Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: /EvCr+OsQrLGpgIDUbvYjio8vTQO11Bs87E4ZEiq83w=
Subject key identifier: 09:2A:4A:D4:EF:50:4C:46:A0:6A:A9:21:A5:6C:BB:98:42:30:FC:63
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019CE4EC6242152DD19D4E4C0E9BBC3530CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 073D
Signing time: Fri 13 Mar 2026 02:00:22 +0000
Manifest this update: Fri 13 Mar 2026 02:00:22 +0000
Manifest next update: Sat 14 Mar 2026 02:00:22 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: b+46vCTt6+cVG7JyZ/RmCi2zB3UCVpInrGX0RM1XcsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:62:42:15:2d:d1:9d:4e:4c:0e:9b:bc:35:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Mar 13 02:00:22 2026 GMT
Not After : Mar 14 02:00:22 2026 GMT
Subject: CN=092a4ad4ef504c46a06aa921a56cbb984230fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:d2:95:5a:51:ed:d4:25:93:d7:f0:ca:db:
a2:1c:ea:c3:ad:20:4b:31:3c:ee:84:2f:d9:a2:9f:
d7:e4:f0:5e:84:b9:ab:9b:75:d8:ea:10:6e:8d:de:
3f:88:39:4e:b2:cd:d5:71:11:33:03:d7:d9:a7:46:
e6:7d:2a:5f:e6:b8:c6:99:ee:d8:e9:fa:69:76:e3:
ce:ee:d1:ab:3d:18:30:36:8b:78:3d:f5:5b:5f:61:
92:9a:e4:17:a5:f1:b1:39:8d:21:8e:11:bd:99:08:
9d:64:51:b8:31:a4:9b:12:58:d7:49:bc:7a:23:f3:
b0:5d:b6:57:c2:0a:1b:27:e8:4a:07:07:48:e6:e7:
f1:0a:bf:01:cc:19:7d:8e:ec:65:09:d5:69:01:6e:
e5:b8:2e:38:11:13:fd:73:c3:a4:38:d9:c2:ec:bc:
cd:e8:ff:cf:0a:46:c8:e0:a1:26:ff:2b:8d:87:f6:
2a:d0:28:0c:94:c4:99:83:9c:fc:09:0a:60:d2:5a:
76:24:32:c1:9b:1f:d6:d2:e8:1c:1d:86:b1:9d:e3:
6c:f7:26:a4:09:01:1a:74:c8:07:cd:1a:64:a8:40:
5f:82:94:46:cf:c9:24:ee:1f:b7:72:19:31:b0:90:
19:8a:4a:ad:c9:40:00:7e:dc:01:ff:1c:e0:01:b7:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:4A:D4:EF:50:4C:46:A0:6A:A9:21:A5:6C:BB:98:42:30:FC:63
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:dd:26:ab:65:a5:a7:af:03:b5:ea:be:25:ff:0b:e9:3f:
03:35:f9:af:89:ee:80:4b:ac:df:e3:71:7c:10:3b:56:35:95:
ba:3f:cb:95:56:0d:5f:13:eb:82:a7:fb:23:b7:12:75:75:cb:
b5:30:30:9c:0a:25:b0:6d:77:af:28:cf:29:d1:f4:93:b2:aa:
39:1d:40:d9:5f:3d:5e:80:ec:18:38:c9:e9:d9:36:82:e4:4b:
56:fa:42:bc:7c:19:b6:29:ef:bd:39:fe:56:d0:37:9f:57:8e:
c4:25:ef:e7:86:1e:ff:4f:89:21:f5:71:c7:80:68:10:8d:25:
d7:6a:c2:67:75:cb:43:62:50:41:41:1c:f6:63:5e:eb:3b:38:
3f:45:df:1a:f3:f6:8e:6d:6b:fc:fb:d5:a5:3f:f3:78:60:55:
87:b9:4e:9a:ea:6d:e2:b8:0c:03:86:2b:02:e9:4e:ae:e4:b3:
f0:82:c6:ec:19:d8:43:84:ec:89:0d:28:ae:3f:31:55:b3:79:
b9:64:81:83:40:a7:4a:5e:73:16:f9:4d:08:d5:5b:f0:9c:5b:
d4:79:bb:20:77:ba:e7:77:25:62:1f:7f:96:a1:4c:93:9f:34:
02:ea:dc:36:d9:23:38:6a:92:48:0f:48:33:0d:48:1c:a9:2f:
0d:fe:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:35 2026 by rpki-client