Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: 5depFtk4r3SnEzS96ltqpO2p+K+MU0xneP+gueq6EHA=
Subject key identifier: EF:EA:5B:46:4E:D5:C3:CD:5F:BB:08:D6:E9:80:45:A8:A1:32:E8:8C
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019CAB6BD3DF3D0F3B9BC584378E01CC9FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 1372
Signing time: Sun 01 Mar 2026 22:01:36 +0000
Manifest this update: Sun 01 Mar 2026 22:01:36 +0000
Manifest next update: Mon 02 Mar 2026 22:01:36 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: DFJblwadRAp7jSNFi67E7uvnXwC2HbiC8Sbbd3cGuro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d3:df:3d:0f:3b:9b:c5:84:37:8e:01:cc:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Mar 1 22:01:36 2026 GMT
Not After : Mar 2 22:01:36 2026 GMT
Subject: CN=efea5b464ed5c3cd5fbb08d6e98045a8a132e88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:4e:a9:0f:65:b0:7c:45:0e:92:ae:17:7b:
26:51:30:03:c1:38:ab:2f:0a:a2:01:b5:a9:81:95:
79:f8:2e:d2:0e:62:e8:51:a8:f6:12:56:25:62:a9:
41:ad:0a:f3:34:5b:99:bb:54:55:ab:41:81:c7:4d:
9b:43:7c:22:d2:c6:bb:ae:8b:36:55:f9:e5:94:62:
f8:a8:9a:91:51:fb:f8:c6:c2:71:36:57:a1:8f:fe:
67:4e:62:a8:a6:0a:ba:94:05:cf:8e:09:50:58:32:
13:93:78:21:70:2d:5f:00:95:aa:ee:3e:a5:0e:54:
14:c1:5a:89:66:00:e2:2a:d1:d5:97:96:3d:f0:31:
82:87:b6:1a:43:73:19:e4:fc:4f:2a:2f:78:84:5a:
47:32:61:2c:35:f2:ca:b9:a4:2d:8c:c6:3f:fc:ce:
6e:4e:f0:bb:6c:69:a4:01:cc:5e:fb:17:81:58:00:
8a:d5:0e:cc:a0:30:d6:25:df:62:8d:02:e2:a1:63:
0e:e3:1e:74:33:16:08:36:cc:43:f2:74:8b:be:b5:
c2:e2:0c:01:c3:fa:82:79:b7:88:61:f9:90:8d:42:
02:ef:b3:ac:9c:66:e5:82:23:bc:09:4f:21:f1:44:
62:51:7d:11:70:7d:b6:8d:9e:10:da:78:15:90:b2:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:5B:46:4E:D5:C3:CD:5F:BB:08:D6:E9:80:45:A8:A1:32:E8:8C
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:53:28:6b:8f:73:fa:fa:96:39:b5:e9:33:3b:9e:96:6c:
c4:f5:fe:12:93:b8:2f:6a:ce:de:54:bf:6e:61:1e:db:ad:fd:
2f:d6:2b:d8:c0:05:e4:d7:74:27:8a:55:54:9f:7f:37:90:d7:
17:75:0c:4e:7f:c0:d0:98:7b:d9:ea:3e:7b:ad:a6:87:fd:d2:
f5:98:ea:38:f0:d9:ee:51:56:d1:2b:0f:54:e7:db:29:50:77:
d8:7a:13:b9:81:66:00:50:85:93:9d:06:ba:ab:11:e1:10:66:
2d:0e:7d:8d:d0:52:f2:48:36:4e:ca:87:fe:1c:7b:c7:e4:19:
14:cc:c0:1f:a1:40:ee:36:65:b0:e2:80:22:26:68:cd:31:77:
08:5a:94:70:b0:4f:7f:7e:bd:76:88:7f:c9:32:fa:53:6f:fa:
35:52:9f:2e:9c:df:fe:64:cf:a7:3b:29:20:f5:51:9e:09:7a:
f0:0a:1c:6b:07:11:b3:45:08:d3:07:63:3f:cd:56:c4:ad:cb:
7c:56:72:6a:c9:c1:16:5d:44:ed:81:bf:5e:52:9e:3b:b1:e2:
1c:aa:1e:9b:46:30:91:a4:d5:8f:4b:c9:1c:a4:4b:ee:9d:6d:
b3:85:d0:ad:7e:de:94:0b:66:f9:da:bb:bc:13:d8:39:87:8e:
b2:23:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:51 2026 by rpki-client