Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: svu7/IeoyJ7ISGJr0Py4g99CDn54f0LJ6EfrMnG62Sk=
Subject key identifier: E1:71:B5:79:37:EC:29:61:86:0C:D6:F1:65:03:89:63:3B:70:51:70
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019CE636860D3FC6F2698AF369F3029FA340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 08:00:58 +0000
Manifest this update: Fri 13 Mar 2026 08:00:58 +0000
Manifest next update: Sat 14 Mar 2026 08:00:58 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: tEy4IKMAa6s/98Sui7uhTz6T0t0W0rMmqldm73FQzT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:86:0d:3f:c6:f2:69:8a:f3:69:f3:02:9f:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Mar 13 08:00:58 2026 GMT
Not After : Mar 14 08:00:58 2026 GMT
Subject: CN=e171b57937ec2961860cd6f1650389633b705170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:3f:51:21:b5:c6:42:b8:6c:dc:18:42:97:
a7:03:79:b7:42:72:57:5b:f0:11:a1:54:5d:8f:ba:
a3:9e:62:fa:0a:0b:5c:82:3e:2f:c5:03:39:93:9c:
b4:56:ae:fc:6c:70:46:3b:5c:d8:3a:9a:a7:b9:17:
fa:7f:2d:40:5f:ff:97:eb:de:34:5b:e0:11:4a:21:
57:ca:f9:15:30:9a:5c:2a:0d:46:c7:c8:3f:20:0a:
72:34:f8:b7:c0:a3:af:96:f3:d8:0b:bb:91:af:23:
4a:01:21:22:ee:da:b1:0f:e5:6f:96:88:23:51:27:
ec:75:b3:31:e7:ed:db:99:29:b4:8d:10:d3:03:7e:
ac:a1:8f:6e:26:7f:11:4e:48:2f:77:bb:63:ff:37:
1b:8e:4c:84:d8:a0:09:a8:8b:84:91:dd:11:7b:7d:
eb:24:80:c9:d2:be:74:40:22:ce:01:33:39:17:77:
db:e0:ba:80:12:02:4f:ef:ae:96:e0:77:3c:65:06:
dd:89:8d:ac:36:95:6d:ea:15:ac:aa:d0:0d:a8:05:
f6:f7:66:f9:4b:ea:95:f1:3f:b5:55:b8:16:03:b5:
2b:47:b4:95:b4:d9:68:e5:1e:15:4b:e0:e0:8e:ee:
77:5a:ec:10:19:3f:cb:28:85:4d:56:a2:26:21:45:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:B5:79:37:EC:29:61:86:0C:D6:F1:65:03:89:63:3B:70:51:70
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:7d:c0:26:7b:c3:ec:ee:90:d6:1c:e2:99:5b:8a:09:30:
77:f7:1b:92:15:0a:26:8c:5f:b1:e3:45:5e:b8:23:8e:db:c7:
8c:66:b1:71:34:9f:6f:fd:68:bd:ae:92:62:17:40:90:4b:ba:
44:95:c7:4e:a8:28:d0:36:5b:06:05:08:b2:82:c6:8b:7c:b9:
7c:b5:fd:a6:90:97:e9:6d:4e:b9:77:01:1a:62:bc:ef:f4:51:
fd:1e:8a:3f:9b:c6:e3:33:3d:b6:86:17:09:b4:a2:ab:cb:7b:
5b:ab:a0:00:10:38:50:5e:d3:46:3a:b2:b8:91:88:95:bf:5c:
5a:47:36:30:3b:97:cd:71:e2:38:21:a0:83:54:df:0a:9a:03:
2a:cb:18:27:4c:79:f4:da:96:66:3f:93:6f:38:1f:a0:59:0b:
f1:64:04:d4:a2:2c:fb:49:55:76:bd:df:a3:27:a0:eb:93:13:
69:4d:12:a8:43:16:bd:52:ac:86:ac:b8:8a:b3:8d:31:f5:9b:
97:8c:be:39:47:d5:26:9d:a2:43:b7:3b:b2:f7:9f:c0:b6:01:
04:e5:d2:aa:7b:e5:3e:44:53:2b:c1:1b:17:87:23:38:46:b9:
c7:56:1b:d7:d0:df:fd:d0:a8:23:4d:c9:4a:75:0b:1b:9a:8a:
37:53:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:13:58 2026 by rpki-client