Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: McxrGUu6Oy/jg1swBF6C/Sh8ifiK2rW2Gt/fzGxN07w=
Subject key identifier: 8E:F6:7C:43:7F:E5:70:99:31:20:2D:5E:40:0C:16:1B:95:3A:A1:86
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019D390A4A1AA7C319E389C45F05C4DCE40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: tpeQ3aJZoL2LUwHI2lAJHjKRyH1vGeEeFsLj4kk2puc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4a:1a:a7:c3:19:e3:89:c4:5f:05:c4:dc:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=8ef67c437fe5709931202d5e400c161b953aa186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:a9:ae:22:f0:7f:98:3b:18:3d:68:c0:78:
3e:85:3c:f3:f4:4d:b6:e3:c0:65:ce:49:2b:8e:1f:
1b:b3:e8:0d:65:2f:3a:16:9c:75:ea:93:e2:cb:c6:
75:86:ed:2f:0a:ae:0a:51:3b:be:5b:c7:a1:c4:08:
4f:8e:2f:f0:78:49:34:4c:2c:ba:12:4f:c8:09:2b:
bf:7f:ed:5f:e5:1d:72:67:d7:75:9a:ab:60:a5:ec:
52:2d:2e:c3:1e:18:d6:fc:48:20:91:06:ce:d6:1b:
d5:02:cf:f2:a2:9c:35:74:f5:fc:83:ec:4a:67:2f:
27:1b:57:89:06:a0:b1:78:9e:f3:bc:74:89:75:c5:
f6:9e:34:04:9c:3f:31:d6:1d:5a:16:8c:c7:db:46:
51:0d:c8:68:9f:71:e3:af:ad:aa:d5:af:52:e8:62:
15:6d:76:60:81:e1:1d:39:97:71:06:52:2a:44:30:
82:e3:05:68:b3:ad:bd:be:93:a9:76:b9:24:05:93:
e7:2d:90:2d:2a:6b:0a:be:4d:ed:19:cf:43:1d:91:
4f:29:13:58:00:e6:a7:92:41:8b:51:ea:5e:6d:37:
df:e6:d1:e6:f0:c7:19:4d:72:2b:6a:bf:d3:65:02:
08:b7:4b:a1:17:3d:b7:82:37:72:72:c1:8b:b6:5e:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:7C:43:7F:E5:70:99:31:20:2D:5E:40:0C:16:1B:95:3A:A1:86
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5e:5e:3e:bf:a2:09:b6:bc:1c:14:32:29:ca:01:97:dc:22:
04:14:60:a1:e6:45:14:4e:96:dd:27:66:e9:bb:08:19:5f:99:
2e:fd:01:5c:90:8e:0d:11:04:95:4a:5e:d6:6e:ab:cf:8a:ec:
bb:d5:6a:5a:4c:15:16:95:bd:92:03:eb:4f:dd:4e:ae:f6:b8:
c9:64:53:d2:71:1f:cd:ca:2c:8e:25:6e:70:6d:8d:da:4d:6e:
ca:b4:17:fd:eb:e2:39:32:59:3e:69:26:e1:92:e0:6c:53:cb:
e4:ad:a6:2e:62:5c:51:68:f2:0d:66:bb:8e:c8:46:2a:a6:58:
33:e7:e7:3c:66:98:6c:99:cb:85:3d:61:6b:da:6d:34:55:9a:
02:b8:92:75:e7:4c:2a:93:1d:93:df:14:89:01:30:9b:a2:81:
bc:1f:98:a6:0b:e5:4d:fa:61:24:49:6a:35:47:cf:ce:ae:fa:
12:ef:df:ea:a7:ab:d1:3b:6e:5b:23:b0:9d:16:45:f9:be:b7:
9c:9e:38:c0:58:de:85:70:2d:d3:2e:75:62:e2:45:37:ce:6e:
9c:64:f3:ef:95:6b:52:93:4c:6a:c6:1d:5f:64:74:ef:9b:9d:
d4:47:32:3d:ea:6f:8a:19:cf:d7:b9:59:43:63:9b:ac:6c:92:
59:97:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:58 2026 by rpki-client