Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: Q8p3vaOyr48O91Y1b8Vl2HA0OkWF3MrmbvPE/dy6Mnc=
Subject key identifier: DC:14:E4:30:74:A4:2A:8A:F8:EA:16:A2:41:7B:82:82:B5:87:C8:71
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019CABD97CA93E6B157A58D4788815EF131A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0F2D
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: EMDicw3F4w/UaqZQyflt1TT0k9zA/tsq3wPj499Ahq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7c:a9:3e:6b:15:7a:58:d4:78:88:15:ef:13:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=dc14e43074a42a8af8ea16a2417b8282b587c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:4f:bb:3b:14:1b:02:56:75:29:e1:70:ef:
3f:3c:c3:b9:bf:77:03:5d:3f:d4:61:ba:3b:8e:95:
2f:b4:d6:24:0a:ac:c2:43:93:5a:8e:8a:9e:1a:de:
25:db:75:01:66:6d:54:af:2b:0a:4d:2b:bd:36:d6:
4b:73:c0:6c:24:2c:35:0a:0a:21:a2:a9:5d:47:8a:
38:7e:8e:d8:3a:81:4a:4c:12:f9:c9:00:90:21:21:
39:00:36:c4:ca:35:61:b0:15:8b:83:01:25:2d:9d:
9f:82:e8:c1:50:89:c8:e7:ba:34:24:fa:b3:6d:e6:
eb:20:d9:4d:4d:76:a0:70:db:15:98:15:87:24:d0:
49:59:07:a6:20:f5:c4:d0:ec:25:16:72:96:61:3a:
8e:2e:bb:ca:7f:35:7b:75:c6:a4:8d:ef:f3:40:b8:
dd:1b:13:7e:28:86:a6:3a:d2:df:88:6f:d7:7b:c7:
6e:15:9f:ee:e1:5c:5f:37:f3:c9:90:07:63:72:70:
b8:bb:cd:96:a1:43:58:e2:95:a3:54:ee:40:68:48:
6f:75:c7:d2:ac:56:fc:d5:01:05:51:50:82:9a:73:
d5:f2:86:e5:48:e2:83:c9:1b:61:4b:8e:2c:5b:2a:
bf:24:26:56:c9:33:32:53:fc:a5:da:85:53:17:dd:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:E4:30:74:A4:2A:8A:F8:EA:16:A2:41:7B:82:82:B5:87:C8:71
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:4f:41:28:70:33:4c:af:94:a7:d2:10:73:d9:60:b8:25:
d9:a4:d2:ca:54:4d:24:1a:f9:d9:c5:67:36:7d:3a:0e:34:13:
57:72:27:56:7e:71:f2:8f:ef:fb:6c:2d:fc:99:ea:49:44:51:
4a:56:00:fa:3e:05:3c:1a:3f:45:ec:9f:06:44:fe:12:5f:b9:
c0:e4:c7:ae:05:47:62:93:a1:2c:5a:8a:45:3d:de:a0:09:75:
4d:2c:d8:04:19:ed:89:a8:59:a9:44:e1:df:35:1e:4f:c5:af:
60:8c:41:06:91:43:9e:80:e1:a1:5f:08:dd:10:e5:8b:a2:c1:
6a:60:0b:ed:5f:f8:fb:ec:19:2d:0a:a7:da:aa:4e:fd:3c:0d:
fb:cf:d6:cd:72:06:8c:5c:1d:c1:07:d3:c7:bc:4f:65:24:0a:
de:08:a3:ae:4e:8b:97:ed:46:30:3c:20:84:6c:db:85:c1:1d:
64:dd:92:3b:e8:70:ce:f2:33:bb:4c:fb:7c:ca:02:92:9c:17:
96:61:98:a6:86:55:f3:cb:30:8f:a4:95:7c:92:97:1e:45:91:
82:f5:53:7c:71:a3:b8:79:53:ca:c7:89:c7:1b:92:7d:34:8f:
e6:a8:80:ff:14:08:18:bf:97:7d:1a:9f:be:74:c5:94:42:b5:
27:b8:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:10 2026 by rpki-client