Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: F0FhCZ9JB4qEvburOXWurZ+8nMXVM5/yGQaFpOXDOWE=
Subject key identifier: 9E:F1:48:65:8D:A7:23:5B:F2:33:05:28:37:27:8D:05:1C:D9:89:13
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019D35D1BF70AFDDF0F649599F696427F7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 19:00:31 +0000
Manifest this update: Sat 28 Mar 2026 19:00:31 +0000
Manifest next update: Sun 29 Mar 2026 19:00:31 +0000
Files and hashes: 1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
2: M6YDzlZVr545-NRDZbfv7XkNikA.roa (hash: vga3ADtyJ30uY+qd7xLsXyiEJYmB+7pvZRn567PTxOw=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: Qmznbk9suPW57dKzr3ZXrZjYp+dp7/mOCCCN2zH5bkg=)
4: mGYiLhfQNyctSYzl32C3_8pgLyg.roa (hash: 8HmTTsNkpzWmVIPPrtxGzEKkk0EjZwa9jEIOmHI0uZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d1:bf:70:af:dd:f0:f6:49:59:9f:69:64:27:f7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Mar 28 19:00:31 2026 GMT
Not After : Mar 29 19:00:31 2026 GMT
Subject: CN=9ef148658da7235bf233052837278d051cd98913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:6b:28:ff:0e:f2:0f:fd:00:b9:ff:09:43:
2b:2b:95:2e:0c:f8:72:5f:f1:17:d8:a4:24:28:f2:
93:0e:b6:49:91:59:45:af:82:f4:18:d2:80:78:6f:
2c:77:8c:50:ee:c2:ab:ad:ea:95:f9:1f:7a:db:eb:
1f:f4:bc:72:ba:42:59:69:ba:b3:de:ba:c6:ba:43:
00:24:0e:e4:9f:ac:72:ab:e5:8c:38:cd:32:ed:d5:
cd:fb:44:b8:5b:d4:57:c4:b8:b4:2f:40:41:60:a1:
94:9a:36:cf:37:92:3b:b4:15:46:54:4a:29:35:af:
3b:dd:ac:98:bf:89:5b:ab:27:6e:e5:83:1d:20:c6:
7c:52:26:6f:2d:78:b5:3d:9d:b2:bd:2b:db:1d:8f:
2f:f5:9c:e0:55:a5:d7:2d:b5:c8:3b:b1:29:82:30:
ec:77:61:4d:4a:53:67:5c:65:bf:59:93:57:88:58:
ea:ad:51:04:23:ef:32:6d:57:45:95:8c:bf:f0:4e:
22:91:ed:b4:ed:53:38:0b:90:ad:d6:16:92:2b:93:
f5:73:f5:be:fd:dd:e2:76:7a:e2:d2:1d:1b:b5:f9:
ef:72:26:d1:73:28:09:87:ee:93:00:9b:7b:61:28:
42:ae:9e:af:82:2d:11:34:74:df:65:f9:fd:a1:a8:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:48:65:8D:A7:23:5B:F2:33:05:28:37:27:8D:05:1C:D9:89:13
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:a6:9c:db:88:3e:6f:1d:e1:94:17:2b:2e:63:19:00:59:
e3:c4:20:31:59:42:cc:22:29:6e:3c:c1:7a:35:d7:97:09:69:
52:32:fd:6a:03:57:6f:9e:92:e3:ae:4e:85:db:0d:22:51:19:
50:5d:2f:d3:58:66:6a:b7:32:0c:90:f3:6f:b8:76:b5:df:4e:
10:bc:51:78:c1:38:19:f5:f3:63:5c:f8:fa:88:af:94:25:32:
b6:7d:ff:a0:57:c0:a5:c6:2b:62:7a:3b:53:f8:f4:d5:0b:00:
43:72:8b:9c:fe:08:b7:3e:62:85:c9:b4:1b:9b:c2:c6:cf:68:
6b:fd:a1:1a:44:49:6e:e0:1a:f1:dd:40:37:bd:9b:34:4f:74:
d1:ab:db:99:fd:3e:f2:86:ae:35:ab:e8:42:16:15:62:cf:f7:
1b:f9:2b:f7:a7:c6:cb:ab:f3:da:05:a8:91:7a:b0:a4:04:c9:
03:71:e6:b9:67:a1:9e:e3:21:00:bf:d5:f3:59:bb:62:2b:10:
df:21:d0:20:08:c8:99:d2:86:3a:f7:50:f1:8c:70:85:a7:15:
56:e4:9d:61:2e:2e:02:80:26:62:dc:cd:07:56:91:63:18:99:
3b:d0:40:66:81:ba:5a:3e:0d:90:82:66:2c:74:ff:53:e2:b6:
a5:6a:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:44:45 2026 by rpki-client