Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: ur9lS6LYGdR4E8veROwz23EfBi8NhrPESBOCkKbf/oU=
Subject key identifier: F7:9E:FD:4E:6C:32:92:69:36:C6:DB:3D:EE:58:3C:85:24:3C:9D:98
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 019D38D353D3A821923F13B54A3C7EDFB04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: 1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa (hash: WkyuSbuUrQsBUNZKIgd/RxLYyL6Wt7Nlixkah71KQxI=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: si1GIxyIAkNL5YNGn9EwCI1Gd9RpkRYzT6rhuRGcV6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:53:d3:a8:21:92:3f:13:b5:4a:3c:7e:df:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=f79efd4e6c32926936c6db3dee583c85243c9d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:16:9f:1d:dc:20:78:01:3e:1f:ff:e7:68:
26:c3:6a:33:a4:c3:5b:0d:d0:20:aa:c0:73:03:f3:
52:69:4d:5b:c3:4b:b5:3b:69:76:04:0e:ef:90:b7:
0c:98:22:20:d5:17:c3:e4:29:fc:b0:44:6f:1d:27:
bb:74:4e:7a:4a:a9:56:b2:1d:78:00:d4:ce:5e:5c:
a0:38:94:0c:09:2e:a6:37:26:38:78:b5:06:62:25:
f4:f9:d5:94:b8:05:b6:94:b0:36:df:a6:29:3d:0e:
b5:fe:2e:2a:f8:95:26:bf:22:39:ac:ca:a1:70:41:
13:8f:c9:60:88:7f:8f:66:7c:d1:f9:3d:3f:0b:c4:
32:af:fe:71:4a:90:5d:26:f3:be:e4:ac:ba:d0:06:
a0:f7:b2:e9:9a:89:48:9d:5d:99:f4:47:9b:08:6d:
59:eb:90:fb:77:0f:aa:d8:cf:50:1d:ab:7e:1d:4b:
3e:89:7b:96:da:46:54:ec:b2:e0:ec:48:c6:9f:a8:
73:73:89:2e:51:70:fe:9a:ef:f7:72:5d:07:d0:c0:
c0:2e:0b:89:19:c4:22:58:2f:e8:b1:40:9f:a5:95:
3c:64:ff:5a:e5:7f:af:63:d9:17:2c:95:6e:5d:b5:
1a:02:fe:f1:71:ec:58:3a:38:13:d6:24:be:69:37:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:FD:4E:6C:32:92:69:36:C6:DB:3D:EE:58:3C:85:24:3C:9D:98
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:b5:8f:af:39:18:95:37:de:ee:64:a2:7f:44:98:d2:6a:
a3:55:c1:b6:c4:25:8a:22:f0:9f:1f:2a:95:12:6d:57:9c:bf:
4f:b3:c1:74:6d:8b:85:32:a0:b3:e6:cf:df:1d:bf:bd:30:15:
f4:3e:69:28:3c:d9:c5:65:a3:6d:f8:6d:56:01:63:f9:76:e1:
d9:f5:6a:16:fc:a0:fe:6a:d4:44:72:59:70:48:5b:35:b1:10:
19:55:2c:16:a4:86:f1:21:f9:be:37:62:07:0f:fa:c5:bb:23:
f4:92:85:a3:af:f6:77:a7:7d:aa:e1:fc:c6:a2:cc:04:7d:22:
11:78:a3:39:49:dc:6d:ca:79:df:cc:8b:33:4b:b9:4e:bf:d1:
93:9d:12:a7:af:3b:c1:15:d5:b6:75:08:b9:80:4a:5c:d9:a5:
84:33:b0:28:78:27:7c:85:9c:1c:02:a5:26:bc:89:23:1d:e5:
5a:77:4b:46:bb:86:37:5b:ca:d0:34:8a:42:0c:47:af:40:db:
54:ff:54:58:d2:70:bf:6d:d2:7c:b3:ee:66:3d:6e:34:39:d8:
68:fb:24:42:39:ad:0a:77:e4:4c:69:4c:82:f2:8a:f1:cf:df:
16:22:1f:de:7f:78:3b:2a:b7:4d:b4:37:a8:b5:67:42:75:19:
c0:14:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:16 2026 by rpki-client