Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: tLRyEVRPkM3/kDUVzziwze61EUTV8Z7+MLWmG461y+A=
Subject key identifier: 9C:E8:22:22:57:B3:4A:34:91:1A:29:1C:4E:C5:1E:E1:77:27:18:A5
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019CE36CC95EF9886DDE79C74359BDE9F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 11E8
Signing time: Thu 12 Mar 2026 19:01:23 +0000
Manifest this update: Thu 12 Mar 2026 19:01:23 +0000
Manifest next update: Fri 13 Mar 2026 19:01:23 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: k3g9Z5/WXT0dWe2MY7TgVAVcdfIPzS5PTqNdHk21kpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:c9:5e:f9:88:6d:de:79:c7:43:59:bd:e9:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Mar 12 19:01:23 2026 GMT
Not After : Mar 13 19:01:23 2026 GMT
Subject: CN=9ce8222257b34a34911a291c4ec51ee1772718a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:3e:c2:52:b4:c4:1f:9f:ef:47:88:ef:69:
8f:bd:16:a4:77:a0:51:c7:d4:cf:f1:91:7d:13:be:
ce:32:83:98:76:98:78:5d:e0:23:d1:79:96:78:0f:
ea:48:9b:17:ea:b8:5e:59:29:f5:27:42:00:5a:8a:
a8:30:00:68:61:e0:1f:d7:4b:55:e5:92:ab:67:cf:
ad:d8:85:27:35:3c:c9:d0:eb:3c:97:2c:7a:cb:ef:
de:7b:1d:a3:7f:ee:9c:2d:58:76:ec:ce:aa:c1:79:
69:fb:e5:77:10:69:05:c2:cf:9b:72:83:98:ed:7c:
82:9e:32:c2:9b:7d:13:ef:60:a8:a8:39:5d:be:46:
a4:c3:53:be:f2:65:74:7f:8e:78:2f:97:ef:b5:2f:
30:9c:12:3e:80:11:4c:a4:40:37:bc:fe:6e:49:81:
80:27:a8:fe:1f:aa:99:8a:8f:e5:7a:7d:06:77:62:
a3:43:b8:f2:a6:a5:fc:2e:26:f3:a8:13:2c:16:29:
a3:96:f7:03:57:3a:aa:a2:9c:b0:cc:29:de:01:87:
a2:30:65:93:02:a1:63:c0:da:ee:ae:32:6b:3b:67:
db:5d:0b:74:d4:1e:8d:04:3a:53:38:81:b2:9f:82:
de:6d:bf:0f:4e:c6:4d:f7:bf:28:f5:63:dd:28:0e:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:22:22:57:B3:4A:34:91:1A:29:1C:4E:C5:1E:E1:77:27:18:A5
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6b:a3:0b:8a:a8:8a:05:46:3d:55:f6:b4:3e:ce:eb:da:17:
24:15:45:8c:cf:34:48:0f:48:6e:9b:07:14:c3:f4:db:96:41:
b1:1e:e2:4e:79:e1:45:1f:ad:ef:7a:7a:83:49:6d:56:df:ed:
82:f8:d4:a3:e5:b3:42:3c:c5:08:58:72:78:1b:b1:56:fb:6d:
1e:a4:40:6e:9e:4d:09:72:c3:fa:09:87:c6:b2:5e:97:ab:08:
c5:9e:fc:d9:f7:49:74:67:30:84:eb:76:6f:8a:e7:79:ee:f6:
76:8a:9f:3e:7a:f4:78:36:19:6b:c8:a0:20:40:fc:f9:3a:53:
dc:35:6b:d9:a6:3e:79:ab:ed:03:47:f3:20:ba:37:77:d1:0d:
7b:56:86:05:e3:36:93:c3:7b:24:cf:cd:8c:7c:4e:05:45:02:
e0:67:37:bd:46:07:98:4e:a4:e1:b9:8e:fe:03:7e:28:ee:b7:
31:48:f2:f1:f2:24:1c:82:a0:9c:5e:a9:c1:64:50:57:f3:48:
e2:5e:8b:70:a2:68:82:0a:fa:7b:58:f1:c5:6e:ab:cb:ff:75:
f2:9a:3e:00:36:6f:96:16:a5:8d:11:c9:ae:d7:f2:e7:ed:9e:
f7:15:5e:01:37:66:0f:3d:ec:42:00:6e:a9:7d:bc:f2:ed:5e:
3f:53:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:22 2026 by rpki-client