Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: uTAYh8zIR3herUjqhLw6YVEUZqo4yLXSkMHfa+ZdqrI=
Subject key identifier: A7:04:D5:45:D4:C9:C5:E0:6B:BB:7A:9E:B1:16:7B:D3:96:E6:09:E1
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 019D27A8AB2F9EDBFB24C44E4EF41F22F2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 06E4
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: weXQO5Zhks4AnxcOCqcdzSxxPsw.roa (hash: ppnHsXhOiw58x/xYY5Ym72woaS7PHjIfKEtOPYGXh1U=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: uibxFGKZmp7ENb4+irLPq4ng/QsP0D2v0I/8ELW0XYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ab:2f:9e:db:fb:24:c4:4e:4e:f4:1f:22:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=a704d545d4c9c5e06bbb7a9eb1167bd396e609e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:54:73:bb:8d:ee:15:99:1f:c1:cd:5d:d3:
12:96:70:04:56:c5:ac:93:5f:f0:24:aa:63:2e:4b:
34:2f:a5:ad:99:63:58:bd:b2:b8:0e:2d:48:54:f5:
c1:3a:8e:5c:5d:e5:57:2c:8d:ba:69:49:c7:d5:4f:
b3:35:33:f4:07:46:fb:08:14:18:34:2a:5f:a7:fd:
69:a7:db:08:e5:27:fb:7e:81:03:4e:f3:a4:7e:5f:
d3:a4:43:a9:f6:94:98:f7:39:d6:97:4e:20:d9:9c:
07:e9:21:85:a4:07:ec:3e:b3:3e:1f:30:17:08:3c:
1f:e6:4a:7f:a4:de:1c:fa:d4:a9:f2:bf:73:cb:93:
73:ec:8d:d6:ae:17:a6:d2:67:35:f7:1e:26:95:ca:
9b:68:10:31:f7:71:c4:f4:a5:f1:84:bb:4d:a6:e3:
bb:2d:e0:30:af:01:0d:e3:c2:77:a6:f1:d1:ea:a5:
22:46:05:15:9c:19:09:b4:b8:6f:1f:72:40:71:ab:
2e:8d:25:82:7e:9a:ee:61:a3:ca:04:26:26:27:35:
fc:0b:a5:6c:c7:01:4e:f6:ca:5b:1c:e6:d1:00:3f:
37:76:df:34:5c:dd:18:1b:cd:33:4c:c2:f6:7d:52:
f8:6a:1f:ea:92:a6:95:0a:72:94:52:f4:e7:92:10:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:D5:45:D4:C9:C5:E0:6B:BB:7A:9E:B1:16:7B:D3:96:E6:09:E1
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:05:78:44:31:49:5e:03:8a:ed:67:d5:9e:51:5d:2c:9f:d5:
99:97:b6:b1:1b:19:75:c2:df:6b:cd:2a:81:82:e0:17:7f:12:
a0:dc:00:68:b8:88:80:70:1a:df:aa:4c:94:34:73:24:18:65:
23:18:fc:45:20:97:ed:34:8e:63:7f:0d:29:ef:d7:c0:6b:e0:
49:3b:0c:ca:b9:45:c2:d5:5b:e4:f8:34:dc:dc:83:be:8c:45:
ee:56:d3:19:29:10:2f:a0:4c:9b:e7:e4:fb:d3:67:0d:a5:60:
95:27:60:ae:4b:4f:e0:4d:b5:eb:bc:65:7d:b5:13:67:db:f8:
84:ed:c9:46:ae:cf:8e:d6:9a:b2:87:e5:a8:9f:1d:63:c0:1d:
70:95:ea:10:c8:3f:c7:21:b4:a1:ef:ba:25:e9:8c:f3:59:a7:
1b:99:be:3c:cd:f7:a0:ec:d1:e5:27:8d:c2:01:d2:b8:4b:16:
69:2f:a2:aa:39:33:20:21:d4:a5:dc:68:8e:e6:ce:dd:0e:0d:
d4:03:02:86:70:83:c0:79:ca:ff:99:c1:a0:db:8c:89:2d:01:
c8:a0:37:e6:08:90:43:6b:9b:cd:a5:a5:67:1f:fe:a5:5d:2b:
a3:60:29:79:2b:6d:f6:81:cc:7a:b6:74:83:d4:70:24:a5:5a:
16:8c:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:09 2026 by rpki-client