68:49:8e:67:c3:
05:fe:65:87:c9:0a:78:3f:23:51:64:dd:e1:39:cf:e5:46:07:
4f:52:34:84:20:13:51:b8:0f:7f:b4:88:00:0a:7a:2a:65:71:
df:4a:40:70:5d:74:38:ff:6f:e6:e2:68:d2:16:82:bb:54:e9:
6f:14:29:f0:7c:d1:7f:48:60:42:f2:47:ec:27:03:30:fd:f5:
b0:9c:55:4f:c9:e2:50:0d:62:26:16:6e:c2:a9:1f:68:a3:63:
f1:03:3e:db:6c:0c:f3:73:ce:a4:c5:b8:46:10:4a:9a:af:8d:
c4:dd:c3:fc:e2:47:39:99:47:61:c4:fa:a8:71:d3:ad:b2:01:
2c:1c:ad:57:5d:76:6d:9c:39:c9:cd:3e:54:8d:9f:a1:a6:f7:
21:c1:a5:15:65:f4:54:9e:b3:0b:ad:de:9e:71:b4:a0:5a:a6:
09:af:d9:20:58:2b:c8:14:b4:1e:96:4b:94:fb:92:df:82:a1:
20:c4:d4:75:9a:69:8f:3f:c0:a4:94:b8:af:61:09:fa:15:8d:
12:f4:b6:63:b6:a2:11:53:86:c6:71:10:6e:05:c4:b1:15:8f:
dd:80:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:56 2026 by rpki-client