Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: QffzJvsDnXrE/7v0zHYUZZxSqLPdxK9yC6eeoBBccZY=
Subject key identifier: D2:AB:DA:D1:8D:EE:6F:53:A3:7C:3D:06:F9:CA:8E:F2:AD:4B:C7:D0
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019D04E60353613DAD5042B6F3ACDF9A9C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 1782
Signing time: Thu 19 Mar 2026 07:01:16 +0000
Manifest this update: Thu 19 Mar 2026 07:01:16 +0000
Manifest next update: Fri 20 Mar 2026 07:01:16 +0000
Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: 5tH7x+uAdo9nCsY0j95vFu5HFCJ/jHjq97I1VslW//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e6:03:53:61:3d:ad:50:42:b6:f3:ac:df:9a:9c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Mar 19 07:01:16 2026 GMT
Not After : Mar 20 07:01:16 2026 GMT
Subject: CN=d2abdad18dee6f53a37c3d06f9ca8ef2ad4bc7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:be:21:8d:87:cc:c9:0f:c0:da:a1:0f:8f:
b4:42:12:67:96:39:c8:c9:23:fa:b3:01:f5:8e:c9:
7a:09:6e:7f:e9:6c:9e:57:3c:89:d9:33:a4:04:84:
e2:20:79:8a:88:0e:04:21:cb:be:99:bc:44:e3:82:
64:20:c5:7d:09:c4:e0:6a:ac:08:76:21:fc:93:63:
d2:bd:7d:2e:18:a2:76:b0:80:17:c5:63:71:d7:e5:
71:1d:d5:3e:cf:77:ab:16:a6:6a:6f:75:b2:de:24:
ef:4f:9f:df:0d:56:5c:67:4b:3f:7f:d5:5b:e8:08:
c6:90:68:d2:b1:e4:08:b8:aa:7c:71:55:a7:58:84:
4f:85:23:81:c5:78:8b:3b:3e:f1:e9:8f:92:a5:f5:
9c:f0:3e:1f:d4:d0:cc:9a:b7:41:40:fa:42:87:b8:
5c:b1:65:ed:ad:28:53:20:bf:19:7a:66:a8:eb:d7:
2e:c4:08:2b:6d:94:9a:1a:7c:b3:35:77:ed:db:4f:
1e:e5:2c:73:2b:62:7a:b8:d7:c2:5d:15:17:f9:27:
8a:8d:06:c2:08:c3:38:9c:34:ad:b3:0b:d7:09:57:
2c:ef:7b:65:11:e8:41:4a:ff:a3:dd:0e:fc:67:84:
8b:22:ec:a2:84:07:42:c8:3d:9a:2c:33:a7:37:89:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:DA:D1:8D:EE:6F:53:A3:7C:3D:06:F9:CA:8E:F2:AD:4B:C7:D0
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b8:90:e6:75:2d:03:c7:d8:39:c5:7c:05:59:72:14:3a:a4:
9d:a0:12:35:09:55:44:a2:13:c0:c9:b5:64:d7:6c:03:f9:bf:
43:ef:38:55:10:8e:73:99:bd:62:d0:19:c5:1a:f1:cc:16:92:
3e:eb:1b:e1:26:3b:30:17:89:62:f6:23:c7:34:e4:03:28:eb:
95:8d:ec:d5:f7:a1:ee:71:c7:30:61:12:48:7b:a7:b6:37:f8:
95:88:ac:97:f9:0c:46:89:ff:8e:67:04:50:34:ec:b3:9b:f0:
bf:b0:17:35:90:ba:6b:12:92:5e:e2:2f:20:d4:72:bb:bb:ac:
fe:c1:da:31:46:1c:e5:ce:f1:c0:dc:f8:7f:aa:bc:5f:03:62:
10:f4:9b:e3:3b:47:4d:55:34:02:82:d8:76:32:c4:70:0d:cc:
1c:ab:54:50:5c:bc:cc:36:ee:3c:28:39:50:ca:be:72:8c:a7:
93:09:0b:27:23:f6:dd:bd:d5:65:3a:0d:b8:6c:9e:57:8e:cd:
e4:66:49:bb:c0:ff:a0:97:f7:ba:fe:54:2a:f0:2b:16:89:a9:
58:aa:c6:64:95:ea:89:a0:fe:65:38:25:6c:56:06:1f:c8:a1:
fb:4f:47:ae:f8:5b:f1:de:f3:f7:94:f7:e7:eb:3a:60:23:38:
79:2c:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:24 2026 by rpki-client