Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: 3UvNnDB/tGiYX+VNDfEQ9wIfxekArzEm9Nd2Aao5aU0=
Subject key identifier: 36:76:7A:15:62:13:04:E3:61:91:72:A2:60:ED:B2:2F:0C:AF:51:30
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019D26963600E549F67D3163A4B0FD46F1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1706
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: biXxwFqMOBa74djJRxd8xdVzRNUkKf9/zRmEmSvElbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:36:00:e5:49:f6:7d:31:63:a4:b0:fd:46:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=36767a15621304e3619172a260edb22f0caf5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:22:d9:18:87:62:d9:b9:86:cd:03:85:d6:
4a:66:28:9f:12:a5:80:76:29:e7:8e:e6:07:e3:bb:
71:0c:6c:de:5c:48:e5:e7:d1:04:55:6e:f1:92:17:
bc:7a:f9:60:96:65:dc:1d:00:a5:0d:b3:be:3d:36:
cb:ef:92:5c:84:80:7f:fd:48:aa:bd:63:a1:58:8f:
82:f3:ce:a5:48:19:ae:44:de:2c:0d:ae:1b:14:d8:
c1:a6:49:fa:32:90:af:93:c3:d5:d8:6e:67:91:2e:
b9:3f:ca:49:00:21:53:2b:f3:29:d5:c9:c2:9a:6d:
29:4e:ba:03:74:f0:08:41:e7:bd:f7:23:5b:fd:cb:
eb:6c:4e:1a:f6:9e:ab:d5:84:43:26:c2:b9:01:f8:
ac:87:47:74:5b:78:2f:dc:b9:81:10:12:ca:ac:75:
d1:03:2b:73:c9:d0:92:ec:c5:33:63:d6:55:e1:e1:
f8:5a:43:70:62:ee:a2:f8:9a:33:9f:b0:e7:ce:86:
86:eb:57:f4:c3:ae:34:26:3b:72:c9:1d:05:28:45:
4a:32:d9:ee:89:1e:9f:6c:e4:bd:6a:ea:d8:51:7b:
a8:35:32:23:f6:44:29:23:39:05:f6:35:d8:65:46:
93:3a:41:c8:05:3b:f7:fd:03:85:ba:51:0f:0f:d5:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:7A:15:62:13:04:E3:61:91:72:A2:60:ED:B2:2F:0C:AF:51:30
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bb:20:7d:68:a5:36:d5:1b:64:34:a9:7e:18:18:f5:e9:81:
1a:ff:50:dc:81:02:9d:2f:23:96:d0:83:d8:da:1f:d5:74:75:
50:72:37:d3:74:c6:00:59:e1:77:de:e0:94:a5:ef:4e:06:b5:
e9:08:c2:a7:bb:bf:45:58:d0:5b:e1:36:98:f2:ea:ea:25:20:
dd:bc:27:5b:0a:3a:8c:ee:74:f6:7e:e3:e1:99:f8:a3:e7:1e:
72:03:b9:67:1e:28:64:53:c8:d5:4d:4c:29:c5:20:6d:2d:45:
29:9e:71:f1:02:bf:46:86:11:bd:f8:55:a4:7c:b8:1e:f1:6f:
0e:d3:0f:a1:bc:44:02:3e:1a:b1:3d:38:8d:3a:36:68:f2:d4:
96:12:f0:0d:52:b5:aa:45:ad:c8:60:95:77:e2:3e:f1:e0:a0:
ec:58:19:89:2d:cf:95:85:9e:a6:7b:b7:07:16:ca:98:13:76:
af:42:0e:55:ce:1c:e8:e4:c2:68:ae:0b:b6:e4:00:f9:9e:58:
65:c2:8f:3c:2e:43:d4:23:bd:ec:12:02:c9:eb:0f:db:a7:a9:
b7:9f:4f:55:c9:53:70:04:a9:94:15:ad:a3:9d:6f:63:d2:e6:
05:54:63:a5:8a:59:25:17:99:cc:05:73:99:82:ec:0c:af:7d:
96:50:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:24 2026 by rpki-client