Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: rue4QQtDZ+IPIRNc9Y0knDVkRq7Um94gXvtarQ+kPCA=
Subject key identifier: E8:91:16:33:1D:62:4A:35:D1:C3:FE:E7:CF:4B:7A:08:1E:37:8A:0B
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019D38D2D70D3AE6A529307A125B2739EABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: n6/yWiwE92vcmG2YhJwgt889Gw2eUVYdxeTssxKQDhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d7:0d:3a:e6:a5:29:30:7a:12:5b:27:39:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=e89116331d624a35d1c3fee7cf4b7a081e378a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:56:68:0e:a0:a4:1b:45:0d:13:d2:f8:b8:
ec:af:36:56:6e:3b:a7:f2:0d:26:8c:f8:d0:24:9b:
c9:f6:f2:9e:fb:0d:d5:ac:f9:3b:3e:7d:2f:2e:30:
61:d6:ea:7a:68:26:8d:b3:6e:08:79:20:c7:2d:eb:
e9:7b:af:cd:41:f5:1b:6c:22:ef:26:af:48:d9:76:
f7:1d:71:58:90:66:0c:70:27:62:e7:77:f0:3e:a4:
29:4d:aa:ad:b9:8c:5a:16:a2:09:bf:78:29:b4:35:
ba:6b:12:6f:2c:b2:a3:64:5a:7e:9c:50:ff:79:a4:
b4:c6:e6:15:df:b6:b8:3c:b5:37:35:a1:ca:cd:48:
52:dc:5d:1a:17:02:af:a4:0d:f3:07:d5:e2:68:fa:
2a:c1:e8:1d:83:b0:bf:9f:0c:fd:26:51:bd:0c:d6:
9a:14:c4:b8:da:56:de:ab:c4:3d:7c:f0:1c:d0:4d:
ff:7d:bf:6e:f0:5c:04:cb:2a:c1:f2:e7:27:e8:f0:
3a:6a:b7:c7:b9:ec:7b:e3:95:3c:24:e8:51:bd:c8:
40:81:75:4f:bd:cd:2d:c5:69:30:4c:34:37:d9:b1:
ad:a8:a7:50:2b:72:65:46:be:e6:54:3a:bb:10:45:
e4:29:45:94:d9:da:c9:96:d6:61:37:ec:f6:8a:f9:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:16:33:1D:62:4A:35:D1:C3:FE:E7:CF:4B:7A:08:1E:37:8A:0B
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e2:c0:62:12:89:0a:da:f2:8a:a0:89:18:18:6e:d3:22:b9:
a9:63:82:ba:e4:b1:72:5f:32:02:45:61:a9:7b:9d:1d:73:3f:
af:ab:aa:c9:96:6a:6d:9e:30:ef:d0:2e:f1:f7:bf:13:70:fe:
a3:ff:a1:98:c4:53:f2:15:54:a7:84:98:be:34:cd:8f:4f:1b:
9b:67:0e:36:9d:4a:59:6c:4b:12:62:5b:95:7e:2b:4b:ee:e0:
d4:b4:2a:b0:de:56:21:48:2d:ff:13:e9:81:e2:05:e1:74:f3:
b7:57:37:08:91:1f:6c:1f:08:2b:e2:06:db:23:d2:3f:07:7d:
d3:dc:48:db:4a:8e:80:95:8d:2c:74:21:b6:9c:16:0a:11:26:
69:67:8b:f9:b4:47:a2:29:33:ca:cb:60:6b:72:63:a3:34:39:
28:fa:73:84:1c:14:52:6e:2e:ca:2e:01:c9:45:69:aa:9b:b8:
eb:4f:9a:70:11:86:0d:b4:f1:69:c3:1c:26:ce:2b:3b:71:32:
a4:6a:aa:9d:e4:40:99:63:f9:60:08:43:6b:a7:2c:51:a3:fa:
aa:4e:6f:b5:01:70:03:fd:3c:ba:95:54:a2:44:81:3d:4b:52:
5d:12:b6:4f:8b:f9:c1:a5:90:55:ac:c0:e9:24:90:ac:02:ed:
b7:1b:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:54 2026 by rpki-client