Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: Svbb8FyZjFSLLDCiIn/YMVRM+hT7aUrxlI0Vnlqbh3s=
Subject key identifier: 48:56:27:15:32:9F:90:07:55:29:A2:CE:B5:56:2E:24:40:77:31:84
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019D33AD2C3DC072F57D032838C9459825B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 0856
Signing time: Sat 28 Mar 2026 09:01:20 +0000
Manifest this update: Sat 28 Mar 2026 09:01:20 +0000
Manifest next update: Sun 29 Mar 2026 09:01:20 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: ccmawIcIgkGs4Q3cG/Dc6+Kka7+MumoUvbANK3eMY/k=)
2: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (hash: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:2c:3d:c0:72:f5:7d:03:28:38:c9:45:98:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Mar 28 09:01:20 2026 GMT
Not After : Mar 29 09:01:20 2026 GMT
Subject: CN=48562715329f90075529a2ceb5562e2440773184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:3b:7a:f7:09:ed:a1:cd:c5:32:0b:cd:e1:
8a:cd:c9:da:26:85:be:07:06:64:02:17:b7:49:a6:
40:ea:46:d7:9e:62:1d:b8:93:b0:c7:bf:de:e6:6d:
af:77:5d:19:cd:08:95:e1:63:40:61:20:b3:bb:97:
a9:dd:07:a6:e8:e7:3d:a8:5e:a0:7a:94:a8:ea:cd:
bc:0c:19:bb:e5:6b:e9:b8:f1:e0:cb:51:d5:b7:b5:
a5:73:e2:43:76:1d:75:a3:e4:7b:68:c8:78:ea:48:
d6:05:fb:bb:c1:bf:a7:72:9a:6e:1c:b2:c9:53:43:
6b:bc:f3:a7:3b:12:21:a7:e0:56:6f:a7:33:ef:81:
92:d2:7f:47:3f:c6:ce:71:8f:46:0d:2e:58:1d:41:
bc:54:1c:b4:b2:87:84:0e:6a:1f:33:c8:c5:30:0a:
6b:1a:56:b8:f7:cc:2a:75:8c:f8:8a:4c:50:d4:5f:
49:5d:75:62:e1:ce:7a:00:2b:ac:5f:7a:ae:32:4d:
f1:d7:ac:20:70:d0:25:5c:db:3e:62:5b:f2:33:a6:
c4:e7:5b:2c:23:00:ca:8a:c7:c3:14:d1:cd:6e:c2:
b4:a6:0a:49:0c:11:dc:05:cb:4c:05:c4:42:cd:f8:
3d:aa:ae:fb:0a:19:76:63:ea:14:90:23:c9:9c:78:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:27:15:32:9F:90:07:55:29:A2:CE:B5:56:2E:24:40:77:31:84
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:f9:0d:5b:4a:c7:d5:9a:bc:50:7c:04:ab:80:5c:a8:ec:
51:30:6f:58:2b:81:f1:dc:d9:5f:3f:56:49:91:cc:2d:9e:db:
bf:7b:7a:e2:b5:b3:67:59:14:b0:67:78:d5:87:43:9f:05:df:
88:2a:16:0b:ec:11:9c:4e:93:04:56:91:9e:ea:a2:88:98:de:
74:d7:0f:23:a4:58:4c:ea:19:9e:a9:1c:f2:74:15:04:3a:ab:
9d:99:a4:99:89:35:fd:4f:04:7e:90:db:fd:2b:fd:b2:17:20:
8b:94:c0:fb:0f:7b:75:a2:46:b3:1e:64:9e:8a:b6:c7:d2:98:
e3:1d:ea:c3:ea:d0:71:7d:2d:3d:06:f5:96:39:34:7e:be:45:
f0:84:dc:74:d9:6b:37:8d:8b:f4:8c:3e:1b:45:67:8e:45:f9:
8f:4b:c5:06:64:b7:a0:24:ec:ae:43:da:06:cc:0d:46:3b:9c:
19:cb:ab:49:6f:84:6c:7f:5b:53:32:3b:a9:28:56:a9:c6:7a:
16:95:18:d3:97:de:a1:5c:fc:84:8e:3a:71:78:2c:e4:6b:44:
26:ef:90:ef:8d:36:5c:f4:30:e5:f6:ed:a4:ea:7f:21:1d:a0:
7e:56:b8:d9:35:41:14:fe:79:92:b1:84:69:b3:8b:ea:42:56:
e5:5e:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:40 2026 by rpki-client