Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: bFvzCnylHzzhxH+cv4lQWD6T5Kq8kAtnTuy9mlGQMBE=
Subject key identifier: 56:08:63:5D:EB:6B:1A:7B:14:94:20:3E:66:3A:18:BC:00:91:55:F5
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 019D371B79DB7E70B2FC87DEBCC54AAB269F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: n4s6Px6hFqltGid0PJ51q1ufKvLhlsbjG214IZ9J6c8=)
2: yh8RCY-bj175I6qO1y_qoa8Z7Jc.roa (hash: 4zdPWYLlDQUfMdRZQkA+GGAtm8jeXR0HD9R4ibPVvfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:79:db:7e:70:b2:fc:87:de:bc:c5:4a:ab:26:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=5608635deb6b1a7b1494203e663a18bc009155f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:f9:3a:91:25:37:c7:2b:78:17:b1:b0:74:
5e:56:b1:27:de:41:25:b0:6d:75:4d:40:66:85:20:
30:cc:82:32:c6:e3:e4:21:d0:67:a0:b1:e0:2c:a4:
2e:3a:1a:bb:ca:59:1d:1d:b4:61:39:11:c5:d2:e9:
b4:5a:e2:05:01:68:4b:57:9d:31:90:a4:17:64:9f:
29:78:7b:b0:2d:45:bc:c4:d8:a1:2e:f7:f3:c4:33:
c9:15:d5:3c:98:48:02:cd:42:32:1b:b5:03:1d:22:
2b:de:0b:d4:d6:9b:6e:d8:10:d4:be:b3:30:68:8a:
33:f2:b8:96:94:6d:00:65:6c:7c:00:aa:45:0a:e1:
3e:4e:ec:1f:78:0c:3d:60:e5:4f:49:fe:06:8c:97:
63:b4:9b:27:ea:a7:a4:6c:c3:ea:64:cc:bd:cd:68:
e1:45:73:be:cb:5a:7a:be:6c:af:fb:a9:66:83:05:
f7:6a:fb:9f:5c:dd:1e:2e:1f:6b:2a:cb:ca:5d:90:
67:b5:c8:f6:f1:93:b5:36:a9:9e:b2:4f:52:5d:b7:
cd:7b:37:12:a6:e6:2e:3d:c2:9b:09:d6:5a:8b:e5:
60:bc:0d:1f:c0:1f:bd:b7:49:e7:f3:01:17:bd:13:
02:27:82:b1:6b:8d:fb:b7:1b:4c:6c:b7:a6:18:34:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:08:63:5D:EB:6B:1A:7B:14:94:20:3E:66:3A:18:BC:00:91:55:F5
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:f0:a1:bc:f9:01:dc:99:ef:56:78:07:de:2d:bb:6c:34:
94:61:55:96:a9:f3:36:d1:c9:bb:3d:a1:25:b3:b9:20:4b:88:
20:66:52:f8:9f:1b:36:2e:4e:85:fb:2a:8e:6c:51:23:10:d4:
12:cb:53:f6:36:5d:db:d3:6f:c8:cb:5f:bb:2c:95:e8:af:a9:
b9:e5:cc:e1:1e:75:75:e3:20:34:13:be:af:13:81:71:7b:d2:
f8:1f:b0:ee:12:a6:bd:14:fc:27:0e:33:6b:95:55:0e:3c:fc:
8c:72:77:5b:62:1a:69:43:41:f7:81:17:ae:68:a4:9c:f2:20:
9a:a9:09:43:d6:3c:91:5a:62:37:09:2e:be:6b:ab:df:f6:46:
55:d4:7b:e1:99:a8:d2:b8:b2:b2:0f:d2:85:45:11:ac:2c:b9:
e1:0f:3a:de:3f:ae:d9:ed:93:c5:a7:ef:cf:c0:7d:79:53:11:
e7:56:2d:40:c5:21:b9:49:b8:0a:0a:a1:42:62:f1:73:0e:1c:
a5:a3:46:30:6c:3d:ce:17:ab:94:75:8e:e8:89:2c:0d:79:50:
aa:52:45:cd:61:4e:44:eb:67:76:82:0f:3d:c3:4f:e9:8d:22:
a9:01:57:bf:60:25:57:0c:d6:58:45:00:19:43:3d:0f:78:06:
83:7c:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:03 2026 by rpki-client