Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: bk4b/EdrlaOH1pQnphOQt/UxabJtnqxzUk0r3+jVp24=
Subject key identifier: 2F:DD:D7:54:9F:90:BF:D2:63:DB:0F:E2:17:CB:6F:68:21:0E:56:13
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019CE47EA2CE6FAE22565B250201205C53AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1151
Signing time: Fri 13 Mar 2026 00:00:30 +0000
Manifest this update: Fri 13 Mar 2026 00:00:30 +0000
Manifest next update: Sat 14 Mar 2026 00:00:30 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: U00vBpTwf95ubsl8rFgHtCdkDj/xJXosIPxz5KHfipc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:a2:ce:6f:ae:22:56:5b:25:02:01:20:5c:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Mar 13 00:00:30 2026 GMT
Not After : Mar 14 00:00:30 2026 GMT
Subject: CN=2fddd7549f90bfd263db0fe217cb6f68210e5613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:0c:3d:8a:96:60:f7:9a:c2:4d:7b:cf:b6:
f3:fb:dc:47:55:03:0e:73:ca:5f:64:df:15:ee:b6:
11:e3:2f:bd:d0:21:23:a0:35:57:5d:2b:53:12:9d:
7e:3a:04:14:5e:e5:5e:5d:90:be:75:d2:1c:5e:07:
6e:03:4e:46:15:ea:3a:03:e9:18:79:41:00:6c:12:
66:2f:3d:62:cd:ad:3d:fb:64:3f:bf:55:b0:b8:f5:
40:58:37:14:7f:a5:3f:0e:3a:a8:41:92:e6:d0:22:
e5:9c:cc:b1:09:c9:cc:3e:6c:7b:40:05:f2:16:da:
69:55:33:d2:9b:ac:4a:c8:c8:8b:3e:69:02:76:0b:
a4:e0:6e:48:2e:d7:e5:ff:fe:a0:e0:6c:f8:b9:c1:
68:4d:1a:59:18:a4:3b:03:dd:66:35:b3:4f:24:e8:
b9:7f:27:3f:25:ad:71:46:61:a2:db:36:64:ff:bb:
7c:f2:78:57:a7:34:be:d7:53:3a:1d:e6:2d:41:f7:
80:30:bf:6f:a0:38:1e:b5:4e:b7:cb:19:9a:21:6e:
81:fb:88:50:9b:22:dd:cf:e5:6c:c3:97:59:90:ff:
96:b1:24:cc:62:68:b7:e3:f5:ff:ec:61:55:31:98:
d3:e8:81:7e:1d:d8:6d:90:a1:a6:45:e8:0d:ed:68:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:D7:54:9F:90:BF:D2:63:DB:0F:E2:17:CB:6F:68:21:0E:56:13
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:16:05:36:f1:74:72:71:98:eb:cc:0b:3a:20:2d:ac:e3:f6:
9e:db:e3:94:13:01:41:47:7b:e5:12:f5:45:34:5a:bd:27:1b:
2f:d2:15:66:4e:34:f5:7d:e6:09:1d:25:b6:30:13:c6:62:d8:
6a:3d:cd:d9:25:46:70:b5:c3:d0:66:1d:0a:49:5b:9b:b8:93:
27:fb:94:6f:6e:a7:21:1f:97:a6:96:e4:4d:b4:89:0f:6b:c0:
a9:1c:6b:7d:08:19:88:b5:3a:f0:f0:8e:10:9b:a3:60:6f:22:
d5:7c:2a:71:7b:96:44:61:9e:85:5b:fa:d2:0a:02:ad:dc:9c:
c5:aa:2a:d0:ab:5b:4d:54:fa:28:91:6a:8a:da:b5:66:2a:1e:
12:21:52:87:72:78:d5:76:9c:27:5d:96:73:bc:17:29:5e:3d:
10:9e:9f:4f:6d:50:36:64:52:ac:07:70:15:2b:79:55:0b:1d:
7a:9e:bb:84:2e:6b:32:8a:f8:49:00:64:b9:f9:c4:39:5d:97:
38:71:08:1e:43:8b:18:b9:44:2d:c5:cc:84:7e:aa:0e:45:a0:
ca:f8:3c:ac:15:12:c9:53:8b:30:94:f1:31:34:2f:f0:94:65:
7a:36:70:70:6b:d2:41:3c:d2:7e:c9:48:7d:7c:72:86:e1:a8:
87:24:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:37 2026 by rpki-client