Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: 4R59sz634BCfOdnjzoKBanyDtk+5/KWyv5HJlJiMZLQ=
Subject key identifier: 03:86:AC:84:4D:B8:84:31:FC:20:82:88:A1:B6:9C:21:65:D6:E6:A2
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019D37897C96D54711C86899E9F265632BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0967
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: C5rFgjWUCMp5EBPsFkAF1ExkhOTjoCKgZtdHNjNoTpI=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7c:96:d5:47:11:c8:68:99:e9:f2:65:63:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=0386ac844db88431fc208288a1b69c2165d6e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:73:2f:8b:c6:00:8f:67:18:a5:92:d0:2e:
ba:79:20:25:eb:dd:d9:3c:fe:ad:75:f1:df:cc:76:
60:46:de:44:1c:9f:5e:26:c4:81:5c:38:5a:3c:02:
90:2d:1c:c0:11:ba:85:35:f1:fa:d8:72:34:3f:05:
c5:85:7f:b8:db:40:d7:97:16:f2:1e:4b:f5:22:b9:
91:64:82:5e:6c:3d:92:3c:b5:46:67:49:f6:78:9f:
e3:ba:31:f3:5e:d4:46:6a:52:84:a7:c9:d6:45:c1:
37:3f:cb:b6:38:60:10:28:8a:ba:a9:ac:db:8a:02:
78:81:ef:9b:a8:61:fb:a7:a7:b8:f0:cf:22:98:28:
8d:da:14:f5:93:b1:10:38:4f:7d:68:8c:aa:0c:05:
3b:77:77:38:eb:88:38:ec:c3:30:94:e2:e8:e3:97:
c3:53:61:50:80:7a:9a:b1:ee:98:ec:a5:5f:74:89:
2c:23:05:b2:cf:be:6e:42:7a:6a:e1:37:c0:47:e1:
6f:d0:be:07:1d:8a:f8:cf:d3:d3:56:0c:15:c2:13:
f1:e4:2b:dc:26:62:e0:a1:f8:be:94:5e:02:db:5d:
03:24:cc:20:e5:5a:88:71:9f:e6:bf:a3:08:d2:d1:
d8:f7:8d:09:34:29:aa:74:84:19:d2:c1:c4:0b:9f:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:AC:84:4D:B8:84:31:FC:20:82:88:A1:B6:9C:21:65:D6:E6:A2
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:da:33:93:e6:88:b7:cb:5c:01:9d:9c:b6:9d:9d:fc:ac:f3:
67:d4:59:6a:f5:d1:a9:e3:74:b1:02:96:80:e4:81:9f:67:bf:
87:79:1e:7d:9b:3b:1c:7e:84:c9:06:27:31:42:a4:3d:47:c1:
d7:04:0f:f1:d3:13:56:7f:eb:07:d5:55:27:e1:d8:b2:a5:e4:
3e:48:ea:f8:38:00:ac:aa:11:02:c8:ab:29:73:8d:83:b7:bb:
9f:10:fc:62:9a:a8:f0:d7:4f:24:01:52:a9:48:72:d5:a1:d8:
4f:42:50:f4:cc:a7:68:26:21:41:db:d4:ef:7e:c1:88:34:3f:
03:09:71:68:f8:7d:75:40:a4:34:61:eb:d9:1e:91:82:b5:2c:
ec:89:3c:d0:38:6b:23:aa:7f:31:66:dc:62:82:7a:62:30:7f:
cb:1e:88:1e:c1:10:b3:1b:86:cf:93:23:8c:f8:c9:ca:dc:29:
81:e6:ed:97:12:a3:01:38:34:b1:c1:56:03:1d:a5:5e:ce:ac:
eb:99:d8:2c:6e:0a:13:0a:b2:ca:ca:26:75:c7:40:a0:74:a1:
d8:2f:00:2b:c5:29:4f:47:9c:51:c2:9c:d3:fc:5b:de:16:41:
e6:7e:2d:0a:69:73:27:0e:6c:3a:2f:f9:45:96:55:b0:72:36:
9e:14:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:28 2026 by rpki-client