Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: lqvD/Zqc3+gwLbAFR79NKoZUEJLr9BZOKtJhpahspYE=
Subject key identifier: F5:FE:C1:4E:B1:58:FB:8D:88:73:2E:C5:B9:3F:40:60:E7:31:99:04
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019D375302A83D8400861FA70871F64F638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0906
Signing time: Sun 29 Mar 2026 02:01:20 +0000
Manifest this update: Sun 29 Mar 2026 02:01:20 +0000
Manifest next update: Mon 30 Mar 2026 02:01:20 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: pTjB71QKvET4QdIyb0YhdqYJa0HKqHzEaaO11R2sbVE=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:02:a8:3d:84:00:86:1f:a7:08:71:f6:4f:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Mar 29 02:01:20 2026 GMT
Not After : Mar 30 02:01:20 2026 GMT
Subject: CN=f5fec14eb158fb8d88732ec5b93f4060e7319904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:78:95:05:0f:dc:93:be:db:0e:8a:fe:92:
4c:f5:35:c8:74:3a:0f:21:71:20:6e:b4:84:35:c0:
99:5f:1f:c1:e1:b3:23:17:82:2c:92:59:fe:d6:56:
69:41:c1:73:2f:75:0e:12:3b:2d:22:ac:75:78:7f:
5d:b5:6d:2d:88:9d:aa:6c:27:c7:60:d8:6a:40:ba:
82:20:d8:88:0d:6c:c6:63:9c:2c:b2:66:1f:63:56:
30:12:43:b4:b3:1f:3a:a0:68:54:9b:f3:24:bf:21:
73:e9:66:f6:38:71:69:96:e1:87:ac:30:da:00:69:
6b:1f:d8:a7:74:05:50:bb:53:75:d4:ae:80:3b:cb:
48:ad:ce:aa:f2:be:a8:02:05:36:cd:b8:9b:4d:32:
fa:c5:c2:ab:f3:15:6e:b0:52:73:42:a7:bd:b6:9b:
ce:87:3c:71:80:cb:d5:87:d4:04:bf:d4:cf:95:aa:
76:7c:2d:f5:cf:eb:50:e3:01:30:8b:bb:00:51:b9:
71:e4:24:a7:40:d6:f8:aa:4c:9e:30:78:93:a7:87:
ab:9c:86:ed:88:dd:86:0d:b1:44:42:9c:47:e3:88:
a9:14:4f:a5:a7:eb:3e:e0:f4:67:9e:fb:04:61:1f:
db:24:92:54:04:22:58:b7:f1:c9:aa:c2:eb:e5:c9:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:C1:4E:B1:58:FB:8D:88:73:2E:C5:B9:3F:40:60:E7:31:99:04
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:f2:aa:a3:d1:7c:73:70:14:4f:f1:7b:93:83:7e:d0:59:
d7:e3:1e:d3:64:3b:0a:87:29:4a:57:81:5a:27:3a:d9:7d:23:
96:37:1f:7e:23:5e:7a:e7:5b:e5:28:94:a1:7b:50:05:ad:62:
83:bb:70:b8:1c:da:ad:a4:43:fb:86:7d:f3:d6:fb:fa:00:04:
bd:7a:39:5b:a4:ec:f7:36:fc:a3:0c:2b:00:04:a7:7d:32:b2:
1a:e9:51:03:32:51:58:26:c3:f7:b7:26:5c:6f:e3:a2:82:eb:
83:76:d7:ba:ed:69:68:32:79:41:0c:5b:02:f6:a7:90:52:8c:
5a:66:b8:00:7d:7a:18:ad:56:86:19:dc:aa:7d:7a:bb:78:b5:
45:00:50:77:fe:86:e5:54:0f:29:da:bf:4d:d8:92:41:3f:20:
3d:15:5c:c4:15:2b:a9:c4:64:44:ca:89:47:35:61:44:64:6f:
83:a7:02:26:54:9c:76:f8:6b:06:79:77:7b:57:b4:19:71:4c:
2d:06:e5:62:d0:fd:40:a1:2b:35:9f:43:4c:16:18:36:d3:78:
10:6f:3e:4f:a8:b0:67:4b:94:ec:3c:95:47:2c:26:e7:5c:8e:
9e:2f:77:5d:b1:c6:c8:a5:a5:da:a0:10:31:88:94:b9:f5:75:
ad:19:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:09 2026 by rpki-client