Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: F0+FjhStSpueCMClRaHQNRH7B6u1VVG1wgzk3891Ues=
Subject key identifier: DA:BF:F0:61:48:D6:7D:0D:82:47:C7:DA:BB:9C:93:58:A9:B4:1E:7B
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 019CC37341FC791C208D94C1ADDFB0887105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 1459
Signing time: Fri 06 Mar 2026 14:00:36 +0000
Manifest this update: Fri 06 Mar 2026 14:00:36 +0000
Manifest next update: Sat 07 Mar 2026 14:00:36 +0000
Files and hashes: 1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: xPBfw2ilVs80O/wbmbyoWT8kh3D1Rot8BmQPwUEfaCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:73:41:fc:79:1c:20:8d:94:c1:ad:df:b0:88:71:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Mar 6 14:00:36 2026 GMT
Not After : Mar 7 14:00:36 2026 GMT
Subject: CN=dabff06148d67d0d8247c7dabb9c9358a9b41e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:f8:5b:5f:09:d6:43:4e:cc:10:19:e9:04:
5e:67:b7:7a:4a:7f:fe:f1:a4:be:0a:0e:ac:16:1f:
c9:38:96:5f:58:46:b9:ed:d4:53:e9:cd:c5:39:32:
f6:2c:ce:88:a6:e5:67:96:54:a4:06:e3:45:95:ae:
5a:0c:9f:7d:4e:d7:25:98:01:a8:d4:1f:5a:f2:63:
c3:ff:0b:84:24:f8:b6:48:1d:18:20:17:53:48:b8:
0c:79:f8:9b:ee:00:7c:be:ec:88:1b:b1:43:e4:aa:
e4:5f:44:61:36:35:76:32:10:b4:d8:c8:37:da:4a:
e5:73:f2:99:e4:16:9a:3d:ac:32:0e:ad:7a:7e:58:
e6:2e:bc:d8:91:61:0c:ed:a0:06:42:ec:17:d4:bc:
af:ab:62:ae:d9:4b:9c:c1:84:21:41:08:c4:82:bc:
2d:06:44:05:d7:66:b2:90:f0:e6:a8:85:0f:5d:16:
55:cf:68:57:8f:e5:19:e2:a0:20:de:a8:e3:dd:71:
26:ae:9b:2c:43:df:fa:e6:b3:8e:52:90:16:87:20:
26:d1:47:d2:dc:c3:3d:2d:69:21:29:a9:ef:88:ae:
76:12:a5:d6:d6:85:e8:98:23:53:59:41:dc:c8:2c:
d1:26:fc:7f:9f:91:02:75:ab:64:3b:cd:b0:fd:8c:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:F0:61:48:D6:7D:0D:82:47:C7:DA:BB:9C:93:58:A9:B4:1E:7B
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:0c:c8:ef:ca:68:56:71:fd:2a:ff:11:6a:e8:8e:8f:b4:
8d:8e:6d:c5:45:65:4f:17:98:b0:00:fc:6a:bc:0c:91:5d:e1:
f0:d2:57:c6:f2:dc:0c:3e:e2:3a:fe:ed:25:0e:b5:36:e6:6a:
78:1c:13:06:4f:32:9e:0c:ae:88:65:94:87:b5:09:ac:a4:54:
ba:82:35:00:ce:7e:f5:c5:80:c2:6c:1c:11:d3:ef:30:82:12:
df:13:b8:ba:a6:0a:60:2e:4b:a5:cc:3e:83:0d:d8:cb:4f:ef:
7a:80:d3:be:10:b1:da:36:71:85:26:d6:05:00:a1:95:2e:2c:
10:5c:51:2f:e0:14:63:53:a2:fd:2b:eb:7c:15:07:2d:d2:d6:
4f:9d:e7:65:07:57:1f:05:b9:6a:0c:1d:60:6e:d3:16:7a:c0:
64:8e:a3:3a:84:35:8f:1a:78:f1:4e:ca:f1:f8:10:51:b2:f5:
73:b5:0f:9f:f4:97:c5:ab:21:df:56:c9:56:53:d5:3a:00:00:
0c:51:d9:55:e4:bf:09:7a:2b:05:45:49:ca:fb:db:99:76:0a:
13:d9:69:b2:b8:51:46:95:bc:52:77:5e:0c:d7:21:bc:1f:29:
81:05:99:b3:17:2d:f9:d1:9c:fd:4c:ba:67:8f:42:64:3d:b4:
31:2f:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:43:15 2026 by rpki-client