Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier: ZNnoUNzb3DnDHBgktt882qMVCPHFeqCwk07LTH8SP6c=
Subject key identifier: BC:D9:22:F0:93:09:92:DC:4D:77:A8:F5:99:87:E7:4C:E8:9E:1B:75
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 019D3789666C6895B0AEC5FD334BE3AF3F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number: 1059
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: 5aZtWpM8EH8r1ElpKBNdYvqjaJiJJO19cA3Vhp9OwiU=)
3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:66:6c:68:95:b0:ae:c5:fd:33:4b:e3:af:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=bcd922f0930992dc4d77a8f59987e74ce89e1b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:f0:6a:fe:8a:49:af:9a:f6:82:ed:a4:c8:
6a:cb:33:a1:63:1a:f7:62:2b:5d:7f:d5:27:77:61:
2e:c1:48:4f:c9:75:c5:8c:d6:96:81:20:4c:2a:0f:
ab:7d:29:5b:4d:67:04:2b:a4:2a:d9:af:9d:5d:e7:
a9:57:76:76:0f:5c:ee:a1:07:27:aa:e8:ef:b4:83:
de:2a:b0:90:e6:20:08:4c:9c:4d:59:9d:2c:6b:9f:
4c:ae:55:e6:82:6c:53:25:45:bd:92:48:22:d9:0d:
5a:9e:0f:da:2b:e1:4e:07:6a:62:11:fc:00:dd:2d:
d8:85:38:0d:90:f8:8d:3d:aa:ca:82:f7:43:62:bd:
2e:87:57:e7:f6:ee:fa:07:e6:83:18:2f:ef:f6:15:
9d:95:95:98:9c:9e:c3:cf:28:d2:7b:2a:68:fa:75:
6f:30:81:91:a4:68:e4:15:b5:3a:c0:55:26:44:b0:
0b:cc:03:11:81:00:39:dd:44:b0:86:a0:9a:ce:8e:
fb:bd:5a:f0:c9:10:05:44:15:83:fe:b9:38:77:28:
d9:d6:01:6b:a1:15:39:bf:8e:58:31:27:29:af:35:
5d:50:31:02:d1:8b:0b:38:ff:dd:08:5e:d9:21:5c:
fd:0a:f7:4b:16:ad:1e:8f:cb:d7:49:ab:35:41:0e:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:22:F0:93:09:92:DC:4D:77:A8:F5:99:87:E7:4C:E8:9E:1B:75
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:d8:24:7d:ed:75:f1:a3:d1:0e:9e:01:53:63:c7:dc:e0:
6d:27:c6:10:bb:e9:a8:61:47:96:bd:35:7f:6d:67:0b:bb:9b:
cd:f1:18:f9:56:f2:77:d5:0a:df:47:30:9a:f1:59:d1:f1:53:
05:af:c7:67:5e:52:2e:93:4e:6b:5d:ce:aa:7d:19:91:7f:a8:
21:58:9e:b2:ab:94:8f:62:dd:e9:62:6f:56:6d:e3:d8:76:c5:
67:05:f4:0c:80:4c:74:a8:af:a6:32:bc:57:ca:f0:f3:85:f9:
cd:b8:ab:ab:b4:2e:88:2b:ef:f2:d9:23:d2:70:dc:92:20:ab:
da:f6:a3:31:dd:41:72:1e:6e:20:fb:ea:85:63:ef:cd:61:30:
52:e9:2a:9e:81:01:14:b8:3b:1b:cb:ae:ff:56:3f:1a:90:e4:
82:2e:f7:15:2c:ce:d1:2b:ca:74:94:c8:14:f9:da:32:4c:ff:
ca:ad:12:4b:78:c3:53:f8:46:4e:48:bb:86:20:9b:08:33:df:
6e:52:3e:d2:c2:c8:a6:1d:22:f2:6a:c7:ca:be:e6:52:b6:ce:
34:f8:40:22:f0:45:92:29:0e:df:35:6c:b0:05:40:9d:b8:00:
2a:3c:d5:8a:15:26:4a:af:57:88:47:7d:53:7f:e4:70:8c:ba:
47:d1:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:22 2026 by rpki-client