Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: N2xagpbs6P1yl3hHxWmYbW9BDPZA9CSpWof8kH4unDM=
Subject key identifier: 02:6F:E7:C5:77:0F:5C:CA:E6:9B:6F:51:DB:D5:00:8F:A9:77:68:2C
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019D39E53CD07D2E489D5E1F28FA13F359DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 14:00:17 +0000
Manifest this update: Sun 29 Mar 2026 14:00:17 +0000
Manifest next update: Mon 30 Mar 2026 14:00:17 +0000
Files and hashes: 1: Pf7AhUnXaKprsBS53Iasbf8vKSQ.roa (hash: EmnGUbW7DpEjL4TQ6sjZbo/JVLkBohhhsfWVRp/Hkx0=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: y4PCj+a0a8lqdQfC2vKq4Fv/6Z+sfD2NebDQZ3jeM+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:3c:d0:7d:2e:48:9d:5e:1f:28:fa:13:f3:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Mar 29 14:00:17 2026 GMT
Not After : Mar 30 14:00:17 2026 GMT
Subject: CN=026fe7c5770f5ccae69b6f51dbd5008fa977682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:44:11:4f:ed:5f:8c:19:95:fd:ca:73:38:
d2:65:64:e5:5f:17:1f:79:0b:24:da:f9:5f:76:32:
16:6b:61:5b:c3:d9:88:4b:e6:61:4d:c0:65:01:d7:
f1:67:c8:28:32:8b:20:15:e5:43:63:07:b9:3c:8e:
a5:b3:62:6f:f4:d0:6d:10:21:4b:f7:cd:f1:20:0c:
90:d3:f1:75:08:31:75:bb:39:b5:68:bb:57:b6:7e:
e2:cd:60:3a:9a:7b:11:0c:b5:0c:89:02:87:a9:36:
f9:12:a3:f1:0b:03:c7:52:60:e0:ce:43:95:b8:74:
96:74:0b:2d:a4:47:ca:58:b2:f7:12:02:1f:47:b6:
e6:8b:d9:29:c9:d2:dc:a8:0b:1b:9e:0c:7e:30:6e:
fa:54:48:d8:97:66:59:65:47:8e:0a:cd:2e:52:8c:
2d:6c:bc:59:46:f7:f7:40:c4:45:4d:27:4d:76:9a:
d4:13:17:09:ff:57:66:31:11:b3:33:64:e2:1d:8c:
6d:fc:85:95:1d:82:2f:73:ce:41:3b:7f:01:50:bf:
b8:0a:a3:07:64:a6:6f:e4:f4:51:53:cf:9b:5a:ff:
6e:63:11:a7:4b:e1:c4:55:16:05:f3:86:d1:81:66:
32:7b:26:ff:86:7c:3b:4e:83:e7:bf:6a:a4:8e:cf:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:E7:C5:77:0F:5C:CA:E6:9B:6F:51:DB:D5:00:8F:A9:77:68:2C
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:62:fe:26:72:cf:da:e0:1e:43:40:7e:9b:d7:c6:7f:92:06:
f3:c0:f7:4a:9f:4c:c0:64:10:d0:f9:31:08:cd:9b:75:54:fd:
5c:8b:31:8d:c3:ed:10:55:55:d0:ea:1f:ce:16:09:9c:c4:bf:
b0:e0:e5:4d:9b:d0:46:7e:c3:73:0e:c3:7a:ad:a6:87:cf:35:
6a:38:48:58:1c:21:a3:39:ec:fb:88:00:be:37:27:dd:c5:ce:
e9:90:40:49:23:2d:a7:90:ad:42:28:e9:a6:1c:f3:8a:d3:bf:
a8:b9:8b:72:a8:9a:82:6b:8a:d2:24:b5:3b:b4:1e:05:1f:60:
6a:8b:a6:05:d4:e9:5f:ff:a1:ef:28:28:cc:c2:3a:f3:34:88:
83:a3:99:99:c6:0e:dc:d6:ee:72:12:79:c3:6f:cb:92:3a:15:
c8:60:74:48:79:09:bb:2a:e6:d6:ac:c3:3a:41:73:0c:d3:ac:
ab:f5:ca:80:16:0c:1b:ee:5f:ea:05:b9:74:d7:26:80:d2:20:
6c:7a:c4:c9:86:d5:ea:71:36:8d:f0:d2:f9:2e:01:55:00:f6:
f0:2b:af:c2:31:22:be:c2:97:fd:dd:46:cf:79:1e:c6:c3:84:
8f:ad:32:be:e8:ca:9e:15:d0:d1:c4:9b:e7:3c:72:fe:c4:05:
94:13:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:49 2026 by rpki-client