Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: 34nE3EOr3+pp87JTBMOgGXz7tN2LgIpoXaZubxZcL14=
Subject key identifier: DD:E1:57:4B:A8:8F:5B:68:73:E0:13:A0:86:BE:AE:1D:DD:3E:79:78
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 019D378925F0A5479733A216A05632A4453D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 09ED
Signing time: Sun 29 Mar 2026 03:00:28 +0000
Manifest this update: Sun 29 Mar 2026 03:00:28 +0000
Manifest next update: Mon 30 Mar 2026 03:00:28 +0000
Files and hashes: 1: A3TEDffrBq56TDY4yudR7y6rEQs.roa (hash: 7fUrynjF6TZPsO+6oL6Q+ehgvRkl4Ttr2jC89/HQi3k=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: 2xt1FX+mcS3WeKolFCd+02tHOCudE7uDs9MkoV+5/HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:25:f0:a5:47:97:33:a2:16:a0:56:32:a4:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Mar 29 03:00:28 2026 GMT
Not After : Mar 30 03:00:28 2026 GMT
Subject: CN=dde1574ba88f5b6873e013a086beae1ddd3e7978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:3b:18:0b:9f:ae:b3:98:68:84:66:e1:5f:
ad:39:6a:21:1a:ae:9f:72:ff:56:78:8e:84:a4:13:
ec:6e:b1:2d:d3:89:d6:d4:32:d8:a0:e6:c3:61:ce:
bf:e1:4d:e4:fb:34:8b:0f:a9:78:bb:1d:f2:37:b6:
bb:1b:11:8c:df:c8:30:96:13:c5:0c:62:c3:0e:dd:
87:78:e2:35:85:7e:f7:89:16:9d:8f:8d:cc:9a:36:
c5:d6:3b:d0:4d:df:aa:f5:57:06:cc:d0:cc:1f:b7:
64:72:af:4d:b5:1a:e2:6d:bf:08:fb:b0:05:1b:c3:
45:65:b7:58:1d:1a:c2:ce:13:a5:f8:5f:ba:d1:0a:
35:1c:6f:59:48:dd:7e:24:3e:a5:7f:00:81:e0:25:
2b:54:7a:40:56:eb:ff:5f:0e:41:3e:59:03:0c:46:
e3:14:5d:de:fd:90:ed:c7:aa:15:53:23:27:7d:8b:
b4:bd:fd:46:74:96:3a:5c:7d:72:53:5e:3f:4c:90:
ff:a0:94:54:a6:5e:ea:09:db:39:c0:06:cf:f6:15:
44:cd:f9:9d:4e:7b:08:81:9c:d1:da:60:ba:e3:42:
0d:d2:a8:a4:4e:ee:11:b4:35:60:7f:8d:9f:bc:38:
90:26:d1:dd:16:46:3a:92:2c:b9:01:ac:32:9f:f1:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:57:4B:A8:8F:5B:68:73:E0:13:A0:86:BE:AE:1D:DD:3E:79:78
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:89:e4:99:24:2b:c9:91:b2:a4:5d:c0:26:84:c3:41:a1:
79:64:4d:08:4d:84:6c:d9:ee:8a:93:1c:f2:7e:95:31:41:37:
49:90:be:94:5b:63:7d:7e:be:a8:b2:fb:4d:dd:8e:12:5c:1a:
34:d9:e6:82:a2:25:79:c5:30:4f:61:9a:a6:07:95:01:64:87:
8a:60:16:19:82:a2:f6:79:47:79:0f:dd:79:fd:0f:58:0e:db:
fb:79:f1:37:bc:2d:1a:c8:8a:73:05:e1:d5:f7:d0:86:82:91:
5a:44:14:41:c8:88:27:01:5e:de:d5:14:b6:0b:6e:e7:ae:be:
9a:69:17:74:d6:a5:fc:0e:11:54:20:44:24:ff:ea:ca:a7:ce:
6c:39:48:9f:40:48:83:d5:9d:5c:0a:91:94:ac:f4:dc:e0:b9:
a8:1c:a2:3d:2d:1b:02:99:c3:9d:ab:4b:16:44:a2:09:56:f2:
7e:13:b2:82:35:9c:48:c8:31:10:69:50:d4:ab:8f:f0:be:71:
14:e8:95:e6:26:dc:77:3e:be:1d:32:2d:77:0e:46:7a:8e:08:
8e:64:27:02:fa:50:78:e6:bc:6a:5c:8b:e9:04:ac:9c:88:cf:
77:e4:c1:27:e1:71:d6:d2:8f:ed:2e:75:02:2d:9f:cb:6f:a2:
cb:88:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:59 2026 by rpki-client