Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: j3yXm0oKR7NWv/m8FdB6+wZTlXPU93DD17cwvL6S3lQ=
Subject key identifier: 9D:5A:70:45:7A:79:EE:22:B5:03:1D:2A:A4:96:83:BC:9C:F2:65:54
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 019D37891B1311AFF37043BE305046751B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 01E4
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: E5gzQs+6mF+h6UrCcYdsbCB3rMoOs7gMUTiIIWjQW4o=)
2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1b:13:11:af:f3:70:43:be:30:50:46:75:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=9d5a70457a79ee22b5031d2aa49683bc9cf26554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:7e:d8:d6:b0:7c:c1:3b:8c:98:0b:cf:9f:
e6:39:79:17:f3:71:2c:1f:02:9f:bc:d6:46:26:e2:
b4:e8:ff:75:ad:29:88:54:29:42:a4:d8:c7:4f:19:
24:05:f7:b2:b7:a5:db:c3:1d:b1:f4:c5:ab:2a:33:
f9:8f:73:5e:7c:c8:9a:a4:1b:dc:44:6d:b0:e3:00:
bf:61:ee:ec:98:fe:9e:a5:b9:f4:d9:47:8d:99:4c:
aa:a3:fa:eb:9a:90:30:38:f1:5c:00:a9:72:5b:79:
1d:6f:40:b8:13:cb:8e:a5:c1:9d:60:4d:c8:44:75:
89:26:a1:4d:77:46:3c:6c:89:43:8b:b0:c1:9f:ef:
8c:96:39:64:6f:c1:18:98:d1:8d:85:5a:85:fe:ce:
3a:d9:d2:5b:f5:05:75:c2:df:67:1e:3a:71:a0:b6:
44:b7:90:94:58:d8:45:1e:f5:bc:c1:89:c8:02:0b:
7f:66:02:b3:18:6f:c2:b3:0d:55:08:95:98:ba:ef:
8d:a7:98:66:bc:62:bd:6a:27:60:80:8d:06:a5:f2:
0d:6f:4e:d9:ac:5c:12:d0:a9:02:7b:84:d2:b4:f9:
9b:3b:29:45:cc:55:fd:75:2e:82:90:55:78:2e:2d:
84:1d:72:44:c2:b2:af:e3:f1:8b:92:85:f2:f6:fb:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:70:45:7A:79:EE:22:B5:03:1D:2A:A4:96:83:BC:9C:F2:65:54
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:32:3b:4a:e5:64:4d:7c:15:bb:3a:d2:3f:35:78:eb:31:9e:
ea:30:2b:43:b0:6b:e9:bb:8e:ba:1a:e9:2f:7e:54:75:ea:03:
c2:89:d2:17:c0:38:26:52:75:d8:80:31:2f:56:5c:28:07:4d:
a6:9a:d3:7d:3a:3b:e4:7c:47:29:bf:21:ea:78:72:eb:b0:d2:
4c:09:cc:31:33:27:f7:ed:eb:12:38:d8:3e:ab:95:fd:d2:19:
e9:3a:bf:c1:a5:8d:9c:35:2a:fb:99:9e:4c:01:96:20:44:75:
f8:07:07:6c:20:d5:c4:2e:64:0e:5d:0e:49:6e:7b:1b:96:e9:
8e:3a:c2:a4:f8:1b:44:78:c0:cf:73:2c:48:c5:6f:c4:d7:14:
66:06:92:92:56:ad:87:4c:30:89:17:70:9a:3d:f3:41:e2:4e:
e0:4a:08:1d:f0:b4:b3:45:f7:c9:5e:70:23:f0:cc:c4:98:a9:
fa:55:ad:74:30:b1:3b:b1:27:8d:2e:8b:c9:4c:23:64:99:f2:
73:b3:fd:76:ca:0b:83:b2:df:9b:81:24:1a:65:5d:ef:e3:ea:
dd:a3:52:2b:9f:9d:66:87:4c:eb:14:f2:96:27:ac:3c:33:0e:
06:a5:21:31:b0:44:0c:3c:ef:ae:a1:ce:4a:1b:7a:00:9d:45:
18:1f:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:51 2026 by rpki-client