Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: 5ncyBZKlHvQWZc+w4ZE7HzFVolrOZd5zNW7vAUE5xkU=
Subject key identifier: 71:FF:0D:7B:92:11:C8:0C:43:5B:03:13:19:22:D7:9C:7D:74:4C:77
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019D39AE9EECA7696DDE6F254C340D5322E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:38 +0000
Manifest this update: Sun 29 Mar 2026 13:00:38 +0000
Manifest next update: Mon 30 Mar 2026 13:00:38 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: ARwYQhH9lkSC7mPnBn5cINIlJgM1umUYzm48cmljij4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9e:ec:a7:69:6d:de:6f:25:4c:34:0d:53:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Mar 29 13:00:38 2026 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=71ff0d7b9211c80c435b03131922d79c7d744c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:f7:a4:b5:af:8c:4c:43:29:3f:13:18:12:
80:93:b6:a0:09:b2:ca:b2:11:f5:f9:cf:87:88:d7:
45:93:cf:f0:81:99:24:69:67:51:e3:73:ed:ae:f7:
4e:1b:82:30:c7:3b:75:01:5a:89:54:3c:23:9c:a4:
4a:4d:1c:e6:7d:da:23:7a:88:2b:86:b8:20:e0:99:
cc:12:61:4c:0b:5b:0c:6b:3a:50:29:79:a1:23:04:
37:f2:35:81:6c:6c:13:4c:85:7f:29:b1:f3:35:0a:
fc:00:c5:c9:ef:17:37:01:c3:78:24:01:e8:c3:48:
92:8d:39:4b:98:07:68:00:0f:bd:76:4f:b9:b2:48:
b7:24:8d:df:2e:32:b6:47:21:6d:b8:20:a8:49:5f:
85:b1:e5:c7:17:4f:23:34:b6:5f:ef:c3:34:2f:60:
db:a8:55:66:99:de:bf:c2:ec:e5:20:e8:af:8b:49:
bc:1a:a4:04:99:54:82:5a:24:21:be:6c:ec:23:3f:
f7:aa:15:73:4d:e1:74:66:40:f1:2c:bf:0b:06:b5:
ec:c0:24:fc:d6:69:ef:3a:64:54:f4:fd:c3:7d:1d:
ff:79:19:cb:17:7c:99:b7:2d:97:e2:81:cc:ba:a8:
49:c7:20:d4:7e:4b:bc:7f:d1:fd:bd:8b:e3:7e:d1:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:0D:7B:92:11:C8:0C:43:5B:03:13:19:22:D7:9C:7D:74:4C:77
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:26:7a:56:a6:a0:71:8a:91:98:9c:1d:17:4b:4e:1c:a8:81:
ac:1a:d2:fa:c6:42:63:fc:ff:90:3e:ca:ae:38:d1:ce:28:8a:
0b:8f:10:95:b5:15:2c:74:cd:e3:18:1d:34:09:1f:ca:8e:fc:
51:eb:b2:6e:8a:42:61:72:14:5e:39:e7:2e:04:26:6b:b9:b4:
2e:ce:96:f8:2e:3a:57:34:58:cc:9d:fb:6f:fd:12:77:e9:ec:
a5:33:46:42:0b:b7:bc:81:ce:34:0d:ee:0b:be:ff:e9:cd:90:
be:5f:be:72:35:b6:a9:07:ca:5b:d2:f4:73:de:21:5f:41:21:
98:00:f4:c1:93:6c:d7:63:1d:f5:77:04:68:72:92:27:bf:db:
84:cb:b2:d4:3d:f0:f8:f4:7e:67:b7:90:fd:76:a8:50:10:08:
95:1f:6f:b7:58:f3:06:14:24:34:23:b7:14:23:a8:2f:2d:70:
0d:08:02:ed:b0:c8:38:96:1c:93:2c:e3:e6:d7:48:22:36:dc:
50:ba:f8:d9:aa:74:13:a3:5a:01:4f:0b:43:2e:83:c5:c2:22:
49:84:57:5e:e6:e9:e8:0e:08:e4:ed:8f:96:a8:2c:e8:7f:2e:
8d:db:3d:89:78:6e:05:df:e2:7b:c9:7d:90:88:2f:c0:79:0a:
17:ca:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:25 2026 by rpki-client