Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: ESwBDC+9uzMDmNMCfaKbQ9h2/G2prE0lAcTvkkd5Jvo=
Subject key identifier: DE:6A:F9:27:6A:5A:A9:55:A5:19:CE:A6:F1:3A:9A:72:A7:2B:57:99
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019D382DF5AF901563D401DA6AC1BEBAD5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: JiVRv2NPUOwN1Fg8RtWEOiBFkZHwVLaozPpLInWgRKM=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f5:af:90:15:63:d4:01:da:6a:c1:be:ba:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=de6af9276a5aa955a519cea6f13a9a72a72b5799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:ca:08:89:56:6f:05:4c:8d:e7:c3:ec:66:
d8:e8:5b:7b:4a:c9:47:19:e0:c8:8f:57:d0:a5:76:
8e:36:09:08:07:7a:af:20:74:55:da:38:1f:0c:6f:
0f:4f:02:86:59:cf:ac:90:d8:5a:33:26:f5:8f:65:
18:7a:a5:57:e4:ff:5b:80:17:ef:a1:16:a8:55:17:
e1:d3:62:9f:74:ed:7e:0f:b6:03:53:a1:e1:38:ee:
d7:8d:5f:05:f7:b5:b2:a0:5a:ac:f9:e9:23:7d:c6:
7b:f3:85:bb:a7:fe:27:d7:7c:11:0a:15:58:60:0c:
4e:69:c0:a1:a3:48:7b:c6:f2:f4:e2:f9:d9:53:7e:
92:a8:26:a2:31:f6:f7:e8:a2:05:41:f3:c4:e8:b5:
1a:8a:19:3b:4d:a3:f7:95:4f:b5:d2:33:e5:b4:45:
46:d3:03:30:ef:a7:3c:c9:e0:1f:89:3b:a0:42:ba:
d2:2d:1a:86:ef:c3:19:1b:62:ce:02:44:3b:ba:18:
b2:54:55:6c:3e:65:20:87:e3:ed:8d:f3:de:b7:4b:
ab:2f:0a:cb:27:b5:05:8b:65:7c:8a:30:90:f9:01:
f4:af:74:71:98:59:4b:56:12:9e:d5:a1:f9:52:14:
49:c9:bf:35:1c:2e:0a:5b:9c:73:35:11:63:be:c4:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:F9:27:6A:5A:A9:55:A5:19:CE:A6:F1:3A:9A:72:A7:2B:57:99
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:c2:2e:af:57:77:32:bd:c4:b3:39:db:6b:7b:9e:52:26:
e6:44:ef:4b:5f:1f:57:84:4e:12:b6:c0:8e:e5:9b:57:9a:0c:
40:f3:66:25:38:26:87:34:67:07:66:cf:25:a2:16:31:87:87:
2a:ec:8c:05:06:ab:e9:bd:9d:4d:ea:ff:f5:a8:b9:4f:d1:8f:
85:9d:be:6d:31:8b:e3:36:db:ef:b5:22:66:73:19:47:fa:f8:
90:e1:5c:77:43:da:c0:87:56:64:d9:f4:dc:c0:1c:92:17:65:
76:8c:2e:49:3a:5d:42:ae:4b:06:d3:01:ec:ec:83:46:82:c3:
77:ad:ef:44:4b:62:f9:2e:39:29:16:94:52:65:c1:b7:3d:a9:
91:f5:99:a6:18:33:54:db:48:89:74:10:6c:25:bc:b6:ff:d8:
0a:15:8a:70:f6:9c:d4:e5:10:cf:cd:56:27:db:a3:e4:23:38:
e3:19:10:86:9f:60:0e:d2:0f:55:ff:a4:3a:a7:dc:18:ef:4c:
c0:44:b9:40:16:60:d0:f1:6d:6b:e5:91:af:6d:38:1c:35:9d:
13:c5:12:25:81:db:6a:09:7e:83:44:24:c3:b3:22:ac:61:f2:
41:b2:63:d2:74:2c:f0:84:69:8a:b8:2b:2a:36:b5:4a:b2:e0:
b8:7e:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:51 2026 by rpki-client