Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
File: y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft (raw, json)
Hash identifier: Q19igbmIg3RkrcCR3FxlXz0WYoGeJrQ/L/anUQfKB/0=
Subject key identifier: 4E:FB:BC:BB:B8:6A:34:DB:7B:3D:9F:51:18:C0:06:BA:69:4E:B3:F4
Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Certificate serial: 019D2A72B06D83E61B0F5C2D7CDF372AD596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
Manifest number: 15A2
Signing time: Thu 26 Mar 2026 14:00:52 +0000
Manifest this update: Thu 26 Mar 2026 14:00:52 +0000
Manifest next update: Fri 27 Mar 2026 14:00:52 +0000
Files and hashes: 1: R9AugSjZGtUl5QbJDGzLrOo7kiQ.roa (hash: YTaVUJzrgCb6My35bkphRPYRR1OsleBskFVV/X+sjdQ=)
2: vJn1B7TkIokTRs-gxLbzZLosQRM.roa (hash: Rq5c/JPbynRwbuR0dvCvYWY+PnCFLElh2VPU08vgLek=)
3: y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl (hash: YEbhBGA0I3e6S4riRYsxd6Zg9WwLiZvG51d+vAjFkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b0:6d:83:e6:1b:0f:5c:2d:7c:df:37:2a:d5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3
Validity
Not Before: Mar 26 14:00:52 2026 GMT
Not After : Mar 27 14:00:52 2026 GMT
Subject: CN=4efbbcbbb86a34db7b3d9f5118c006ba694eb3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:97:70:06:9d:14:bf:0e:ef:f0:5c:0e:1e:
da:be:bc:ac:2a:f1:e7:0d:20:af:d3:cd:85:9b:f6:
49:b3:5e:60:95:93:78:0d:9c:0d:39:80:9e:fd:32:
a2:f9:8f:53:0c:83:32:1c:26:3e:bf:e0:1d:e9:a5:
33:1a:f8:7e:cc:06:92:bd:ca:87:21:eb:c8:a7:d9:
d2:c0:e4:84:75:7c:5b:ac:80:e6:c3:09:ad:28:f9:
d5:00:ef:8e:6a:a4:74:cc:26:58:8c:8c:20:70:d3:
75:30:51:b0:56:c1:57:f4:48:ac:9f:ed:d9:08:3f:
81:9f:5a:51:4b:19:95:0e:77:f3:99:57:0c:f6:d1:
bb:73:30:91:da:71:0a:35:6c:20:3c:95:77:57:0e:
8f:c3:41:f2:6f:d8:35:bf:11:8a:2e:82:ea:d1:0e:
51:8d:f2:75:1d:d4:5f:60:1c:71:2d:67:4c:08:8d:
7f:1e:fc:79:cd:c9:13:f9:69:58:68:b3:b9:a8:fa:
41:9d:87:97:4f:d7:e7:b1:4f:a3:82:ab:a5:1e:11:
7b:63:b9:56:76:7f:77:c8:cd:45:7d:6b:7d:23:d5:
18:da:69:30:7c:16:33:37:85:e6:2a:6b:d0:ec:a1:
8e:83:39:32:54:75:1d:c6:2c:73:32:41:cf:e4:21:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:BC:BB:B8:6A:34:DB:7B:3D:9F:51:18:C0:06:BA:69:4E:B3:F4
X509v3 Authority Key Identifier:
keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:62:9d:eb:2d:f2:9d:cb:9e:6c:e5:75:51:83:4f:ad:31:
2e:f0:8f:3f:ea:7d:66:ae:40:35:d3:d2:9a:b7:6f:54:1a:56:
d9:57:be:ff:ec:3d:da:58:a4:aa:2a:2a:ad:c2:2f:80:c4:1a:
14:be:17:9b:39:26:2a:34:60:e0:40:ef:fa:d4:f4:94:62:ad:
77:52:1f:6a:dc:4b:09:19:b1:ec:be:c1:98:fe:23:dc:c1:9f:
7b:c6:69:3d:34:f7:cd:0d:a0:e5:6a:60:f1:1c:d3:43:f0:13:
7e:b5:e3:64:a7:1d:10:b2:a3:e2:11:7a:a9:63:35:7c:16:82:
ca:da:df:42:ac:a0:12:ae:b9:79:95:2c:07:73:f9:f2:ea:01:
ba:e8:44:a8:72:57:52:b2:e5:ec:fd:6d:93:79:ad:e5:9c:b9:
86:8d:7d:8c:52:fc:72:75:11:e3:66:96:b0:a4:05:39:79:de:
12:ef:c3:6e:b9:5e:70:3d:3d:74:86:b5:3c:c3:5e:bc:7d:7a:
c1:a6:36:52:b6:df:a3:7e:65:c1:c3:05:21:bd:f8:74:e7:5f:
d7:19:ee:25:f7:05:1d:da:c4:6d:11:2f:cb:5c:56:d6:5e:50:
80:82:35:40:32:d0:d5:cb:f2:a2:22:79:db:d9:65:2a:86:2c:
e6:9d:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:47 2026 by rpki-client