Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: Bg5WHZ/WtgbGnmn2aoHppJeBLF9Sb++KcY6Q0fOT2ZM=
Subject key identifier: D3:00:DA:E2:DA:74:18:29:0C:91:E1:BF:5C:86:1A:40:72:95:E3:41
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019D30ABD01D1091EE1948E12F21D2B2F134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 188B
Signing time: Fri 27 Mar 2026 19:00:59 +0000
Manifest this update: Fri 27 Mar 2026 19:00:59 +0000
Manifest next update: Sat 28 Mar 2026 19:00:59 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: /p1hOwGiMhC0ADAe0nbUAAFeSLSbC6p+L6RALuMrCeY=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:ab:d0:1d:10:91:ee:19:48:e1:2f:21:d2:b2:f1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Mar 27 19:00:59 2026 GMT
Not After : Mar 28 19:00:59 2026 GMT
Subject: CN=d300dae2da7418290c91e1bf5c861a407295e341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:9e:65:63:57:24:92:2d:e6:47:29:bf:70:
62:5c:6c:15:b9:cc:a9:50:3a:5b:37:f1:94:64:53:
b5:51:bb:a8:a8:d0:de:65:71:d0:fc:41:33:92:8b:
46:33:b2:d7:ef:8c:a1:d3:14:84:7c:f8:d6:49:cc:
02:8f:4e:69:f5:e6:14:f0:76:2b:61:c0:8c:3a:2c:
90:db:ad:9b:f0:e8:91:80:aa:af:97:e7:4c:b6:c9:
c4:8d:07:41:5f:5b:2e:39:be:da:c3:00:26:d8:43:
34:00:11:77:5b:26:8a:12:55:5c:a7:d6:7c:0c:e0:
0f:86:53:a2:1c:b3:2a:e7:a7:e8:64:2a:eb:60:7c:
dd:d3:25:7d:d2:e6:3d:fc:7e:b6:47:f0:0c:58:32:
23:02:e6:3e:84:07:19:ff:14:3d:b0:19:5b:4a:0d:
bd:91:1c:24:c9:fc:c7:e3:45:69:39:ee:98:c5:2c:
9e:22:83:74:b1:b0:3a:d9:dc:a1:f3:1b:ba:b8:54:
d8:35:75:6c:c0:20:16:23:32:db:e9:d0:17:54:33:
73:d2:9b:ec:8e:eb:c9:17:53:c9:fe:c5:0e:c9:79:
7d:5b:fb:af:e8:31:8d:2a:ea:9e:b8:4b:89:53:b6:
33:5f:20:d3:53:75:18:4a:ab:ef:20:20:a6:eb:32:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:DA:E2:DA:74:18:29:0C:91:E1:BF:5C:86:1A:40:72:95:E3:41
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:d8:ab:03:0a:a2:81:46:bf:67:46:0c:3e:29:50:9c:57:
e6:90:75:8b:fd:60:9f:ef:11:74:78:4c:49:ab:cf:61:be:8d:
db:46:29:0e:86:ae:16:1d:be:17:a3:c7:e8:4b:7d:8b:9a:a5:
0d:0c:87:bf:6c:7b:e4:6a:33:46:af:af:cb:64:1d:c3:b8:b4:
22:1f:6b:69:11:a3:56:50:98:82:8c:5d:aa:d7:c4:28:f1:49:
da:0c:da:be:fe:82:26:ac:09:ef:8a:6d:7f:ab:33:10:37:28:
70:a4:b3:08:81:7d:04:0c:f5:ef:36:e4:41:f0:aa:7c:ac:cf:
2b:22:42:fd:d7:5b:5f:5d:4b:75:31:08:67:58:00:3c:0a:1e:
89:a4:67:cc:90:fb:61:0b:97:ea:93:24:30:95:b0:68:1b:00:
46:7a:ad:ae:9f:0e:37:46:45:42:73:08:0a:0d:04:7e:37:ff:
27:b9:ef:b7:e8:19:c1:96:94:6c:b7:b8:02:99:d4:5a:87:74:
47:d7:98:1c:62:4e:05:55:6a:95:8e:8e:b8:42:07:a1:0e:3c:
e7:49:dd:c3:70:4c:04:6b:bc:df:09:36:3f:fc:90:a4:76:30:
60:f5:4e:e9:2b:0c:ab:a4:d5:5c:5b:0b:c0:e5:ac:1d:fd:aa:
b4:02:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:48:51 2026 by rpki-client