Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: AoBQBMOU8jy1rSe3zN+5C6HBYuMHHfVqkxRLGj52eZk=
Subject key identifier: BB:DF:DD:E4:6F:A1:ED:BE:65:B5:24:2C:8E:72:DF:0D:BF:54:8E:10
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019D38663CD526836B53537FA150E54020D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0A7A
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: j1QnwCEyrV9ts3ssgdPWGzPO7bSv0Afim/0/cjMMHX0=)
2: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (hash: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3c:d5:26:83:6b:53:53:7f:a1:50:e5:40:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=bbdfdde46fa1edbe65b5242c8e72df0dbf548e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:1d:16:13:14:b4:9a:fb:24:b1:a3:cf:47:
ad:71:e8:d2:78:62:ec:e2:62:3c:a5:4b:1b:ae:0f:
0d:bf:f8:8d:1e:8b:97:e0:ca:52:d9:a5:ee:a9:6c:
8c:6e:11:ff:b1:cb:8d:81:57:3a:04:a9:19:83:57:
75:21:81:92:17:83:89:73:ce:2f:c4:62:9f:4a:fd:
b9:e1:b6:fa:2c:da:c9:89:cf:54:f7:ca:f3:69:9e:
bd:9d:74:01:b7:c4:e8:8d:9d:ed:f2:41:e6:bd:e7:
2b:3d:b1:2b:60:77:4c:96:ae:36:53:3a:d7:85:f1:
a8:40:41:9d:ad:9e:60:7a:63:3a:bd:5b:bd:18:4a:
ea:27:5d:68:41:e6:ea:a7:45:00:4d:3d:0c:43:62:
74:c9:3a:0f:92:a8:08:79:ce:67:38:74:c4:d3:c1:
88:16:fd:62:4f:e3:33:93:81:36:b4:85:50:94:99:
b2:76:d3:1f:07:3e:3c:bc:5f:48:7e:bd:9e:f3:84:
79:58:3f:14:2b:03:00:65:35:f6:f1:79:88:48:a7:
6c:94:37:7a:11:59:4c:fc:0f:61:44:68:b6:e3:33:
ec:50:7b:07:57:a3:08:4c:81:4b:c1:de:eb:e6:65:
95:ce:01:bb:9c:ac:08:b8:52:0f:34:c8:75:f8:3b:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:DD:E4:6F:A1:ED:BE:65:B5:24:2C:8E:72:DF:0D:BF:54:8E:10
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:67:9b:37:57:8c:2b:ff:21:2d:47:a5:ad:d9:3e:ac:14:b6:
39:5a:6d:b5:35:85:ff:8e:04:e2:8c:52:d2:ae:fa:05:0b:42:
b2:5c:69:88:18:03:ab:58:8a:1f:d4:42:b0:ce:1e:2a:87:6e:
3c:ef:94:cd:39:2b:d3:16:2f:8b:76:4f:5b:42:5d:b9:82:52:
b8:fe:30:ff:9d:4b:08:46:9d:0d:32:50:11:f2:ec:df:09:93:
66:f0:c8:a3:34:b1:3f:74:45:3d:dc:2d:76:5b:a1:64:eb:61:
20:33:0c:7a:4f:d4:bd:db:4d:d1:45:8b:5a:24:3f:82:1b:a4:
02:36:a3:8e:45:f2:95:ac:d9:0d:22:e2:91:87:00:3c:94:7e:
9a:2e:1b:42:6e:36:f5:0e:95:f7:b8:69:50:d8:1b:fc:28:e9:
be:b6:d5:23:e7:9e:eb:8a:d2:2d:c0:2c:33:e2:d5:1c:2a:cd:
ee:dc:8b:31:ca:ae:0c:d2:30:53:f5:d2:2e:9d:3e:f0:30:33:
23:8d:5a:4e:58:ab:25:7a:31:9f:53:d9:38:b7:42:d7:92:28:
b9:70:db:98:cc:95:51:12:ee:82:aa:7e:55:4e:9e:4f:8f:19:
ee:7c:ea:99:2d:a5:36:f2:72:9c:d8:b3:a4:37:ed:51:34:4c:
46:59:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:00 2026 by rpki-client