Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: xw8kXgd+UXkvzhtfZJVRnyOjTUbnbnwus4OD+yAqw4k=
Subject key identifier: 63:66:B0:72:87:C1:6F:91:BC:ED:20:0A:96:8A:9D:9D:0C:BE:83:9F
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019D371B3092CD04CB482829CB13CFE45FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 17BF
Signing time: Sun 29 Mar 2026 01:00:21 +0000
Manifest this update: Sun 29 Mar 2026 01:00:21 +0000
Manifest next update: Mon 30 Mar 2026 01:00:21 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: 4twkSaCb/cxerFQ2ha/FESQkORbt1K0UnwA+NwzCfZs=)
2: j11RSuGZdP978fle7rZl9lYrLos.roa (hash: cc6p0W3mXzrkRQrbuZH3I0FsotddQvFdCECy4+DwMbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:30:92:cd:04:cb:48:28:29:cb:13:cf:e4:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Mar 29 01:00:21 2026 GMT
Not After : Mar 30 01:00:21 2026 GMT
Subject: CN=6366b07287c16f91bced200a968a9d9d0cbe839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:3f:fe:f1:d4:7c:a6:41:ee:a7:b5:7c:ee:
2a:1f:22:e0:ca:21:12:7a:c5:9b:43:b2:1a:bf:c1:
d2:fd:8f:b5:cc:54:40:70:28:60:d2:04:38:67:57:
89:6c:db:d6:e3:89:8a:51:76:f7:92:6b:7b:43:02:
f4:48:57:bc:40:e2:9a:cc:f3:6e:ed:53:2a:6a:8d:
32:a0:2f:c9:44:eb:57:6b:5f:5f:9d:19:ca:a1:c8:
a2:b7:7c:7d:ba:44:f6:68:55:57:a6:ab:5a:20:05:
3e:7e:89:cf:27:50:eb:03:71:20:0e:72:86:dd:82:
83:d5:56:ce:a1:85:a6:ae:68:2d:2f:bb:89:91:f5:
78:f6:0c:07:4f:9a:ff:7c:32:7b:29:b3:0f:f3:5d:
f3:8f:5e:9e:82:c2:e1:d3:41:c1:fb:88:73:fe:87:
63:73:6f:53:7c:9d:6d:c2:66:79:b6:25:dd:58:9a:
bd:62:ac:21:e8:2c:77:b7:a7:16:4b:db:88:18:14:
6f:1e:87:c0:eb:7d:a3:fd:c5:e7:c5:2c:74:41:18:
dc:0a:1e:e9:a2:6f:5c:0a:54:b8:c5:69:e3:37:f6:
0c:d2:85:5f:98:86:5d:aa:d7:6c:81:fb:d3:6e:04:
8b:5c:48:84:0c:a9:94:27:9f:20:68:0f:51:45:d6:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:B0:72:87:C1:6F:91:BC:ED:20:0A:96:8A:9D:9D:0C:BE:83:9F
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2c:d4:82:7b:a8:82:e1:04:52:68:9c:fa:88:ae:8e:b8:bd:
6a:d8:72:67:f4:88:c2:04:1a:aa:62:4c:24:85:00:90:f4:14:
65:06:ab:bf:ff:bf:a3:20:09:e2:a0:af:c5:8a:66:39:81:13:
f0:b9:d8:2a:5f:8e:8b:3b:21:99:23:7f:6a:3e:2d:f5:a7:67:
9b:14:c8:4c:57:a0:0c:4d:6b:fc:ac:2e:79:3f:c5:ec:66:e0:
6c:47:51:e2:39:fc:2f:01:fd:6b:df:54:37:16:89:74:24:0b:
7c:2d:19:78:7b:42:d9:ab:c1:26:47:3e:1f:d9:68:9e:36:ea:
fd:55:1b:16:33:9c:16:74:77:87:f5:65:bc:f7:2d:a6:48:eb:
e6:c1:d5:4f:c8:6a:a1:d6:f6:e5:cb:cf:41:12:39:8d:33:be:
f9:e9:7e:b3:b7:7e:59:1f:45:5b:fd:5c:40:a1:d0:fd:8a:7b:
99:fa:c2:bf:bf:31:1c:94:34:9f:3b:0d:80:1e:0f:c9:84:40:
15:c9:d8:71:04:b0:44:f9:57:e1:ec:a3:be:71:8c:1f:d2:a1:
e2:18:12:10:a5:b4:c4:1b:04:33:08:1d:24:bb:ee:75:20:8e:
6d:08:1a:a1:2b:7d:2d:32:95:cf:81:3e:3d:13:26:3f:40:99:
16:2c:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client