Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: XUMTFSJTRiBc6VG10ekbijT3bR9qjvoWnxSE8cA4LhY=
Subject key identifier: 32:EE:21:7F:6F:90:AA:02:AF:18:0A:17:37:CE:60:A7:E3:51:D4:B3
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019D38D32CE7E3520B1AD80104F3EFF86CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: MH4I9xav4LfVDq-8qLH2rQsIB04.roa (hash: 4P+chNkfen2A5zyoEceMZTNyTkw02ot82WeO0g5JC48=)
2: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: Od7HHaSo8z82eeYA7LnscvtR/tbtb6LHcXphQJS5rzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2c:e7:e3:52:0b:1a:d8:01:04:f3:ef:f8:6c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=32ee217f6f90aa02af180a1737ce60a7e351d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:06:bc:86:90:8e:6a:14:f8:cf:08:96:45:
2c:07:11:c0:22:5a:14:09:a9:82:fa:e9:69:e8:ba:
cd:b2:58:fd:ff:68:ca:76:c2:e0:e1:bd:d4:98:e0:
7b:30:f9:e2:52:d7:f2:47:0e:36:f9:70:6f:27:15:
5d:b7:4a:62:52:34:e3:6b:a6:6d:41:ee:33:51:5c:
07:61:07:1a:a3:ef:f0:6f:be:a4:5a:b4:9a:39:a1:
1a:8e:23:75:fb:55:65:0e:cc:f8:a0:08:cf:43:f3:
17:a0:3b:cd:1c:b9:e4:f9:d4:5a:a6:30:31:34:06:
57:07:f2:b8:04:d6:8f:83:9c:58:a6:cb:15:1a:c6:
e2:66:05:42:22:6f:22:cd:6d:38:23:77:5f:21:91:
18:e1:db:aa:7d:33:fa:af:98:7b:65:b5:e1:10:6d:
ce:98:d8:09:f3:96:ee:8d:45:37:2f:ad:30:7a:5c:
ed:3d:4b:d1:7d:cb:33:f2:ab:f4:be:03:2b:8e:d2:
97:c2:d7:a6:6d:d4:ca:4e:40:5b:78:86:10:42:58:
d4:e2:3a:3e:fc:a2:43:0b:da:a1:c7:4b:31:00:3a:
b8:5a:a3:80:59:86:f9:dd:eb:25:41:99:2f:6d:34:
c9:de:fa:72:4f:e0:8a:5e:8a:24:19:bf:62:d7:83:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:21:7F:6F:90:AA:02:AF:18:0A:17:37:CE:60:A7:E3:51:D4:B3
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d6:84:50:19:e5:81:3b:2e:53:4c:3f:db:40:08:81:2c:98:
07:86:74:3d:7c:78:d4:65:34:8a:f5:c4:2c:ef:c6:a7:8f:47:
3d:5c:b3:ea:39:7a:2b:31:eb:31:02:e5:50:b9:e7:8a:c6:53:
4b:c0:71:4a:92:5d:75:2d:ec:71:d6:b8:78:37:80:4d:df:90:
c7:1b:c9:e6:c1:4f:3d:c8:f9:48:1b:d7:38:80:5c:b4:bb:0a:
5f:6c:f2:ed:2c:58:10:87:48:f3:bb:ca:bc:9b:fa:26:75:3e:
cb:23:97:71:f3:17:84:8a:22:d2:ec:88:74:90:a9:9a:9e:12:
18:52:11:13:b9:b9:66:bf:6a:55:02:e5:0b:b3:8a:53:bc:9b:
2b:41:6a:1b:d0:a2:0e:92:4e:56:72:40:22:c9:31:16:a1:d2:
ee:bc:f2:99:4a:ec:4c:46:89:35:e5:c5:3d:17:6c:09:fc:53:
e0:a2:25:33:ef:47:e5:3b:bc:2e:2d:5c:51:fa:a1:b1:fb:9f:
26:15:a3:3e:90:f9:99:65:e1:8e:dc:16:01:aa:73:ec:41:54:
a8:3c:58:29:9f:84:b1:95:a6:3d:61:53:7a:97:bf:bf:49:df:
bd:3d:a7:7c:9d:0d:15:26:23:37:82:04:18:9f:92:62:24:ed:
8a:f9:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:54 2026 by rpki-client