Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: epxLw/S+XMZbJhumIfXYO0qB6d63PIn13RM2n/4ats8=
Subject key identifier: D8:6C:53:57:C8:D3:57:3F:5D:C6:98:67:77:CB:F8:C6:26:18:BF:B5
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 019D37BFED61A43A3D43F85B5034DF96444A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 15D5
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: LMW0aePUvQsZOt8hq5DaRjAcjS4.roa (hash: gkvc2HFCiL+UIBjgtjN3d9pJgU/K71FhIXqf8pPSFiM=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: NYkYuHe/cY5e+GcPVBSdLQe0lCgUkw33C3m0lPIe7fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ed:61:a4:3a:3d:43:f8:5b:50:34:df:96:44:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=d86c5357c8d3573f5dc6986777cbf8c62618bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:6c:b2:89:19:0d:0a:11:64:10:89:73:b5:
77:d0:3b:e0:aa:bb:ac:92:88:d8:9c:9f:8c:70:18:
87:fe:5d:7f:ad:8c:e5:30:40:d0:12:45:14:18:dd:
bd:66:7d:00:d3:f3:94:85:a3:8a:e7:35:96:57:ee:
00:6a:35:1a:26:2b:16:ab:aa:aa:34:a8:78:1e:a3:
8f:09:2e:68:0a:d7:26:c5:7d:a5:98:4f:59:05:47:
e9:68:d9:8b:ae:03:bd:eb:68:a9:6d:fc:d3:99:f2:
84:17:6b:7f:9c:91:22:a9:cc:83:3f:c5:ca:2f:e8:
b1:b6:13:9d:de:9c:77:c2:f8:ca:7e:db:20:db:59:
fd:8f:e3:57:71:38:e2:da:0b:5c:e2:65:57:e9:d6:
26:e5:8b:b6:62:de:21:3f:d6:4c:88:31:3d:49:d5:
48:0c:a4:43:14:1c:b1:93:9f:a8:bc:a8:8d:5b:6b:
50:4f:9e:97:42:77:28:04:36:1c:a7:09:26:09:bf:
fe:b5:de:da:2e:ec:93:77:a5:af:cc:96:6e:0f:97:
81:bc:4e:00:df:26:c4:e4:81:21:5c:6b:5c:1c:4a:
eb:0c:ed:90:cf:49:44:89:89:6c:5f:64:47:15:11:
1e:fe:6c:e4:12:bc:94:23:54:fa:a2:cb:56:3b:b5:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:53:57:C8:D3:57:3F:5D:C6:98:67:77:CB:F8:C6:26:18:BF:B5
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fe:00:9b:5c:7c:55:db:c2:08:b1:36:f6:c0:66:2b:7e:f8:
7b:86:a7:5d:8c:d6:9c:96:b6:c1:0b:ed:1b:7e:31:ea:bc:b6:
f6:34:1a:09:74:cd:29:da:bd:27:91:e3:24:2f:78:ff:6c:49:
33:a6:18:a5:be:9a:b5:e9:9d:98:09:89:32:55:e7:20:c5:c1:
6d:bd:bb:90:ad:1f:7a:c0:cb:04:93:71:18:89:f1:1c:1b:cb:
68:eb:ca:a9:a8:87:e3:86:00:56:9a:77:3e:ff:01:80:90:32:
7d:09:b0:26:65:ff:7f:eb:7f:8c:64:9d:e9:77:24:ef:c2:25:
61:f9:7a:e0:ca:be:ba:13:0d:a4:cb:c4:cf:d0:c2:43:7c:04:
d9:97:0e:d3:e3:80:a2:a2:a6:ff:cb:e0:3a:b1:82:25:0a:b2:
e8:1b:c8:37:bf:69:43:f4:4a:f9:ba:11:a7:16:c3:09:e8:3f:
ef:cd:3d:42:76:52:3d:d0:95:e8:1b:aa:12:54:ca:22:ba:83:
de:12:ce:74:eb:f2:4b:b3:77:6a:1d:f6:1e:ae:54:8f:c7:82:
10:24:36:06:cc:1b:92:56:36:07:dd:e2:7c:e8:94:ef:8b:f5:
d0:be:3b:d2:4f:66:6c:80:8e:1c:20:12:b4:ad:ea:37:6c:1f:
fb:70:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:09 2026 by rpki-client