Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: k/Gw5S9eyJe9Fdmw8m85M1q3hqSYiP+Pon0Rmd/KA4o=
Subject key identifier: 3D:2E:6B:60:4D:A1:36:26:C5:30:B5:79:1F:6B:1F:58:D3:2A:E5:30
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019CC03B8290E2455030409FC6FA5D613445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 021E
Signing time: Thu 05 Mar 2026 23:00:51 +0000
Manifest this update: Thu 05 Mar 2026 23:00:51 +0000
Manifest next update: Fri 06 Mar 2026 23:00:51 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: ck1KSspRh4RPTEu6wl8NWeaWgxHzLeW0houvXuI36fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:3b:82:90:e2:45:50:30:40:9f:c6:fa:5d:61:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Mar 5 23:00:51 2026 GMT
Not After : Mar 6 23:00:51 2026 GMT
Subject: CN=3d2e6b604da13626c530b5791f6b1f58d32ae530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:42:3c:67:e3:c2:01:d8:e1:f9:a5:fb:ef:
c6:b1:4b:8e:51:41:6c:b3:d6:18:d7:bd:06:68:60:
36:0c:bb:ba:81:65:ed:5b:1c:10:61:bd:c3:68:4c:
01:79:f1:16:a1:ca:f7:26:46:57:9b:5d:2e:40:f9:
ee:80:bc:1c:b2:f1:73:5c:b3:81:23:8b:5f:a9:6a:
2b:7b:11:fd:28:6e:85:b4:90:85:22:fd:d2:64:fc:
c4:07:1a:7a:b4:b5:b0:52:dd:d9:b6:a9:cc:bb:88:
ba:c6:56:7b:02:7e:77:11:01:ae:b4:d4:66:1b:b8:
66:31:ac:f1:d9:8f:82:fa:a3:31:b0:a6:72:01:bd:
19:cf:49:5e:81:ad:f4:d0:5e:9e:31:0f:5b:66:76:
a4:4c:1d:c0:45:1b:a0:b8:05:13:bc:68:c3:17:e0:
73:ea:68:ff:0e:83:c0:6b:b4:aa:17:40:17:7d:9e:
6f:e2:81:eb:d9:22:a0:4f:7e:14:81:06:30:cf:33:
8e:98:7c:0a:38:77:86:0f:39:47:5f:fb:40:de:71:
3b:c7:40:12:c9:5f:1e:8c:90:4b:24:86:09:f7:fd:
27:96:04:79:df:92:0e:3c:3e:48:5f:38:95:e0:1c:
ba:04:8d:03:30:4d:5c:e0:9d:03:b0:41:29:ff:d9:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2E:6B:60:4D:A1:36:26:C5:30:B5:79:1F:6B:1F:58:D3:2A:E5:30
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:56:b0:6b:60:65:ff:81:db:9a:e3:87:9d:26:53:f5:4c:37:
62:2b:a9:57:49:ad:bc:d1:15:78:1a:6f:f9:5e:b8:e8:18:c1:
c6:39:05:f5:83:a1:d3:3e:5b:08:61:b5:3f:6a:8a:c4:46:22:
96:aa:f2:d7:04:54:0b:60:d8:54:ab:5d:d6:f0:d4:b1:0b:4a:
01:8b:ff:68:c6:fe:ce:ca:78:78:e7:4a:f9:92:8b:b6:65:a7:
c6:52:36:36:83:30:26:50:a7:17:5f:47:97:c3:4c:18:03:c2:
ea:aa:5d:73:3f:d6:ed:47:c9:b6:50:e7:9a:ef:f2:87:3f:06:
fb:c6:cb:2e:62:c2:b9:8d:3e:46:e9:ec:4e:09:81:d1:21:16:
70:b0:7c:f5:ed:7a:24:78:06:8c:4d:59:c0:a2:26:72:4d:34:
d4:2f:0e:8a:58:c7:b3:bb:2b:26:9c:34:85:79:63:d5:84:5a:
e4:6b:14:b2:14:3d:b1:5f:dc:db:09:33:10:d3:7c:cb:25:90:
10:ff:66:8d:df:e1:64:04:aa:55:73:fd:df:28:6f:b0:8c:6f:
cf:6d:9e:18:68:6e:96:1a:97:12:a0:4d:e7:64:ad:92:2b:66:
d2:14:61:e2:3a:65:eb:8e:57:74:fb:a4:bf:48:a4:63:5e:e4:
b7:ac:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 07:26:58 2026 by rpki-client