Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: 6EjyXR/frUEi67VOXTqs4vtHfQ9XDbDNYlFAN6f07Qc=
Subject key identifier: 16:0C:72:6A:F4:AA:2A:71:AD:AD:E2:16:49:17:DD:4D:7B:26:97:6D
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019D30AB87C0DB9F6C9FB26B2BE4D062EDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0D5E
Signing time: Fri 27 Mar 2026 19:00:40 +0000
Manifest this update: Fri 27 Mar 2026 19:00:40 +0000
Manifest next update: Sat 28 Mar 2026 19:00:40 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: UH+4ng89ofPR6AR2I9qQ8iwS3dw79Pez/4At0yaa0Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:ab:87:c0:db:9f:6c:9f:b2:6b:2b:e4:d0:62:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Mar 27 19:00:40 2026 GMT
Not After : Mar 28 19:00:40 2026 GMT
Subject: CN=160c726af4aa2a71adade2164917dd4d7b26976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:27:7f:f7:27:22:7d:c4:eb:9b:02:4a:43:
2c:41:3c:06:62:b7:63:d1:ec:a3:19:77:75:4e:da:
b5:4e:49:1a:2d:ee:12:e1:ee:78:53:42:cb:4c:2c:
07:ad:93:10:9d:4b:26:4f:8e:e9:48:a6:b4:83:39:
55:63:c7:0e:4f:48:08:a3:0b:ce:da:67:7f:45:85:
83:6b:82:54:5a:e5:03:90:ce:d1:c0:2a:b8:b8:d2:
e5:7e:25:b2:b3:3d:99:3f:69:c3:a9:bc:69:1f:7e:
ce:01:54:41:fd:ad:50:fc:c1:c7:ea:15:c3:d6:f1:
aa:36:fd:04:cb:51:c4:98:d5:46:86:4c:33:d7:d7:
27:4f:a6:bb:d9:8a:4c:61:d4:2f:94:af:d5:19:53:
3e:ba:1b:68:28:da:93:cc:97:c3:d9:d2:a9:2c:ae:
6e:2a:62:b8:04:75:c3:e6:28:39:b9:5c:c1:a1:2b:
d0:de:e3:0f:d4:b5:d9:17:a7:06:1e:a3:f4:dd:8a:
1f:d5:21:6c:26:4c:99:20:d5:78:4c:68:31:f3:99:
d1:49:a0:92:f1:0d:3a:23:49:a2:b5:2a:c6:cd:8e:
67:f1:17:59:f2:00:83:1e:b0:90:5b:d7:cd:07:c9:
21:44:58:9f:c9:d9:93:72:4b:0c:dd:37:59:3d:28:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:72:6A:F4:AA:2A:71:AD:AD:E2:16:49:17:DD:4D:7B:26:97:6D
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:43:36:d8:2e:98:46:69:78:8a:85:25:93:f3:42:45:1f:b0:
f6:34:b5:3e:4c:3a:a3:a4:91:51:4c:34:c6:ce:01:dc:9d:57:
f9:2d:1a:16:79:d5:6b:18:50:d8:0a:76:f9:a4:5a:95:24:79:
8b:87:89:a6:af:73:d5:a0:0b:1a:2f:e5:73:98:19:b2:77:af:
bc:d0:4f:9c:67:43:f2:b2:55:f6:7d:61:20:2f:31:0f:24:8a:
e5:24:3f:fb:9e:fe:94:0a:af:fc:4a:b3:71:1c:36:24:b5:40:
4f:25:18:2c:86:e0:ca:b4:3c:e4:ac:74:02:ee:e4:35:96:6c:
0f:8f:6d:6e:c5:52:de:3e:c3:19:d3:35:ae:26:02:08:55:1a:
fd:11:8d:4c:d1:bd:5f:7d:ae:43:2a:80:fd:0c:1d:12:2b:0f:
67:7c:82:2e:97:51:ce:8c:ca:fc:80:b0:72:d1:98:25:fb:34:
39:b1:88:b9:4e:a5:f0:ff:92:e7:e9:39:be:74:e9:54:4d:5d:
f2:41:c6:ee:a9:41:d6:5b:a3:d3:60:7a:09:c8:9f:6d:c0:10:
7d:87:03:7c:9d:88:64:86:38:ca:59:d8:bf:18:87:0c:34:d4:
12:39:21:6d:2c:84:5f:58:c6:e7:0c:df:b4:12:50:56:dd:61:
49:12:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:51:09 2026 by rpki-client