Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: KZGtaCaFmfX+G05Yvqz9PtVGeUQNPkJAaBHyhKblD+E=
Subject key identifier: 38:34:97:04:92:76:06:07:4C:46:CA:AD:A7:49:A7:F7:4D:C9:1F:84
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 019D27E031D21DFFB25681FC9D8DA7E02103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0C97
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa (hash: VtgvY+pr4Qh9U0W3p9dUNdOupQfVK9H5yjxhbie2llY=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: aAO8UMLA7ijR4we6S3pyiQoeCmHPUbIeAXhmJV5AL+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:31:d2:1d:ff:b2:56:81:fc:9d:8d:a7:e0:21:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=38349704927606074c46caada749a7f74dc91f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:8e:30:51:35:1c:5e:88:a6:a3:b2:db:1f:
41:84:bb:4f:20:00:c3:6f:d7:21:a3:13:c4:b8:fe:
1a:3b:51:fc:7f:e6:01:bc:b4:87:db:13:c5:ab:ce:
66:c8:6b:91:df:f0:8a:29:df:9c:3a:4d:a1:e9:7b:
61:1e:e8:f9:91:81:c3:cf:dd:a1:c6:eb:25:fa:9b:
d4:b7:d4:f6:47:e2:78:25:89:f6:30:05:ab:dd:16:
38:48:8a:57:3c:27:40:1f:4c:0d:a3:19:af:9f:c0:
dd:66:0b:47:15:06:61:0d:dd:0e:cb:38:c3:de:b3:
52:65:6b:4b:9f:31:83:6a:ae:2f:27:b1:bf:96:cb:
f0:35:f3:f6:80:2e:62:ce:ed:8b:08:3c:c1:32:70:
07:14:78:a1:b1:ca:b0:33:e5:71:ca:66:ec:84:de:
f4:4d:ba:42:7a:e5:a9:ce:4c:16:28:74:c6:55:95:
87:1c:81:22:0f:aa:fb:44:30:5b:ab:2d:96:79:13:
36:b4:a0:49:1b:23:4a:a9:2c:a4:a3:fb:4f:a9:02:
64:ca:4f:5c:75:be:24:35:3c:5f:ce:2e:4b:87:54:
f0:7d:e3:94:12:8e:86:bb:47:c7:4f:03:0c:46:59:
91:91:32:52:0f:ec:99:53:48:b6:74:dc:47:f7:f6:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:97:04:92:76:06:07:4C:46:CA:AD:A7:49:A7:F7:4D:C9:1F:84
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:86:86:97:fd:c4:4d:f4:ee:6e:42:38:f6:2e:dd:c1:95:7a:
4c:42:e8:11:b8:36:63:da:9f:14:c8:ad:42:cc:b7:89:fb:a4:
00:82:e1:35:07:62:4a:ec:b5:63:8e:1a:b5:43:b7:06:36:b1:
6c:30:47:89:71:d7:4d:99:fd:ac:b8:ff:8a:76:5d:76:3a:60:
51:68:4e:69:c7:34:b2:13:ad:f2:07:93:5a:dd:ed:6a:9a:0c:
e8:e5:19:3d:51:d4:02:b8:35:48:fb:40:89:b0:0c:4d:ce:16:
0c:eb:9d:30:aa:27:ae:bc:bf:5f:ec:9c:14:33:36:57:fc:02:
8f:7f:ae:16:a3:57:e1:6c:53:35:ae:d9:65:f3:d0:b3:8e:60:
86:e9:0e:2a:13:46:ac:c5:9d:cc:50:76:ca:32:69:ed:9e:c8:
b8:2a:35:7e:63:a4:da:04:7e:97:1e:90:30:ac:5c:0a:95:84:
0e:49:22:cb:18:5f:76:4e:56:66:10:7b:fe:88:5d:43:44:9f:
06:36:5e:c2:6b:ad:79:96:89:08:fd:52:56:e9:b0:4c:1a:6e:
7b:c6:1f:56:2b:66:01:a0:4d:84:fb:71:20:33:5e:dd:8a:b6:
81:0a:14:32:85:32:9e:50:f2:13:85:15:ca:29:5f:98:ca:b8:
f0:fc:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:52 2026 by rpki-client