Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: fgU64VV3kde/idvURovRjr+tlgUhegLoU9p5mgYA9Vc=
Subject key identifier: 81:8D:CD:9E:BC:70:F8:4E:9B:78:A5:36:E9:EE:C2:83:A9:B2:EE:8E
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019CE5C86D6014DE4DB445D9304EB83F51FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1790
Signing time: Fri 13 Mar 2026 06:00:43 +0000
Manifest this update: Fri 13 Mar 2026 06:00:43 +0000
Manifest next update: Sat 14 Mar 2026 06:00:43 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: Koi49H4Fkl0CbLnreN/nbq1F69M+5/MYOSehRMbEMtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:6d:60:14:de:4d:b4:45:d9:30:4e:b8:3f:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Mar 13 06:00:43 2026 GMT
Not After : Mar 14 06:00:43 2026 GMT
Subject: CN=818dcd9ebc70f84e9b78a536e9eec283a9b2ee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:28:81:18:60:f9:a7:76:11:b5:4d:06:f0:
e4:e8:fb:96:ca:0d:c6:b5:f8:96:82:1a:71:0a:c4:
d9:b3:a7:57:0a:62:8f:99:c9:b6:5a:36:4c:89:3d:
2d:5a:f7:60:e5:7c:b8:2e:c7:f1:d9:e3:ec:27:72:
92:85:22:16:0d:7b:26:12:17:3d:a6:5b:bb:79:0c:
8b:7a:a9:4f:7f:0a:ad:26:c7:66:02:bf:55:41:a6:
9b:ce:32:e5:3d:a1:ce:c7:49:09:ee:d3:8b:0f:49:
13:c8:52:2b:bb:93:1f:ea:b0:2e:d9:5d:1d:8e:d6:
e0:8d:25:20:3e:38:21:98:d0:e6:20:a6:0e:87:fc:
79:e8:bd:84:fa:01:43:03:a0:a7:a1:53:8c:0c:0f:
ee:29:01:90:0c:b1:38:23:12:84:cb:4a:41:ee:78:
ba:93:b8:0a:0c:6a:ca:7f:06:a4:fd:3c:05:34:d2:
c5:cc:e4:60:fc:f3:ab:e7:8e:7b:1a:47:e5:cf:ba:
fc:78:4f:8a:85:f7:cd:65:76:72:99:49:dc:79:e1:
1c:1b:fa:25:59:2f:cc:b7:7f:53:7c:67:60:23:a5:
94:2e:39:e9:dd:77:c2:39:b4:22:56:c3:0e:82:c7:
22:6f:55:62:99:b6:5e:be:27:4c:6c:d8:21:fc:74:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8D:CD:9E:BC:70:F8:4E:9B:78:A5:36:E9:EE:C2:83:A9:B2:EE:8E
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:db:1f:0b:c3:8e:ca:a0:9b:7b:0d:a6:84:71:dd:eb:47:
e2:df:72:2a:df:42:c3:99:13:9c:7b:41:29:d6:87:21:8e:eb:
75:6c:4d:94:77:47:bb:27:25:ed:44:fa:ab:86:ac:17:9a:00:
e5:f6:40:f8:2b:4c:18:fb:c5:d0:85:91:f9:8b:29:09:09:d0:
dc:45:1d:90:c4:0a:60:f9:d3:cc:1c:66:ba:c6:bd:b1:cf:f9:
d3:3a:a5:0a:d5:be:1d:15:54:29:96:71:e7:76:b5:a9:ac:fc:
09:3c:3b:12:fb:81:14:b0:eb:a7:39:d0:a6:10:35:ad:fe:06:
aa:e3:de:af:9b:ac:71:38:9f:34:c9:7f:53:bd:93:10:5d:13:
b4:32:f3:b8:15:fa:ec:45:53:d9:4b:da:5c:25:82:09:f5:96:
44:d1:b6:eb:76:53:42:c0:f8:34:e0:7f:26:61:dc:8e:0a:fb:
51:f2:00:aa:2c:d9:bd:73:db:84:51:07:d0:52:28:88:f8:f6:
36:4e:33:c1:2e:e0:e2:3b:0f:03:8b:0b:f1:bb:c1:6b:c1:c7:
13:96:c1:ae:36:46:e2:a2:a4:e8:b8:54:af:9b:6e:6a:d2:3d:
97:f9:a3:a9:21:a0:4b:14:67:76:fc:53:0c:b7:f2:25:8b:de:
d6:38:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:44 2026 by rpki-client