Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: cy3SsIzUkplmgVkV2D/vuNqyhu2htQA6THU6BJqek+I=
Subject key identifier: 67:5C:F3:B2:43:E4:81:1F:C1:76:91:89:05:92:11:74:37:74:E4:2E
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019D3752E15C5ABE7E1FDA20A496FF97C029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 1550
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: 447snGtK5v5bp7QH2e67YZa59WbcVjtvJ7cTKP48hIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e1:5c:5a:be:7e:1f:da:20:a4:96:ff:97:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=675cf3b243e4811fc1769189059211743774e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:f5:e2:24:cb:81:19:32:77:ed:8a:90:6a:
ae:be:cd:38:e4:88:75:df:ee:2a:e3:6f:91:26:f9:
eb:f1:a9:7c:98:27:c5:1a:66:89:e1:65:b8:3c:5c:
28:6a:4b:f2:6a:38:29:34:86:cb:da:a6:bc:66:bc:
93:13:2d:71:b0:21:20:a8:10:03:02:6a:b2:c4:e5:
96:f7:55:c7:a8:a1:9d:69:05:60:c1:1c:6c:0f:1a:
4d:20:67:c0:f2:84:d2:1f:d0:c7:83:e1:70:79:90:
93:8d:21:39:52:15:51:73:7c:04:1f:b1:8c:55:97:
9d:1f:9a:8c:07:ac:a6:e2:4f:41:f4:f3:d3:ec:c6:
d5:8d:69:a4:51:3c:a6:9c:3f:dc:f6:29:40:37:02:
a4:0f:d8:2d:8c:32:9d:ca:cd:60:bc:3e:02:92:13:
53:42:53:4d:3e:0e:b0:79:b0:0a:2f:70:d7:3c:65:
93:04:3f:af:6d:3d:fd:c3:7e:13:20:c3:e6:69:2a:
41:9b:c9:50:7f:c4:3e:b7:2c:23:b1:69:22:2f:70:
81:0d:3a:be:72:4a:c7:67:a1:45:41:86:ca:1a:1a:
28:e9:34:26:c9:ef:ca:f5:1c:66:b9:7b:f7:3f:52:
47:8b:57:cc:1f:1b:ea:d5:9a:8b:3d:82:82:35:04:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:F3:B2:43:E4:81:1F:C1:76:91:89:05:92:11:74:37:74:E4:2E
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cd:61:0c:35:ca:97:0f:5d:ca:a5:64:5a:39:19:67:d1:ae:
10:06:d2:e0:61:18:05:16:20:15:89:fa:55:5c:be:2e:85:a7:
23:7c:b2:f0:2d:d2:8f:db:fd:77:f4:d5:2c:59:83:5f:ed:e5:
27:a3:e4:f5:72:6e:ce:9c:24:1d:71:61:b6:6f:f1:4a:15:3d:
c0:88:12:aa:7d:8c:72:72:17:d4:0e:90:65:11:cf:0f:62:69:
d6:28:02:94:30:ab:56:88:1f:e8:eb:62:d2:fd:cb:ab:e4:4e:
14:6d:18:28:ea:6e:25:1f:75:c1:a2:1e:fc:5b:f4:2a:aa:ee:
4b:b0:0f:69:4b:c4:6c:72:5d:9a:be:42:7f:bc:44:2f:62:73:
ef:7e:c7:9e:ea:b0:62:9f:5a:20:8b:c7:3f:78:80:dd:1f:04:
12:56:a9:00:cd:77:6d:63:13:d6:9a:4a:77:db:b3:21:66:ed:
dc:1d:17:fb:cf:1e:74:8b:49:55:71:53:54:c3:4b:0b:5a:05:
88:f3:cc:68:a5:d5:10:e4:ad:20:03:c4:b7:d0:1c:9d:95:9c:
37:c4:4c:3a:ef:5d:d4:9f:b6:3e:c9:5c:9e:86:4e:26:89:08:
9f:b1:47:41:f8:b8:60:6e:9e:e0:e8:e4:ea:60:78:4b:ff:1c:
b0:c4:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:09 2026 by rpki-client