Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier: 0XKhq9Q8ZGWDT+IGaSHVgUQz4TeGQjmvVdhNTIStjdY=
Subject key identifier: 1C:93:C6:80:AF:CD:0A:E4:24:A0:E3:EF:CA:50:F4:67:6E:8C:78:1F
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial: 019D2704883345C4E7E8FBDE208CE7FD83F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: qDARkh1OdijVPvu/0SaMakWRvwGgJkyQfywqfhIct50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:88:33:45:c4:e7:e8:fb:de:20:8c:e7:fd:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=1c93c680afcd0ae424a0e3efca50f4676e8c781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:11:f1:80:0d:46:0c:ae:e1:13:cc:fd:d9:
6b:81:b1:4d:35:3f:e0:71:bf:30:84:c6:47:53:52:
df:d9:7c:82:63:cf:e4:2c:ba:bc:2f:71:b0:ec:2a:
9a:c1:f8:31:ff:f2:37:85:ce:66:3e:0b:7e:db:fe:
1f:1b:7e:71:76:d8:f8:71:f5:1c:d6:8c:3c:56:62:
c5:f2:b5:60:1a:51:4d:a7:ea:cf:ea:1b:f7:d6:72:
53:83:ab:3d:a5:ee:dc:ad:08:09:0d:ac:a0:c1:bd:
02:e6:22:d4:90:53:40:8c:95:c6:6d:f3:1b:16:61:
0b:20:21:24:bd:83:cc:6d:3f:29:0c:9b:75:cd:19:
ff:00:8b:a6:25:4b:65:82:bd:67:80:f7:06:2f:b7:
94:8d:19:f3:09:bd:78:31:05:d6:f8:57:01:4d:0b:
d9:aa:e8:9f:cd:ca:f1:47:7c:e7:27:d8:58:1d:74:
a4:f4:46:c7:6f:9a:df:95:7c:7f:90:e7:24:9a:20:
a6:5b:0f:0e:9f:75:d5:75:9a:03:b9:e0:46:0f:52:
0a:10:f6:c5:58:90:2d:07:69:cd:ae:22:84:37:ab:
8c:e4:03:6b:56:63:f8:ee:38:63:c5:05:8d:65:79:
e4:12:db:b2:61:75:b8:63:4a:b6:18:ad:a9:fe:61:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:C6:80:AF:CD:0A:E4:24:A0:E3:EF:CA:50:F4:67:6E:8C:78:1F
X509v3 Authority Key Identifier:
keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:ce:f0:2a:0e:23:52:f0:c6:d5:b4:53:ac:bd:cc:25:dd:
73:57:01:95:41:1f:50:0e:24:f8:b7:4c:44:81:6e:a8:69:74:
2b:bd:5f:b7:e2:49:89:ba:2d:8e:a1:f2:94:6b:a2:13:65:87:
2b:d7:f4:1a:a5:f8:15:44:4b:41:6d:bf:7a:fc:3c:b9:3d:e5:
29:b6:e5:1d:6a:48:c9:fe:2a:67:39:f5:0a:9a:e3:30:a3:ad:
8a:22:4f:f6:87:26:9a:71:5f:27:94:a6:23:93:cf:02:9b:66:
83:34:73:d4:31:fa:f4:81:a0:48:df:80:87:6b:21:7d:25:48:
5d:3e:ad:d9:aa:24:8a:1d:7b:56:9b:59:c0:a8:d1:49:c8:90:
51:4b:e7:53:43:fa:59:fc:c2:54:67:27:08:74:07:41:3a:7d:
cc:8b:7a:1a:cd:95:e7:c1:34:d6:76:e3:9a:3f:89:1e:60:9d:
a4:be:3a:a5:ca:07:20:3b:e4:f9:85:4b:69:e9:09:04:e3:6d:
3a:7a:fc:ee:83:33:a6:c9:71:00:9e:57:c2:f2:54:b1:f8:af:
51:df:e0:1f:eb:c3:b1:77:29:f5:dd:b5:47:60:5b:92:78:9f:
2c:6a:0f:b4:47:b9:b9:08:36:81:1b:68:f2:b3:66:97:9e:b1:
cf:b3:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:12 2026 by rpki-client