Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: drMB1Qk/LSYguDwSd6z1VRaNc3E0EBQgq5cn3KKoKCQ=
Subject key identifier: 4D:82:56:AF:CB:AF:02:8C:F2:68:FC:F3:8B:E1:20:61:71:6E:4C:E4
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019D37C03FC44A45E28019C4FF92C36ACEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: 1-iaQVGIRiX5iu1fv45oI-_0UAMs.roa (hash: UJsZfJvQEHGoE3GSbiyNR/EqoxSd0S1YeBtQv8m62RM=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: P+F9Td/FfBaXsfIxg7FCbf6HDwdHwX4TC23Cn/xLofs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3f:c4:4a:45:e2:80:19:c4:ff:92:c3:6a:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=4d8256afcbaf028cf268fcf38be12061716e4ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:8b:aa:45:3c:3a:a8:64:6e:fb:c1:69:91:
79:bc:9e:7a:9b:32:73:cb:5d:d1:0e:b0:4c:80:d8:
ad:a1:a5:c3:79:96:f6:21:63:df:99:2d:9a:fc:cf:
76:9f:e2:3e:0c:66:4c:8c:67:3e:52:fc:24:5b:78:
cb:34:3b:fb:ab:16:a0:3f:75:c2:47:cd:b2:62:fd:
66:b5:b7:e9:a2:bd:13:30:43:b9:d6:d4:1f:60:bf:
99:d1:a2:b5:cb:4b:db:c2:8b:c7:81:97:3c:1b:f8:
d8:96:ad:ba:b2:df:39:cd:49:33:76:09:c0:38:f3:
b1:e1:f3:db:26:41:a7:8b:ad:be:5a:7b:d4:47:c9:
23:f5:f0:e4:56:ce:c9:4c:6f:9b:b5:fb:bc:1c:0c:
27:48:f5:46:5d:2d:76:3d:c8:2e:cb:a1:b6:6f:7c:
db:14:7b:8d:09:a8:9d:f8:53:9d:b3:7c:74:ce:8c:
b5:6f:cd:7f:71:83:b6:3f:65:73:36:99:c0:a4:07:
b1:cc:c8:9d:fc:02:f3:4c:ae:c4:c4:6f:90:27:fb:
ae:25:13:36:13:ff:14:c1:32:69:e3:d3:37:83:58:
3a:49:cb:d2:60:29:55:4f:3c:a9:d3:40:9e:4a:d9:
98:00:b6:bc:6a:e1:c4:68:52:7c:bd:68:5b:bd:57:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:56:AF:CB:AF:02:8C:F2:68:FC:F3:8B:E1:20:61:71:6E:4C:E4
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:7b:39:1c:47:ab:7c:58:9a:36:77:ef:b1:d8:76:da:1f:
24:32:84:67:a9:e3:fd:dd:80:39:e9:3f:97:45:9b:cc:47:0c:
47:f5:63:85:aa:f8:50:87:1a:21:07:90:83:f0:32:29:e6:c2:
c9:23:a4:fd:7c:50:4d:55:96:ce:dd:fb:f4:a0:7d:63:78:2b:
ba:41:a2:fa:83:81:ac:09:ad:0f:f6:b5:ad:eb:ec:cd:a2:35:
3d:00:f1:2e:68:15:47:8d:5a:b7:9f:4f:20:14:3e:f8:7b:de:
b0:77:d3:0c:a4:62:f4:d9:88:23:9e:bc:e5:90:cf:05:51:9d:
ad:68:1c:71:c3:17:3a:f4:13:76:d5:cc:64:1f:2c:6a:48:14:
59:18:55:b1:5b:ba:9c:06:b4:36:3d:f3:79:e4:39:20:c1:2d:
1b:dc:d5:f2:dc:ec:88:06:56:6d:a9:f0:ec:8f:1e:e1:22:1d:
61:b4:d3:f1:f9:3f:2b:18:65:ee:37:46:35:62:95:7a:ab:2c:
ea:23:d9:09:ef:2d:61:0e:67:18:72:b1:12:0d:32:92:70:cf:
68:9e:50:89:18:59:a1:1a:cd:54:f5:0b:ad:ca:f6:3e:1a:26:
63:bc:08:78:b9:46:1a:98:42:91:79:de:07:47:51:8a:6e:ef:
3d:86:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:33 2026 by rpki-client