Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: KBlOvXFN06Di/a5kD/S8eogELbBz5TZ+8mNZ9aEbj/g=
Subject key identifier: A6:8D:35:57:61:D5:8F:A9:4D:A7:1E:15:F1:9E:0A:29:95:AB:E0:6A
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019CE6A498002550CAF048680AFFB44D54B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0E66
Signing time: Fri 13 Mar 2026 10:01:12 +0000
Manifest this update: Fri 13 Mar 2026 10:01:12 +0000
Manifest next update: Sat 14 Mar 2026 10:01:12 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: hGYVs4lXlREF1309h+rsJJmBKjfAdyFYdRp98q7KtE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:98:00:25:50:ca:f0:48:68:0a:ff:b4:4d:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Mar 13 10:01:12 2026 GMT
Not After : Mar 14 10:01:12 2026 GMT
Subject: CN=a68d355761d58fa94da71e15f19e0a2995abe06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:a4:e2:2c:31:b6:3e:28:83:e0:52:be:9b:
d2:8b:11:af:a3:72:77:b3:cc:fe:dc:36:f8:0d:09:
3f:8a:73:18:8d:f1:38:fe:16:e6:10:52:ad:63:13:
b2:8d:10:c3:aa:aa:c9:19:a7:7e:d3:2c:fe:f6:d7:
7c:47:e2:b6:27:ce:fd:9f:af:78:65:b6:82:20:ae:
97:b9:6a:63:f2:59:c6:a8:31:7a:4e:32:57:ed:e2:
2c:f5:03:77:bd:58:74:36:2f:3f:a2:fb:5c:be:c4:
2c:85:78:52:10:0e:5e:2b:3a:45:b7:1e:59:16:e1:
3b:9a:9f:b7:70:2c:07:2a:8c:fd:23:4f:ea:b5:57:
80:a2:af:37:48:7e:fb:f4:c6:92:27:3e:25:ce:34:
87:64:b6:57:30:33:b2:28:ce:19:cd:19:a8:b4:e4:
c4:27:62:71:7f:a5:90:cf:d7:e6:02:ae:56:89:a0:
0a:a2:b2:7e:4d:04:71:2e:0d:d5:0a:24:69:07:a1:
c3:80:e3:ca:00:a7:e6:0b:4a:c2:05:00:e0:65:36:
6b:a1:dc:36:47:7a:13:91:67:e3:7b:2a:0d:c7:1d:
1f:08:93:03:f8:11:97:70:7a:48:1f:b9:ba:82:bd:
4e:14:14:ec:7c:79:35:fa:c0:78:ac:97:88:9c:82:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:35:57:61:D5:8F:A9:4D:A7:1E:15:F1:9E:0A:29:95:AB:E0:6A
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:97:e2:e3:8d:96:49:9a:9e:c6:36:6c:ad:44:2e:ec:a7:
87:3e:c2:e2:4d:34:62:7b:61:62:db:bb:a4:ea:d5:b6:e3:85:
10:90:d5:75:5c:5d:53:80:a1:ce:aa:8f:18:71:cb:91:e7:cf:
8a:32:77:ae:97:b9:a5:ab:22:44:04:ce:51:66:1f:c2:99:13:
e9:e8:54:70:e8:a1:63:22:7a:08:6e:45:00:30:c7:96:12:56:
e7:76:f3:30:6b:81:46:d1:8e:19:23:54:03:89:72:d8:ea:69:
ee:3e:45:ba:cb:ab:85:58:ab:1b:85:1e:be:65:ec:b1:61:8b:
71:6e:27:f1:2c:10:5f:43:eb:12:b6:7a:03:d6:00:da:95:91:
97:49:f8:3b:fb:aa:63:8e:06:30:df:9c:ee:48:8b:f2:82:a2:
db:0c:ff:da:b9:c3:80:ff:81:06:85:67:17:ec:93:90:51:ca:
6f:02:0b:4a:e6:8b:ed:e6:ab:f8:ff:47:de:50:9d:99:04:56:
73:d4:2b:5a:b4:3e:92:cd:f0:39:6d:be:37:fa:ca:51:73:4d:
6c:db:2e:4b:c3:79:f5:ee:ac:1a:f4:92:f5:0d:e5:6f:c0:24:
96:cf:68:70:0b:64:43:cb:a5:5f:cf:98:73:a9:d4:86:4e:cb:
e8:fb:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:14:50 2026 by rpki-client