Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: zp8VFXcp7rTZF3w0LPeS0gXQg6zJkGilc7Sg6TSzvS4=
Subject key identifier: BE:04:B9:AD:4F:2A:70:DA:E5:4D:2D:23:52:C7:C4:9E:2A:06:71:25
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 019D3909C5DC21B781987A32E33D460584F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0F59
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: KA+WpJ/FOaYNH9fgYWSPxusGs0C7h9QaxbdG81noMdY=)
2: _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (hash: FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c5:dc:21:b7:81:98:7a:32:e3:3d:46:05:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=be04b9ad4f2a70dae54d2d2352c7c49e2a067125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:91:c7:f0:64:83:71:aa:fa:fd:3b:d8:08:
70:77:f9:92:ab:6f:df:9d:5e:08:b4:ae:d6:76:49:
e6:db:60:7e:89:0e:95:0c:a2:8a:52:c9:e0:5a:c0:
1c:28:ff:3c:37:46:d7:16:79:bb:8a:dc:bb:c6:c7:
8b:61:14:2b:08:da:aa:fb:ac:06:13:69:ef:bc:23:
0e:2e:ca:a4:dd:19:4e:3c:98:35:2c:0a:aa:8f:cc:
8b:e5:c2:5f:fe:f5:2a:35:8d:46:b4:09:d9:48:5d:
97:07:b1:d3:e8:c7:c7:f8:53:34:fc:c5:54:dc:e2:
d0:78:50:03:fc:1d:17:7a:75:66:3c:2f:68:7e:a7:
6d:86:ae:5d:90:7f:a0:83:76:9f:b4:c8:62:1e:49:
0a:77:a6:97:c7:76:16:54:47:7c:7c:01:2b:64:d1:
cc:e7:30:79:76:8c:d0:1d:55:f0:f0:58:6a:6c:0a:
9a:a3:6c:78:93:06:09:e7:c6:90:be:c8:93:f7:25:
89:35:9c:50:9e:13:6d:1c:0d:4c:fe:b4:4a:ac:1e:
a3:4d:fe:c2:b5:8e:bb:7b:15:43:d6:ec:4f:1f:b4:
19:5a:64:a5:bc:9b:f1:f3:f9:0f:6b:4d:ae:57:4d:
80:29:52:9e:9c:96:bc:c3:0f:68:7a:0d:94:f6:c8:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:B9:AD:4F:2A:70:DA:E5:4D:2D:23:52:C7:C4:9E:2A:06:71:25
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e7:b8:c5:da:43:a5:25:0f:fe:c1:6f:e3:04:f1:70:95:e7:
51:b0:6f:c0:3c:00:9d:6b:ca:a8:a0:f2:e0:1d:c5:b2:f6:b2:
ce:f2:2c:67:71:fc:c8:e7:1c:27:0d:5e:7d:38:f0:4e:a5:13:
aa:35:30:c5:83:16:ad:c3:f3:aa:fd:3d:c9:e0:2d:03:98:61:
29:15:14:67:c1:df:3b:d7:78:a9:81:7f:95:93:63:f5:d6:3c:
cc:ca:cb:0d:74:10:fa:5b:44:6c:e6:d9:53:37:5d:5f:34:80:
58:9d:f0:21:0c:8a:c8:a6:f7:8e:32:75:e0:81:a6:40:7d:58:
1c:9a:dc:bd:2a:dd:5d:f0:47:15:57:7d:d9:19:85:f9:aa:9d:
81:60:f2:bd:04:e4:64:d1:87:be:5f:d2:be:c7:6a:d3:2f:1f:
ee:08:c1:4c:c9:2c:bd:f7:bb:11:c8:97:3d:7e:67:6f:bc:05:
c6:46:54:a0:66:70:a0:5a:d9:12:ed:5e:24:cd:e9:52:92:be:
c2:a1:d4:72:4f:a0:86:dd:a1:dc:6a:ca:f7:44:a3:e0:16:54:
1e:d9:0e:d4:db:17:48:b6:81:68:21:72:50:c0:d1:46:40:e3:
ce:76:26:3d:fb:42:04:e4:37:82:84:b7:9d:7a:24:c0:9a:e5:
09:24:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:39 2026 by rpki-client