Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: K32RFPZawaUM6wsCCtHFq6HPRaXlvTO4DSNv1i0xZaI=
Subject key identifier: 3F:29:AD:29:68:86:30:26:45:6A:85:79:97:68:6D:5C:F4:08:19:7D
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 019D38D36B487F053A120F53164BDA5ABBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa (hash: KP4i5VhWoAFHGaSkT7VTeYsqIMIZacJTjVM3FavYgB4=)
2: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: EjC3tnbf9D3jGghVtmyms1RhXVEyFhMHwlqJNRwmlEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6b:48:7f:05:3a:12:0f:53:16:4b:da:5a:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=3f29ad2968863026456a857997686d5cf408197d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:21:9e:66:a7:02:d6:5f:dc:1b:ba:09:95:
e7:59:18:06:46:bf:fb:47:22:df:9e:d4:54:e4:bb:
95:c2:c3:1d:82:42:17:a2:04:c4:e2:65:3b:01:eb:
f5:5c:bb:8b:20:23:e6:8a:f0:d9:0f:e3:52:c5:f4:
69:6a:bb:2d:38:ca:e2:5c:85:fe:9c:c6:c7:0a:48:
fe:fd:fe:28:0b:96:05:11:78:2c:91:e1:90:40:05:
dc:20:04:46:4d:b7:d2:43:47:2d:b9:12:79:97:63:
ab:f3:07:e6:8d:d3:77:01:4d:13:2e:39:01:6c:24:
68:e6:64:46:8f:a3:92:62:d7:06:74:56:fb:71:5e:
eb:f4:5e:3c:02:57:32:01:2a:61:06:b0:09:4e:e4:
9e:f2:7f:92:f1:4f:85:ff:d6:46:cc:f1:e6:76:fb:
de:31:50:df:c6:d2:a9:c6:62:52:60:b8:9e:80:1e:
be:a2:56:78:78:09:39:72:20:69:02:62:a1:ad:35:
8f:b3:60:06:e3:2c:a9:2e:cd:f2:0d:3d:79:8b:d5:
66:8e:a2:32:cb:bc:bf:4a:98:23:ef:b0:c5:5c:55:
73:e9:93:25:42:5d:e7:fe:b4:7c:ae:46:a5:b5:dd:
13:13:e9:ba:b9:b4:02:00:01:51:39:8e:e7:13:a4:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:AD:29:68:86:30:26:45:6A:85:79:97:68:6D:5C:F4:08:19:7D
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:ec:80:10:a3:09:28:bf:e5:de:f4:24:ba:92:32:d4:50:
0b:36:74:b7:5d:5f:f5:e8:24:93:a5:57:ac:eb:29:1e:e8:b7:
c5:81:c0:53:9f:95:50:80:f4:9f:33:8f:02:ba:26:ae:eb:6e:
ea:27:df:c3:1b:90:b6:aa:10:ec:83:3f:21:20:9d:91:66:4f:
2e:df:3f:96:c7:07:35:be:3e:6e:45:8e:9a:4e:dd:15:80:0e:
83:de:52:eb:e8:91:08:12:c7:1c:f7:2b:d1:0e:87:1e:5a:71:
29:9f:90:4f:91:47:93:8b:2c:aa:ad:5e:d0:51:96:c9:df:9f:
98:a0:27:a3:58:a5:ca:eb:ea:d4:f1:44:b1:5a:e7:fb:87:4e:
16:3c:ec:40:0f:93:fe:88:d3:c4:fd:14:73:dd:9f:62:eb:3f:
91:3f:46:b2:d3:1c:3e:11:be:82:12:9d:97:d9:c7:98:88:37:
de:c6:98:2e:16:3c:4d:9d:a1:03:b9:25:19:5c:73:73:8e:04:
8e:a9:04:57:2a:0d:68:4f:8b:e8:a4:97:16:19:d9:ff:9b:74:
e6:52:b4:be:d4:ab:e8:aa:c2:53:9e:94:06:f9:13:1a:09:25:
45:4d:e1:7f:6e:fc:87:e5:27:02:8c:0a:78:64:e6:e8:3c:46:
29:c7:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:16 2026 by rpki-client