Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: VrZMm9UJBRfgqp+LTGdEVgCyWqKoS9FUKi26j0lXpKg=
Subject key identifier: 2A:04:D2:AD:46:EB:5F:8E:29:8A:47:19:8C:B8:BA:49:1D:C4:DD:69
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019D3909BE0429042AD6DD0313AC1FDB4FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 12F5
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: Z724COhBJZKSzLtIM0EfNe0Yi7boH/rqKU0/42KYTK0=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:be:04:29:04:2a:d6:dd:03:13:ac:1f:db:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=2a04d2ad46eb5f8e298a47198cb8ba491dc4dd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:a2:92:bb:12:14:e0:66:33:58:ad:84:f1:
c3:23:d4:43:76:1f:b5:91:c3:38:94:76:14:7c:04:
9b:6b:93:61:f4:ca:5e:c2:60:38:31:46:ab:c3:29:
6e:2c:b7:45:f9:3c:4e:37:b9:82:ef:e1:3c:d7:ba:
44:c0:c9:51:4a:bc:4c:e3:ca:90:43:4c:c5:d7:e3:
80:58:34:fe:b5:30:2f:c2:7d:97:42:b2:ff:ca:6a:
38:c9:92:c4:74:06:88:19:32:1b:9d:74:5e:f9:e5:
29:cb:57:1b:1b:de:e0:03:26:96:7d:74:3a:6e:f3:
46:aa:9d:ac:6f:7a:85:6e:cb:7c:5e:40:a4:52:d1:
a2:f1:dd:19:36:aa:3e:f9:20:2d:6b:ed:c5:20:fa:
6d:f4:4c:76:4c:1d:42:d2:3d:aa:63:dd:50:dc:54:
f4:e4:17:8d:9a:52:dd:9d:56:5b:cf:b2:3d:f7:0c:
83:68:1e:47:c9:7c:41:e8:a4:de:e7:b3:2b:48:4a:
50:c8:46:8c:ce:e0:61:65:13:de:8a:07:f9:a1:a3:
12:09:ae:59:04:da:f7:56:4c:d6:30:ad:c2:2b:cd:
b1:8c:9d:a2:c6:b5:99:69:f3:b0:04:93:29:e1:6e:
e7:b7:d2:bd:eb:5f:bb:e6:42:e8:14:19:2f:02:17:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:04:D2:AD:46:EB:5F:8E:29:8A:47:19:8C:B8:BA:49:1D:C4:DD:69
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3f:a8:2c:8a:9a:10:53:89:5f:21:5a:a3:2a:c4:ca:ea:35:
2b:04:fe:80:4f:df:57:41:4b:44:21:72:37:19:a7:c4:27:33:
b3:4b:a9:b2:2a:7c:c6:71:1b:8d:b4:da:71:72:90:14:21:70:
ea:3a:e3:ac:e8:83:a3:77:85:bd:2f:98:11:12:24:e0:06:a0:
05:bf:56:f1:26:98:4d:84:9e:68:d0:25:42:6b:f3:c3:fe:7a:
bc:32:9a:88:f5:c7:3e:aa:10:99:91:80:fa:11:cc:93:2b:34:
c5:3a:ac:c0:68:6f:4e:17:43:df:7b:b8:b4:bf:c9:27:36:b7:
31:5b:31:fb:d7:d7:08:9a:d1:4e:f2:eb:8a:96:3e:51:09:50:
04:59:55:73:0e:b1:5c:54:b3:53:ce:8b:94:29:65:b4:d3:26:
c9:6e:70:d4:20:4e:ba:6a:4c:b3:87:6a:94:29:60:fb:d8:5d:
97:c5:11:bd:56:f7:78:94:66:f1:53:c4:25:ff:a6:12:10:49:
69:f0:46:d5:0f:9e:d4:b8:2b:da:65:1a:63:ee:b2:ec:0b:56:
33:eb:9a:e0:49:22:09:2c:df:30:7e:37:2b:87:2f:39:fb:ec:
09:b0:7a:b4:a0:29:8c:a9:3d:ce:9c:d4:4f:8a:b1:86:85:cb:
9b:11:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:42 2026 by rpki-client