Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: jNC70xYFRLK5EQRQcH9iHI4PgXRYAsxpjgqRkTx0aTY=
Subject key identifier: CF:B2:6B:24:43:43:C1:79:10:6B:BF:F2:A1:74:32:6A:6E:75:12:BA
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019D3865F47E282213ADB6E1815FAEC4A0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 13BB
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: GNpj2wsJ7pIblC8QdJOMtsTVicZ5iYb3SRE89ht2nlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:7e:28:22:13:ad:b6:e1:81:5f:ae:c4:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=cfb26b244343c179106bbff2a174326a6e7512ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:c7:ae:02:de:87:af:46:ec:dc:39:a1:9c:
1e:1a:0f:6f:a0:fb:b5:af:8c:d4:23:19:22:11:ac:
72:31:4b:07:ed:97:07:d5:f1:70:64:b2:bf:54:49:
11:18:3b:7b:e9:de:b2:f4:6f:7e:ff:c2:83:9f:5f:
10:a8:82:64:8d:4d:d3:09:bc:90:85:4d:76:a2:6f:
1c:b7:54:a1:3d:f6:62:24:83:2e:06:7b:e1:0c:e7:
cb:c9:bb:29:f2:55:c2:98:b5:4e:a6:27:06:d1:a7:
63:44:d6:48:b3:c9:1f:27:54:5a:6d:7e:4d:b3:4a:
aa:57:df:5b:98:fa:4d:1a:67:0f:08:c0:1f:cf:38:
61:40:5a:9b:b3:8d:b7:18:01:b9:9b:dc:76:60:a1:
d0:0e:ed:7f:33:6c:0b:f8:13:6e:1a:ce:a3:6e:b3:
86:53:cb:8d:18:f9:16:4e:d2:3a:f3:f2:71:27:a0:
60:03:fa:4f:50:c5:02:dd:6d:4a:53:d4:46:49:3d:
05:38:81:e2:64:45:19:03:f6:08:2e:4a:37:af:4c:
96:33:d0:83:cf:a8:d7:38:36:f2:97:65:6b:e0:1f:
10:10:63:7f:83:fc:59:19:65:2a:8f:52:ee:ac:30:
9b:d4:b0:a5:87:c4:2a:89:30:25:d3:a9:f2:99:73:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:6B:24:43:43:C1:79:10:6B:BF:F2:A1:74:32:6A:6E:75:12:BA
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:1a:38:ea:c3:d0:e6:c6:ed:33:5a:3b:6e:f0:42:60:60:
7c:8e:2b:63:d9:f4:4a:da:5a:8a:b0:eb:4e:9c:9d:5a:17:a9:
3f:90:5e:b0:53:bd:1f:2f:3c:50:49:b6:d7:3d:0c:c6:73:1c:
3c:07:1a:2a:29:38:61:39:b1:39:f8:ec:2f:75:13:fc:42:36:
05:8e:d2:e4:49:8b:3c:e5:36:13:dc:8c:ca:b8:22:a9:7f:af:
a3:ce:82:be:bf:64:be:6c:be:6f:a9:71:61:47:50:ef:ae:6d:
84:11:99:5b:f0:00:e4:1d:e7:c6:18:96:af:e3:8b:21:21:d5:
e2:47:dd:30:c2:28:9d:24:00:2d:da:d2:a9:bf:1c:37:b5:75:
c3:f5:5f:34:ef:2f:e0:d6:36:92:2b:d3:bb:9e:ac:54:e8:0f:
0d:2a:6d:0f:c9:4f:7d:7f:9c:15:5e:0c:3b:56:38:3d:ca:c0:
a0:d4:18:40:8b:5c:fb:c0:3e:9e:f2:5e:f3:78:98:0a:83:02:
df:6d:18:96:31:0a:88:83:5d:c1:ee:ab:3e:13:11:70:80:cc:
9d:95:f8:bb:80:5e:db:17:69:41:82:3e:7e:9a:44:f6:72:b4:
4f:02:c7:b2:b0:db:7d:58:67:92:21:84:85:ea:ea:aa:ea:1f:
85:35:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:42 2026 by rpki-client