Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: ST0HcchMRA54GOVlKwVQxfcMBt7SOMduOP5cS/jp9g4=
Subject key identifier: 6C:E8:2D:C7:F1:56:E3:32:4E:1E:3D:95:F3:26:3A:41:D1:57:5B:B4
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019D37F79ED42CC8E2ECE13458A5CF8DF5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 170F
Signing time: Sun 29 Mar 2026 05:01:08 +0000
Manifest this update: Sun 29 Mar 2026 05:01:08 +0000
Manifest next update: Mon 30 Mar 2026 05:01:08 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: wPmFS1pnFqnYRoSMYIR/g8R0C5yC6W9w73mP2BK3rf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:9e:d4:2c:c8:e2:ec:e1:34:58:a5:cf:8d:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Mar 29 05:01:08 2026 GMT
Not After : Mar 30 05:01:08 2026 GMT
Subject: CN=6ce82dc7f156e3324e1e3d95f3263a41d1575bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:89:24:45:00:d3:9a:1c:57:dd:6a:43:00:
a5:c1:e8:d8:94:50:4a:06:61:9a:45:16:d8:d7:55:
4c:9e:b7:c0:45:ab:c3:ad:55:43:eb:81:7c:93:a4:
1d:d7:41:8d:93:93:4a:5b:5d:19:5b:fb:ca:21:37:
7f:c3:e9:25:7a:3e:37:fe:05:b0:d2:48:d8:0c:b9:
b3:4e:b7:ea:0e:ea:94:77:73:0e:4b:11:92:85:34:
9c:f0:d7:1a:0d:97:23:52:e0:ac:36:70:84:f0:3f:
b3:90:fa:ef:f4:18:33:fe:b9:f3:7a:be:21:fe:ee:
0c:a1:81:7a:4a:1e:13:48:2e:a3:79:61:3d:e1:b4:
06:fb:2e:c2:f9:57:ea:87:c2:3c:70:6e:97:16:c8:
ab:32:f9:cc:4e:a6:73:bf:ba:61:1a:8e:a3:df:e8:
77:1a:6e:e8:db:fb:cb:54:4e:2e:70:27:35:b7:ca:
15:9c:57:1c:37:fd:15:1d:4e:d7:e2:f2:3d:3d:f7:
44:85:86:b6:0d:89:be:ed:43:bd:c7:52:17:82:61:
d5:da:46:8b:c0:73:ff:ad:56:97:15:92:5b:1e:73:
be:50:d7:73:12:c7:cd:6b:b3:a8:93:b3:97:7b:88:
48:6c:46:61:9c:02:cd:78:4f:55:fe:75:20:a3:56:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:2D:C7:F1:56:E3:32:4E:1E:3D:95:F3:26:3A:41:D1:57:5B:B4
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:10:75:24:ea:2b:0c:6a:c5:b4:84:bf:87:bc:a3:e6:fa:
dd:52:7b:65:6b:89:24:eb:ec:b4:ce:8d:7b:18:0d:1d:f5:56:
87:7c:6e:6d:1e:55:f5:3f:6f:d9:18:70:f7:1f:d8:4f:f8:fb:
50:94:7f:27:a8:af:e6:e5:6d:e0:50:3f:c8:dd:ee:71:eb:fd:
f2:60:34:62:94:c5:e0:a7:4a:6a:82:f4:69:e4:20:46:3e:d9:
93:a4:7a:2e:80:64:4d:31:bd:31:47:ef:ec:8b:dc:0d:a2:f0:
8e:c9:c2:07:be:53:c8:69:6d:e9:68:62:66:83:7a:50:ba:18:
f6:83:64:ca:34:bf:4b:0b:b8:14:15:e0:8d:d3:6d:47:f9:ea:
29:ce:92:8b:48:f3:cc:71:9a:c2:dd:1e:57:39:4a:9d:d2:48:
1d:76:e7:b7:2c:f3:1c:74:eb:8b:a6:ad:fc:51:7b:64:31:0d:
ae:16:0c:a4:5d:30:72:22:21:6c:5c:d2:13:17:42:28:9c:24:
09:5d:d5:d9:d1:d2:6a:7e:cd:8e:38:e2:20:b2:85:d7:3b:71:
9b:4b:9d:50:4b:be:eb:95:cf:a6:e3:7d:21:0f:95:02:b7:ab:
8e:4b:be:a8:6d:16:d5:92:8a:d6:3f:d2:26:ab:a1:97:d1:46:
49:a9:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client