Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier: nq1XJ2bdMV1ow1uRXFTP1GGYahiyZuYDAC/q5I53d4g=
Subject key identifier: 88:24:D4:C6:FE:E2:0A:6A:0C:EA:3D:F7:04:C8:DE:58:19:74:51:DE
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 019D38D33E0667526416D136D39B19656AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number: 11C4
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: KczJNDucFPT5BvVz6zB57DZIR0wNmxJY9DMBWU8ya9w=)
2: li8qQSad2nEH9VdZEdASMOOcVYs.roa (hash: Y/D8jzozS0kUYNTBh7PNAzFCxGW8QjAEr3OSj4+wOOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:06:67:52:64:16:d1:36:d3:9b:19:65:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=8824d4c6fee20a6a0cea3df704c8de58197451de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:64:e6:e4:51:1d:2f:74:ac:45:33:18:3b:
22:1d:0c:e4:b4:20:7d:d1:a7:6e:87:6a:9a:30:99:
b1:03:e3:f0:ba:7c:5e:9c:70:e5:ae:93:fc:a5:4f:
8b:6d:54:d2:fb:91:6b:8d:b9:e9:e3:ae:05:b4:c4:
85:03:82:71:19:91:f5:05:9e:65:90:da:3d:98:f2:
d8:4d:ab:a7:46:88:73:81:40:58:5b:c5:fd:07:4c:
7b:9e:f1:fc:33:01:14:46:84:ce:1e:0f:8e:82:d9:
8e:ae:c9:62:7d:8c:bc:19:8c:a2:6e:0d:01:7a:26:
2f:97:e2:96:3b:ab:ba:61:23:da:50:79:41:ff:eb:
c9:f1:bc:5f:3a:24:03:ec:9e:81:14:14:86:6c:96:
9d:3c:0f:3e:be:d4:b9:33:1b:be:4b:d7:5d:fd:dd:
9a:89:09:e3:9b:26:cb:ab:dc:39:ed:00:37:58:5e:
37:f3:3c:4e:07:a1:9e:f6:26:14:48:0e:e1:d7:3f:
be:bc:38:6c:d0:72:90:0b:03:01:3e:bc:cf:99:74:
f1:e4:57:cd:82:07:ae:ce:8c:10:ca:e5:04:5a:f6:
1f:81:c8:0a:b4:c6:61:d1:b2:45:5e:3c:9d:bb:7d:
a7:c8:4c:74:2f:e5:97:63:73:1c:70:06:8a:3d:ed:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:D4:C6:FE:E2:0A:6A:0C:EA:3D:F7:04:C8:DE:58:19:74:51:DE
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:d1:c0:dc:76:2f:04:0f:63:11:83:40:80:ce:b8:7f:83:
7f:0b:57:22:e6:9d:f7:98:0e:b5:49:4c:f5:24:a3:da:3c:6d:
0f:2c:96:8a:f3:2b:05:bc:09:47:d8:13:27:9f:2e:9d:e5:be:
04:13:e3:db:c0:71:84:a5:ad:8b:65:55:ad:dd:cf:8b:95:e6:
fc:18:4f:1e:cd:78:53:d5:3e:a6:cd:31:13:c9:e3:b3:09:d5:
dd:0d:1e:10:d8:cf:76:f3:2e:5f:41:9a:0c:3a:e9:3b:bc:17:
72:61:67:8f:63:59:52:57:76:e2:d2:e3:a5:70:3a:bb:0f:97:
06:1b:2e:fa:55:be:41:74:46:11:04:28:22:14:7a:9c:9b:7c:
22:09:b6:8d:f6:66:01:a0:ca:5e:17:29:dd:de:24:20:0f:7b:
13:f5:13:0a:09:c9:ed:ca:77:56:f9:a7:70:70:26:a2:fa:21:
49:68:26:9d:08:d0:c4:24:2b:6b:b3:c4:1b:bf:04:1d:d3:21:
ac:19:20:4c:51:16:65:65:7c:f0:a6:b4:8e:55:c6:44:95:f8:
54:9a:54:56:24:a7:5e:ca:73:5b:7d:33:e0:6b:22:d3:5b:98:
c6:d1:69:30:66:0e:ed:8b:37:31:53:a0:c6:aa:7e:04:09:f1:
99:d7:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:57 2026 by rpki-client