Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: MqRpoZh6Obla8WmMnaVFhw4E0UvmZ5g82laR56Giq6s=
Subject key identifier: 36:50:CD:C8:51:E6:E7:36:DF:9D:90:4E:E6:28:2D:F9:CD:2D:74:E3
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019D37F71E23674AA459E5628DB09C6EFE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 1590
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: oOe43u0rDz6F_hHXzn-flvvUaKU.roa (hash: w4KlXnKVNrmrMIj8p2+E6Qm85PcdsOMyZs6adtK9znE=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: tV1vk/e+y5vTUPR32NCgqaNS+GUDQMjQeG4s5CMica4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:23:67:4a:a4:59:e5:62:8d:b0:9c:6e:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=3650cdc851e6e736df9d904ee6282df9cd2d74e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:b1:80:74:2e:5e:c5:3b:1b:19:af:a8:5f:
54:17:3d:60:ac:94:fa:14:2a:ce:14:12:43:9c:86:
ea:d3:be:2c:b7:d8:56:55:d8:0f:60:b9:df:70:ea:
5b:df:6f:fe:04:bc:a9:c3:cf:3e:97:a5:22:f5:e3:
4b:07:c6:71:54:9b:e8:e7:3f:cc:7c:fe:25:1c:54:
7e:55:31:09:14:06:82:f1:2c:7f:17:49:b6:34:ee:
63:c2:b8:5d:b8:9f:e4:cb:91:28:c0:e1:9c:20:08:
f8:66:5d:63:51:42:2a:2d:09:38:6b:42:da:11:0c:
23:b0:19:09:f5:a2:6d:59:36:bb:26:a7:81:8c:ac:
3b:c0:36:6c:b6:ce:05:3c:f8:fa:a0:bb:85:38:c5:
ae:10:5e:68:85:c0:6c:c6:e4:3c:a1:9e:2a:ea:2a:
04:a7:04:b9:fe:a8:fb:c5:c7:4b:a5:db:7d:4d:96:
61:18:10:06:51:52:7b:77:d5:f4:b0:40:15:5a:44:
e1:56:98:ab:b8:a1:bd:0b:f7:c8:e5:cd:1a:c7:ce:
d5:8a:17:62:0f:a5:d5:1a:30:cb:6f:62:ed:24:47:
5f:3e:c7:e6:a6:4f:ab:33:14:b4:73:33:7c:95:ae:
94:d5:62:9d:a6:23:f5:15:a2:6d:f2:5f:71:ca:c0:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:CD:C8:51:E6:E7:36:DF:9D:90:4E:E6:28:2D:F9:CD:2D:74:E3
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:ff:a2:ad:43:b7:f9:dd:c7:4f:8b:af:f2:76:a3:d8:36:
2b:de:09:20:2c:b1:52:6b:6c:bd:ac:e3:d9:3e:be:74:db:9e:
b1:1b:ba:b8:7e:50:9f:08:48:e0:72:42:29:33:27:2a:d2:2c:
46:09:15:74:5d:e4:1b:ea:7b:b3:6b:3c:15:d8:9d:cf:76:4b:
a0:cb:ef:38:b7:7b:9e:5a:0b:fb:f9:ca:c3:e4:73:5d:97:4b:
51:e7:91:1f:25:ef:38:09:ce:8a:56:5b:94:b5:7f:4d:11:05:
c5:f8:7d:c8:a0:05:4c:e6:fa:e9:d6:ed:1f:f8:61:2e:11:a4:
b9:2b:fc:68:f7:41:12:4e:cb:85:df:3c:c0:55:68:20:db:5d:
81:bb:d9:c6:de:88:0b:db:a5:03:f9:62:77:3d:7e:43:71:56:
73:e1:5e:e2:78:4a:d9:ca:80:b0:03:a0:b1:8c:4a:a2:11:f8:
62:95:11:92:ab:11:71:7d:8f:e0:9e:1e:c4:6d:19:73:17:88:
b5:9a:3a:3d:d0:95:f0:1a:ef:74:2d:19:bb:0b:cc:2c:ea:f3:
75:45:c7:24:be:16:7f:f6:31:c8:e5:8c:95:95:64:e7:17:fc:
33:bb:27:dd:c2:d1:dd:4a:39:a1:ea:8d:5f:f6:71:a7:e5:99:
38:76:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:29 2026 by rpki-client