Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: myMyPkAIs/+SuAIUEy8nyBvmyAo+0yaZrK4csl3XZ8Q=
Subject key identifier: DA:BA:B7:A7:A5:92:86:5C:C2:18:2A:44:19:87:23:48:31:49:57:A4
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019DCF74FEE162C96295E2A23B216DB2EA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1809
Signing time: Mon 27 Apr 2026 15:00:44 +0000
Manifest this update: Mon 27 Apr 2026 15:00:44 +0000
Manifest next update: Tue 28 Apr 2026 15:00:44 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: Pu5Mg6VohvJneE4nyb7x3xoGByGlBW1Y17NsI0Pmfuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:fe:e1:62:c9:62:95:e2:a2:3b:21:6d:b2:ea:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Apr 27 15:00:44 2026 GMT
Not After : Apr 28 15:00:44 2026 GMT
Subject: CN=dabab7a7a592865cc2182a4419872348314957a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:c6:46:30:58:07:e8:e5:89:03:68:d0:18:
4c:7b:39:63:4b:91:18:01:c4:91:f1:d5:17:9d:ab:
06:a1:c9:1d:2b:68:0f:fb:04:2c:1b:e9:a5:eb:d6:
98:2f:6d:2d:e2:02:0f:64:92:7c:cd:57:68:84:8e:
3f:d6:f9:77:6b:7c:29:6a:38:e3:ad:88:7b:b4:27:
c6:fc:02:b5:ad:ac:8d:5a:b4:19:30:b4:c5:42:b2:
33:0d:29:36:86:1d:e1:48:96:10:e9:44:d1:16:ea:
51:3a:e1:02:aa:72:9f:82:22:bd:a9:a6:90:50:36:
52:47:0e:c8:c4:8d:69:dc:76:f7:93:9a:97:a4:a6:
3e:4f:24:c2:25:e0:6f:8f:0b:1d:e1:dd:21:7b:5a:
78:2a:f6:f0:41:13:a6:2f:4f:31:ab:53:2c:fd:6e:
64:06:0d:d1:ba:9b:4a:69:65:8a:31:77:99:6b:3c:
41:fa:51:54:43:24:e0:c0:45:56:0a:0e:ce:f0:50:
c5:e8:52:02:d8:77:a7:66:66:89:53:51:c1:56:5d:
ef:b2:1a:34:9c:0e:b6:13:35:ae:ec:13:67:9e:28:
04:b7:87:3b:83:32:1e:24:97:e1:18:6b:f8:00:23:
85:12:c6:42:b5:35:aa:a2:81:55:89:3c:7a:2c:b7:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:B7:A7:A5:92:86:5C:C2:18:2A:44:19:87:23:48:31:49:57:A4
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c1:3e:a8:aa:65:a8:87:ff:8d:1f:16:71:33:36:62:00:a6:
19:de:d2:8e:96:bc:22:d5:db:f2:f9:a7:08:a1:81:54:7c:8a:
6c:d0:40:7a:5a:0b:fa:b8:b3:46:f7:d9:96:36:99:bb:a4:e6:
09:08:9c:9e:4f:57:86:28:32:c4:91:c3:26:24:65:38:bc:74:
75:1b:e6:64:8e:d2:21:6e:02:e9:84:7d:3f:ee:92:22:34:16:
bd:c3:44:9b:96:40:35:bf:dc:eb:db:04:3f:54:3f:bd:69:f1:
52:9e:ed:7b:61:85:7e:fd:c3:03:c9:23:5c:56:63:ac:13:16:
6b:9a:99:94:6d:ba:05:80:ca:0a:d3:5f:15:db:97:34:17:7f:
26:e3:c8:69:5e:f6:4d:44:57:9c:a2:21:5e:f5:2a:0b:79:8c:
76:8c:9c:1a:33:4a:be:75:cd:9f:54:0a:d6:e6:19:b6:04:d8:
1d:db:8b:7e:ce:63:04:79:a9:c2:54:d4:d6:62:52:b7:d3:f7:
d1:3c:32:09:84:2b:d4:f4:7f:ef:24:16:b8:4f:f0:1b:6e:ac:
c7:4a:f3:c3:27:a8:ab:2a:93:5d:a6:e5:0b:7b:b5:1e:e8:25:
8b:4e:93:9a:12:b2:c8:b5:b0:0d:47:17:fe:ac:e5:02:9e:be:
32:f9:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:11:16 2026 by rpki-client