Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: ChSWYY4IESSUmKHClnS/X8CL69+rNq90w0NS5eMm0Lg=
Subject key identifier: FB:7C:66:30:F7:03:E9:23:99:06:A3:88:6A:8D:1C:77:CC:9D:77:F2
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019CB4DC58D3BD42B9A830A1462E3EB8AD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 184D
Signing time: Tue 03 Mar 2026 18:01:05 +0000
Manifest this update: Tue 03 Mar 2026 18:01:05 +0000
Manifest next update: Wed 04 Mar 2026 18:01:05 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: ZNdJER+ycxsEE8UaMijQi9vq8aT3CMaXunv9HPaTQHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 15:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:dc:58:d3:bd:42:b9:a8:30:a1:46:2e:3e:b8:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Mar 3 18:01:05 2026 GMT
Not After : Mar 4 18:01:05 2026 GMT
Subject: CN=fb7c6630f703e9239906a3886a8d1c77cc9d77f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:95:3f:ab:3d:54:02:86:7d:1b:19:fa:96:
3c:cc:1b:08:ad:64:d1:bc:c8:11:03:6a:dd:9f:af:
75:f3:3d:17:2a:4b:24:77:e6:cd:94:cb:35:ba:18:
57:b5:d2:e6:5f:9e:d3:7b:65:6e:90:ee:35:43:f2:
2a:3b:64:dd:92:a7:1c:9e:cf:a1:58:6b:c8:21:97:
bf:df:25:ec:79:9d:cb:1f:26:71:7b:71:49:38:45:
79:6a:8f:56:8b:44:5c:42:45:14:7a:24:7b:b6:af:
bd:e1:15:f0:35:b6:db:15:91:ab:06:ca:ed:dc:a4:
06:cf:b0:01:cd:69:b1:01:99:18:c9:4c:78:f5:25:
40:4f:35:f3:4a:aa:14:5c:62:fc:7c:f3:fa:74:cc:
36:e8:a9:0d:20:e7:3c:c9:1f:23:eb:a1:5d:2f:8e:
55:c2:9e:0e:68:3c:e9:94:62:d7:d8:f5:54:fd:87:
88:82:d1:5d:c0:f4:6d:ad:b8:ec:c4:09:d2:43:84:
22:68:7d:91:c4:12:e6:06:ac:75:e1:70:09:4a:67:
36:af:0d:c7:74:00:cf:5e:3e:16:8e:88:04:a1:aa:
98:bb:bf:4e:a1:dd:ad:03:0c:13:d0:b8:d0:72:ee:
99:b7:bc:47:45:83:ea:a4:26:00:2c:0f:1a:b8:96:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:66:30:F7:03:E9:23:99:06:A3:88:6A:8D:1C:77:CC:9D:77:F2
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:b5:5b:f8:3e:19:ef:09:ab:66:9c:c5:d7:4f:12:70:0b:
34:3e:df:e7:69:36:17:6e:6d:df:47:91:83:23:2a:05:08:e0:
b0:79:fd:2f:81:15:47:c6:e9:93:fe:ed:4a:56:9e:db:e8:f7:
f6:ce:07:5d:ba:01:2a:29:59:8b:71:66:5e:8f:4a:b6:1e:92:
e0:25:f4:a1:18:21:5c:7f:9a:c1:48:11:80:24:dc:bc:08:ea:
5a:ba:41:53:71:1e:37:fd:bc:70:e8:a4:1d:7d:e2:1c:88:60:
fe:0b:4f:e7:16:74:be:c6:54:dc:aa:44:df:ef:64:6d:15:56:
25:ea:cb:11:ea:99:c2:b9:67:a4:d0:18:6f:f0:57:cf:74:ca:
af:8f:7a:0e:ca:f2:c6:83:58:2b:ab:fc:2d:01:11:7f:13:ba:
49:41:66:40:17:35:12:bb:2b:77:a4:ae:44:8e:a0:63:a5:c9:
05:97:10:4c:94:02:1e:53:6c:20:6e:e3:f3:51:b1:75:f2:1d:
2e:81:19:de:eb:5d:0a:21:39:ce:08:44:fe:19:76:bb:d5:a4:
d8:e3:c6:d2:f8:e8:f3:6b:50:b4:0c:c6:7c:43:06:e7:5b:52:
81:55:5a:42:54:4f:4e:9a:89:c6:66:42:a7:f0:7a:3f:e4:74:
3e:a1:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 23:52:55 2026 by rpki-client