Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: AA2YBCyAh57bjrXTb/D4qAbSRO/wuFpCAlB0GOKE3U8=
Subject key identifier: E4:45:82:AF:BB:C4:17:23:8F:95:E3:D7:B9:F1:10:1E:EF:B5:32:D2
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019CE5FF02F0ADB35219F3C72B830D5D511B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0C21
Signing time: Fri 13 Mar 2026 07:00:20 +0000
Manifest this update: Fri 13 Mar 2026 07:00:20 +0000
Manifest next update: Sat 14 Mar 2026 07:00:20 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: yr+Lz1Ch2jvTfRH5fixZ8Xwxa+ej/P+9qiI1MilQ2fU=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:02:f0:ad:b3:52:19:f3:c7:2b:83:0d:5d:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Mar 13 07:00:20 2026 GMT
Not After : Mar 14 07:00:20 2026 GMT
Subject: CN=e44582afbbc417238f95e3d7b9f1101eefb532d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:a1:38:bb:74:dd:37:c6:6c:32:46:22:a0:
40:a2:ba:f6:da:d5:7d:34:6c:03:ae:83:65:28:1c:
df:3e:53:b0:3b:6d:ae:16:1b:d3:c3:f9:21:97:62:
d1:91:76:dc:f8:2c:c0:b4:e9:48:04:29:7a:78:bf:
26:ec:83:6f:73:5c:7a:75:06:99:d7:52:8c:30:93:
55:b4:3d:38:d2:42:c6:32:98:c3:1f:ed:90:9e:b2:
ea:10:f7:cb:d1:01:81:b3:1f:d3:a3:51:18:ef:a8:
29:ef:b7:81:87:50:6c:42:e4:52:a0:d7:9e:33:8d:
3e:ee:3f:bd:13:c7:9c:b3:5a:50:9a:67:44:6a:22:
8a:64:ef:6f:1d:33:72:db:18:c7:2d:b6:22:f8:a3:
3c:49:d6:f3:90:cd:c7:a3:16:f9:60:e4:b4:73:a3:
25:11:0a:02:2f:e7:2d:f3:df:14:66:bb:10:2f:b0:
16:75:32:75:74:50:a1:bc:bb:f9:96:b2:f7:6b:e7:
05:a2:e0:2a:b1:55:5d:01:21:23:4e:00:48:5f:9d:
b3:53:2a:cd:6c:21:d1:84:c1:b3:e2:37:04:2d:bf:
04:ce:82:ca:be:2b:2d:fc:24:5c:d6:96:f1:62:61:
27:0f:9a:47:e3:89:b4:3a:6e:81:f0:0a:d7:e6:e8:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:82:AF:BB:C4:17:23:8F:95:E3:D7:B9:F1:10:1E:EF:B5:32:D2
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ae:50:ed:9c:3b:4d:b2:14:d9:3b:37:b3:6b:e3:de:a5:57:
2b:1a:8b:84:40:74:8c:fd:a8:27:7b:86:00:11:35:1e:e4:e2:
71:e2:f3:a1:34:3c:c5:7a:8d:0b:76:7e:bf:47:07:4f:54:9a:
ce:f9:a1:fd:aa:45:77:8c:42:02:5a:23:91:78:cf:f7:d8:a4:
47:c5:ca:b6:ab:b6:40:39:46:7a:09:a7:23:10:9f:45:dc:30:
33:a9:bc:75:74:3f:19:f1:3b:3b:87:13:ea:cd:41:cb:90:3f:
0e:74:1f:26:cf:44:03:d9:3c:73:65:46:16:94:76:77:dd:5d:
65:56:ed:38:a4:b6:b1:6b:f9:42:f7:cd:37:4d:19:b6:11:cf:
6e:c4:b2:53:71:b1:f0:c2:66:43:36:37:82:71:df:dc:0b:11:
3b:72:60:e1:8f:ae:78:0a:67:02:02:66:5e:a7:7d:e9:3e:43:
f1:30:d3:73:32:25:bf:a4:5b:57:0a:43:c0:00:e5:86:ac:e0:
14:fa:48:f1:78:f2:9a:04:7d:c8:89:6e:1a:4d:c0:49:0e:8f:
87:26:cc:17:1c:01:2a:fc:c1:4d:dc:cb:67:b0:34:b3:f3:d7:
0b:75:50:d4:da:af:9b:9d:a7:05:77:11:e7:d6:5a:67:a8:54:
54:38:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:31:22 2026 by rpki-client