Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: GjR4oXf7dAkloYf7gh1hNbYUqmBtdwCZ193jX5Z48HA=
Subject key identifier: 1F:8B:8B:41:0E:7B:49:91:00:75:52:29:87:15:2A:54:28:F7:BF:32
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019D2A04739AE7FD77AD5526946143473C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1175
Signing time: Thu 26 Mar 2026 12:00:27 +0000
Manifest this update: Thu 26 Mar 2026 12:00:27 +0000
Manifest next update: Fri 27 Mar 2026 12:00:27 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: Z9Ojz49cxR7rR9zCCIC3S6aV68KSWxqsT14g7EbNBNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:73:9a:e7:fd:77:ad:55:26:94:61:43:47:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Mar 26 12:00:27 2026 GMT
Not After : Mar 27 12:00:27 2026 GMT
Subject: CN=1f8b8b410e7b49910075522987152a5428f7bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:6f:45:ad:d1:bf:1c:32:7d:1d:c2:fb:e6:
07:44:db:df:fd:31:03:19:99:4e:92:9f:9f:9c:78:
da:61:69:78:8a:33:30:47:4b:08:25:77:27:ac:71:
40:43:61:e2:23:5f:42:94:21:fd:51:5e:4e:34:f4:
00:34:f4:ff:af:f9:3d:e0:01:08:f4:cc:41:98:e7:
d5:5a:d5:37:e3:c6:bb:25:b8:46:0f:b5:18:15:e9:
d1:29:83:6b:65:ea:7b:c9:0c:1c:8b:ec:bd:3e:29:
f3:5c:ae:d1:12:cf:ac:7c:50:b7:3e:b8:67:af:60:
e9:00:3c:5f:9f:8a:d8:6b:4e:ca:65:20:48:42:d7:
18:77:49:db:fc:15:90:02:55:74:15:2a:b0:f4:b0:
d4:c0:6e:c6:92:cd:45:f0:27:4f:52:87:af:7d:8f:
93:76:04:04:82:b6:1e:54:8c:5c:c9:33:c8:b5:ea:
b6:39:52:36:53:a9:b3:19:3c:de:b2:a5:8c:bc:1d:
02:73:56:a5:fc:58:16:33:a4:a2:71:ae:fb:0f:97:
bd:d8:a0:35:d8:e8:3f:8b:a6:cf:8b:05:08:76:50:
98:2b:5f:2e:c9:46:94:61:fe:92:51:12:06:0d:e7:
2b:4f:5e:3e:44:6e:bd:c5:fb:cb:86:ac:7c:2b:74:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:8B:41:0E:7B:49:91:00:75:52:29:87:15:2A:54:28:F7:BF:32
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:66:d2:9d:c4:18:b7:ae:0d:39:dc:b6:07:d1:27:67:32:8f:
77:01:4c:88:93:b6:ad:83:1e:ac:7c:98:e5:0e:64:f2:8f:7d:
e4:6c:74:12:26:61:51:11:29:3a:36:01:6f:ca:78:45:4a:17:
15:35:57:0f:4c:41:ae:99:47:71:fb:62:f4:98:d5:a5:81:3b:
3a:66:f7:fe:86:05:73:01:a2:55:d9:32:dc:c2:30:5a:7d:71:
07:36:f5:2f:e8:5b:01:0c:bd:5b:d9:dd:5b:a0:db:95:47:fe:
1c:39:ac:da:24:a7:e9:61:55:5d:ac:02:d7:f6:22:a1:ae:9e:
6f:13:42:86:80:a4:bc:33:c2:82:0a:8f:36:c3:fa:37:c8:73:
c1:4d:54:7a:25:64:89:2e:de:0d:75:a0:08:05:96:4f:be:d0:
65:c1:17:1e:19:e0:a4:d3:4e:d4:f6:fa:22:b6:70:75:45:11:
08:8d:6e:f2:d8:43:4e:b1:36:aa:1f:3f:f8:01:ab:29:f6:3f:
11:bd:a3:2a:59:b4:53:4e:d9:0d:30:ca:c3:f8:46:6a:52:f4:
f2:d6:10:47:d4:a3:87:5e:2d:b5:7a:6c:42:f4:12:b7:e0:af:
a1:01:37:7a:c5:ed:00:7b:3b:e6:36:09:86:c6:0d:a5:f8:69:
1b:d7:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:17 2026 by rpki-client