Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: KzZK1D6sNPR5POiK4XSu61BUmQUFKof7mqb1spg28B4=
Subject key identifier: D8:B3:81:D3:06:27:64:C5:E6:9F:30:72:45:67:73:AB:70:F3:F6:97
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019CE447D39DD975A3FCE5A68E764FEDF66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1876
Signing time: Thu 12 Mar 2026 23:00:38 +0000
Manifest this update: Thu 12 Mar 2026 23:00:38 +0000
Manifest next update: Fri 13 Mar 2026 23:00:38 +0000
Files and hashes: 1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: W16+ipug7z/shHoZTUUCtbkRpLhuLsh8zpVCJgIpDig=)
3: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:d3:9d:d9:75:a3:fc:e5:a6:8e:76:4f:ed:f6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Mar 12 23:00:38 2026 GMT
Not After : Mar 13 23:00:38 2026 GMT
Subject: CN=d8b381d3062764c5e69f3072456773ab70f3f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:69:87:5d:c1:95:56:54:ab:63:5d:1e:33:
3c:1f:b1:47:8d:cf:c5:f7:f7:0a:0f:00:48:39:2c:
3e:e6:1d:d9:9b:c8:8a:4d:1d:85:24:32:40:38:00:
7f:2a:58:8d:41:be:57:43:ba:81:54:0c:08:a0:f0:
e3:b7:c0:a1:43:65:34:73:2f:26:32:89:e9:b1:84:
99:55:20:e6:29:9a:1a:d3:4a:c5:05:71:42:74:8c:
7d:65:cb:f8:3d:b7:df:e4:e3:1d:8f:76:1d:68:85:
be:07:70:bb:dd:33:c9:4d:81:0d:5c:af:cd:c8:b7:
60:3b:e6:03:d1:ed:9d:61:18:0d:ad:f8:66:9d:0c:
0d:4c:dc:5f:4c:1d:0d:55:fa:75:9b:ec:ba:b1:cc:
ed:3f:97:f5:70:d3:16:ed:79:6a:bd:1a:f5:28:c1:
fa:0f:8f:8a:9c:8f:98:df:cc:cb:53:ea:12:0d:c9:
5f:26:7d:cf:fe:89:a7:ec:23:60:3a:87:3a:93:4a:
4d:1c:50:9d:66:82:6a:e1:84:fe:d4:04:ef:e4:08:
cc:99:12:88:d3:b9:c6:70:6f:bc:4e:24:7c:14:a5:
59:b4:2b:25:d8:b7:f3:70:88:80:40:37:c3:3c:44:
bf:cd:33:57:11:62:40:b8:f0:9b:0e:ef:72:58:c9:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:81:D3:06:27:64:C5:E6:9F:30:72:45:67:73:AB:70:F3:F6:97
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:00:b3:f0:7f:b1:25:4d:6a:10:d4:e5:92:b6:9e:78:8b:
cf:c7:6b:90:35:1a:9c:5b:f2:99:93:a5:0b:85:07:0b:4d:a0:
82:f2:ae:3f:db:c8:cb:3f:b4:27:98:a8:43:61:ae:74:78:27:
f8:ca:b6:4c:17:ee:3a:ea:78:cc:d4:38:fb:2e:e4:8e:0d:f4:
09:26:91:a6:9c:38:c7:df:1f:5c:58:4b:54:46:94:ef:31:69:
fc:64:5f:1b:57:e8:bb:4c:90:75:24:16:f1:26:57:7a:5e:1b:
b1:58:f9:93:4d:a0:1a:7e:13:90:5c:4c:43:66:f5:b9:9d:d9:
8d:b9:72:23:41:11:46:50:11:f3:84:61:b6:99:95:16:cd:05:
b5:f2:2c:bf:0e:ff:11:70:6a:a3:6b:48:da:ec:e0:19:0e:12:
e3:e7:49:b2:48:31:5b:0a:96:3b:76:17:ac:7b:83:a5:5f:01:
21:9b:e2:c2:3c:ef:6e:53:b5:38:77:1c:4a:d2:e3:6a:c6:0c:
e4:9f:fb:e4:97:2e:e2:b4:a8:71:9b:72:cd:a0:e4:28:7a:10:
16:8f:dd:30:32:ef:5f:a0:7b:40:9e:c3:af:1a:b0:ee:89:84:
97:cc:51:1c:47:57:dd:a2:80:88:bd:f7:40:82:82:dd:f0:91:
54:58:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:09:52 2026 by rpki-client