Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: zAiqS7liRiC0DA8nN24WNLN1MgU2847yTFvvIEXbRQI=
Subject key identifier: 45:C7:4E:61:57:47:4F:A0:D8:F7:94:2B:92:0D:84:3D:E7:23:65:63
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019D2695DE9444E1BB492FEFC182E901840C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 075F
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: T/8fdMjbtvQUykT0EiWKGXuvUEr6s5ot/tLj2T9P9QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:de:94:44:e1:bb:49:2f:ef:c1:82:e9:01:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=45c74e6157474fa0d8f7942b920d843de7236563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:85:65:15:cf:29:0b:8c:f0:58:f4:02:97:
a7:49:92:51:06:c3:73:9f:f0:6f:b7:9f:b6:27:11:
48:5b:49:77:2c:5b:2b:8e:39:33:15:52:0b:66:89:
5c:1d:80:85:eb:94:a7:6b:58:b1:ae:c4:a5:e8:92:
ab:e9:5e:1b:b5:8f:b5:d0:0d:15:55:f3:77:8c:0d:
d7:1c:be:71:d5:e5:68:2a:d4:c2:50:0a:7c:dc:a1:
d1:34:4d:c7:61:22:17:35:84:20:26:e4:0b:b1:76:
b0:f4:5d:66:cd:7c:5b:2d:72:94:39:4f:fa:c7:23:
a0:58:60:ef:d8:3f:ec:3d:22:33:3a:f5:9d:18:93:
3f:be:54:b2:67:52:ea:d0:16:5a:f5:dd:8c:76:78:
a4:70:9f:ec:c7:35:79:85:bb:7e:90:0a:e8:57:d9:
80:61:12:bc:bb:7a:3d:2e:c1:6b:eb:8a:d5:1f:6b:
b7:ad:f2:44:96:99:ab:3b:c7:bb:24:46:65:76:cf:
cf:af:85:b7:79:85:a0:ff:84:f7:de:2e:e4:44:9d:
e7:7a:e3:8d:7b:73:c0:4a:6c:38:92:1a:ce:c5:33:
78:6b:03:2a:15:5d:42:6f:e7:c4:25:77:8b:61:2d:
9c:db:23:0c:7d:9b:a6:88:ab:89:5a:8a:97:28:06:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:4E:61:57:47:4F:A0:D8:F7:94:2B:92:0D:84:3D:E7:23:65:63
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:6f:43:a2:82:89:15:ef:76:1c:b3:0a:da:74:1f:ab:a7:
7e:2e:ba:53:ff:28:d7:25:cc:3f:8d:cf:b2:b8:e0:af:fa:f8:
d0:1e:1c:9d:3c:c3:86:e0:bb:eb:8e:94:e9:f1:94:1b:e4:4c:
c6:ee:0c:fd:2d:e3:ad:9d:59:7c:18:da:13:2d:59:72:2a:fe:
5b:e9:af:cc:1f:3e:bb:ae:61:71:44:06:c7:b0:4b:a6:22:8c:
1d:89:b9:7f:40:da:6b:68:91:71:62:03:c0:05:be:7d:a3:80:
df:67:a1:d5:f3:69:df:a4:df:27:bb:98:3b:86:54:7a:bb:78:
9b:a3:a9:54:fd:29:1b:69:ed:1c:3d:1a:45:47:04:e5:01:bd:
80:1e:eb:5c:23:27:6b:77:b5:60:dc:c3:5b:ce:e9:b5:67:84:
d1:01:cd:69:99:c2:29:c1:51:e2:59:f2:54:2f:2e:8b:ea:12:
a7:62:e7:b5:f8:63:86:ae:af:bc:f4:f6:bc:14:92:9a:52:fb:
c4:db:16:53:4d:36:8f:9b:84:57:7c:57:14:a3:68:98:3f:d4:
5f:77:fe:1c:71:a2:24:4e:ac:6b:a4:eb:6b:82:ac:3e:3c:59:
74:48:ef:2e:26:06:04:0e:29:a9:a7:db:4d:9f:f6:31:01:b0:
36:b4:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:00 2026 by rpki-client