Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier: m2h2XuNwxuuhpNNDEkl985uGXoto9D/lMkxrTWAnT8I=
Subject key identifier: 9C:5F:D0:35:AF:26:E1:20:30:D2:E9:27:1E:A9:5E:16:C3:2F:03:7D
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 019D39E5470B3CCC20504669CF4D309985A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:20 +0000
Manifest this update: Sun 29 Mar 2026 14:00:20 +0000
Manifest next update: Mon 30 Mar 2026 14:00:20 +0000
Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: XUIVG/T84Bi5sSOoK6i3h235nrcjNEWWpRK9vXPyFM4=)
2: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (hash: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:47:0b:3c:cc:20:50:46:69:cf:4d:30:99:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Mar 29 14:00:20 2026 GMT
Not After : Mar 30 14:00:20 2026 GMT
Subject: CN=9c5fd035af26e12030d2e9271ea95e16c32f037d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:17:d1:ec:05:6f:50:19:c5:d5:fa:85:60:
19:e7:f8:a5:63:67:b3:f5:cc:a6:fa:82:76:72:1f:
6f:4f:59:33:b3:cd:a6:17:59:62:8d:ad:1d:12:7b:
63:73:15:3e:17:a7:68:46:09:46:48:d0:34:b0:6e:
0a:19:56:68:e8:de:ef:6f:88:f5:49:13:15:7e:6a:
57:cf:55:9a:2e:a9:88:15:58:af:ac:c7:1d:15:a9:
59:0c:5e:d1:b5:67:d3:df:e1:01:3a:03:31:8f:1a:
5b:ca:1b:3f:20:70:f1:ea:d6:84:76:44:f9:fa:14:
09:6c:0f:74:38:7e:51:15:15:a2:47:46:4f:4a:2c:
a6:a0:99:5f:c7:05:0d:8c:8f:84:e7:80:c9:4f:85:
be:b7:8e:9b:39:a8:34:de:fc:be:05:dd:db:9f:be:
b1:56:ce:bf:13:0b:4d:95:02:39:27:79:e5:4c:ba:
b2:be:fd:8f:ff:a4:3c:27:8a:5b:3e:7c:df:63:c2:
49:4a:d2:3f:17:a9:1e:f1:18:72:75:42:c8:82:30:
85:f4:b3:04:d3:2c:d5:1a:c6:4c:ff:e7:b8:d7:3a:
cc:a7:1c:c8:7e:18:4d:b4:83:4b:b9:dc:9c:49:0e:
c7:b0:ae:88:de:e4:bd:0b:94:e5:8c:a4:93:ba:03:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5F:D0:35:AF:26:E1:20:30:D2:E9:27:1E:A9:5E:16:C3:2F:03:7D
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e5:e0:dd:74:dd:0c:bf:12:33:6c:f8:62:9f:51:f0:42:0b:
4f:b8:f8:0d:4c:6d:18:53:c8:24:f3:a7:81:2f:b4:3c:f6:ab:
90:42:45:4f:a2:f4:1a:d2:2d:3d:df:3b:65:4c:11:74:11:ae:
ae:79:5f:29:eb:70:94:1c:bc:ef:2a:5f:21:41:55:c0:b3:21:
61:c6:23:cb:41:92:60:88:f0:69:a6:72:58:af:23:c0:aa:f6:
52:f1:30:42:01:44:cf:ea:70:4f:cd:e5:0e:46:f3:11:d9:de:
08:6a:e3:65:12:24:e3:82:2e:8b:6f:0f:c6:21:17:b4:66:18:
61:72:89:e9:f7:ec:af:bf:01:08:22:3b:f7:b0:8e:a5:59:3b:
f6:34:0d:bc:d3:8b:62:18:dd:5d:4f:dc:f7:ff:e0:e4:3d:55:
48:8a:cb:da:f5:9b:6c:83:21:46:4f:f9:2e:53:1d:da:3c:cf:
74:83:f7:c7:c4:40:7d:6d:a9:3f:26:a6:b7:be:db:9c:52:fe:
b0:ac:7c:31:a7:87:b9:8c:07:6b:0f:ad:e1:d4:2e:42:37:fa:
08:d5:a5:17:12:75:b6:96:c3:80:98:28:a4:39:74:0d:18:b7:
e1:10:f7:0e:cd:a7:18:9b:ae:3b:02:2c:8a:73:86:a5:ef:7d:
b1:6f:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:42 2026 by rpki-client