Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: 4FnbJyMjEmcbERUc2QMbM0nu2j4Jah0f/pWSD0atsE0=
Subject key identifier: FA:0D:C3:D0:03:38:4E:10:5F:46:09:D2:A6:2C:E8:0D:31:44:E4:73
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 019D2583FB334EE1F37F9A79CB54EE68CAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 15:01:39 +0000
Manifest this update: Wed 25 Mar 2026 15:01:39 +0000
Manifest next update: Thu 26 Mar 2026 15:01:39 +0000
Files and hashes: 1: 1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa (hash: WkyuSbuUrQsBUNZKIgd/RxLYyL6Wt7Nlixkah71KQxI=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: J9h/iDKQTGswob9+T7tcfyCY519P0qyKTRjevJhfe9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:fb:33:4e:e1:f3:7f:9a:79:cb:54:ee:68:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Mar 25 15:01:39 2026 GMT
Not After : Mar 26 15:01:39 2026 GMT
Subject: CN=fa0dc3d003384e105f4609d2a62ce80d3144e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:f1:3e:eb:65:e8:9c:65:e3:44:96:95:86:
8f:6b:85:fe:d9:56:d4:bb:35:57:ac:ba:83:eb:bb:
c8:59:4b:d0:eb:b5:f5:2d:98:48:d8:67:f4:77:6f:
c2:be:ba:a6:b4:39:67:1f:ce:05:fe:dc:aa:9a:68:
81:23:a2:b1:d9:1f:5c:25:d6:6b:0b:9e:a9:26:99:
f5:54:a8:72:00:3d:ca:18:ea:de:c8:a7:da:f7:ee:
91:95:1f:e2:89:d0:44:7c:f8:82:71:c7:2a:8b:2d:
46:af:5b:cf:78:c7:b6:d8:34:69:23:72:89:3c:48:
74:3e:98:ef:77:05:a4:36:5a:04:aa:f3:2b:06:0b:
ad:9b:5c:13:ef:20:49:04:99:71:04:b1:02:f2:e4:
57:56:67:b2:05:2c:58:df:ea:81:18:13:5a:9c:66:
33:bf:67:cd:94:2e:37:0f:d9:27:04:93:76:c6:40:
12:ff:31:a4:b9:0a:85:a0:69:21:77:52:cb:ac:68:
31:d0:2b:05:80:b1:a6:ff:75:d7:58:77:ea:12:2b:
c2:f1:fc:97:43:ac:4e:f9:be:e3:bb:21:62:32:d4:
6c:0e:26:6c:e8:eb:88:43:ec:dd:47:dc:7e:34:11:
ef:46:5c:f2:97:4b:a4:78:35:65:80:ff:72:07:15:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:C3:D0:03:38:4E:10:5F:46:09:D2:A6:2C:E8:0D:31:44:E4:73
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:77:c7:76:1e:80:d9:2c:84:a7:a4:88:ae:7b:69:69:31:9e:
87:ab:d9:ca:a8:70:9a:32:53:b3:1a:b1:38:d9:ba:96:fb:24:
10:60:9a:ca:37:d4:2c:29:0b:db:1c:de:b2:88:e8:40:c5:cf:
ad:b0:bd:db:7c:ab:0e:bb:b4:fe:71:b6:69:cb:ed:0c:56:9d:
bf:d7:f3:17:8b:ff:77:d7:7a:23:15:4b:61:96:d1:34:87:54:
eb:73:1f:cd:1b:8c:e0:c5:c0:ed:bd:65:97:65:51:ff:6d:aa:
db:72:34:e8:85:21:37:6f:94:5b:30:29:c4:f8:85:05:2b:24:
51:ad:6c:d8:9c:cc:5f:90:c3:82:fe:f6:9a:78:2f:17:e0:07:
85:d2:df:cc:b3:e8:63:f0:20:e8:de:71:f8:59:ef:af:94:9d:
82:6c:63:74:9f:b9:46:f9:a1:37:ad:54:92:82:4b:a1:1e:49:
ec:91:24:82:39:8b:90:e4:e8:7f:8e:64:c4:10:52:f8:70:f1:
20:61:7a:13:cd:26:1b:29:b4:19:92:2a:22:c1:df:da:1d:bd:
72:eb:4e:95:c0:44:34:80:f8:27:44:ab:dd:d2:04:f5:ee:78:
e3:eb:6b:b6:07:68:c8:18:1b:94:a2:93:75:40:be:9e:e1:85:
8d:14:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:52 2026 by rpki-client