
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: 7jMFW+Nkt990WpTcZ8cK2dea3P9RsVVyF6E+v0iWmjg=
Subject key identifier: D5:8B:9D:D2:C2:B0:D1:E6:2B:F5:45:CC:65:19:95:62:E1:B6:34:E0
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 019D2628955DF6FC771412D7CC255B2D6648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: JNAnR3OpCBmqbjcaQCFbgyf64p8.roa (hash: j0YiHlaOdUim9VJP58wic2ZTEsjQbXoSPaCpDLTojSY=)
2: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: kWs/5kIRVB3u2pm/hcH6HAFsQmYQ/Qy/BHbg9sCnYpk=)
3: n7pDY_8zMb4XywLOR-Gyk8ZEh6Q.roa (hash: CUzjuBkLmCl6WtXKZbLolmS3oXPaSaat/iqu2Jp6Roo=)
4: x85xaclh_I5fag7LOhEkjo3jhMw.asa (hash: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:95:5d:f6:fc:77:14:12:d7:cc:25:5b:2d:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=d58b9dd2c2b0d1e62bf545cc65199562e1b634e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:78:90:ca:3a:06:58:63:e8:56:25:b8:85:
8e:7a:57:9c:c0:3b:cc:15:49:27:61:11:2c:bf:91:
5f:2b:ad:df:d4:b6:55:c8:45:b8:2e:3e:87:73:07:
93:74:a0:df:53:37:b5:6d:50:a3:67:ca:5f:e3:82:
de:3b:5f:cf:a4:31:9d:0d:0c:29:c1:59:3f:3e:e1:
90:05:88:a0:62:f9:8c:5a:d9:48:8f:29:90:d0:75:
9e:af:5a:a1:bc:87:7d:01:07:de:01:58:28:bb:94:
60:88:f7:c9:56:ed:e6:7f:5b:fe:84:4a:d4:70:5c:
38:05:9a:68:56:35:27:35:d7:d2:c9:74:6e:3c:e1:
99:48:6f:c4:da:61:ac:33:f7:1e:83:3c:50:cf:f9:
9e:46:b3:c7:02:dd:3e:50:80:88:86:ee:3f:7e:6e:
55:68:38:2b:5b:0f:f3:c5:61:e2:2f:de:a2:62:79:
9b:1b:92:e5:3c:50:46:96:e9:4d:71:3f:03:53:d1:
bf:2b:9d:2e:27:d4:65:0b:4a:dd:d2:05:c2:e4:cc:
52:42:1f:15:c5:7b:e3:6f:54:d0:2a:1a:0f:41:6c:
78:68:48:f5:71:14:8e:05:e3:e1:f7:34:4a:79:85:
16:10:9e:d0:91:0f:44:2d:6e:94:56:8b:57:e6:7a:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:9D:D2:C2:B0:D1:E6:2B:F5:45:CC:65:19:95:62:E1:B6:34:E0
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:a8:19:e0:46:26:72:66:f3:f4:34:35:f6:26:52:a4:c6:
5c:88:10:50:ff:50:a6:9b:bd:0e:88:78:e1:8e:e8:99:72:2e:
da:54:29:b8:4a:df:20:6b:31:dd:b3:21:71:eb:ac:ec:f1:ad:
44:86:87:52:c9:cf:3f:39:45:7a:b9:5f:01:a5:71:36:3e:4b:
82:b7:75:55:44:8e:b2:56:dc:15:d8:5e:5e:81:53:5e:79:13:
64:ba:69:23:bd:f4:71:d6:38:79:a6:7c:c9:f1:1a:82:ed:56:
b6:64:1a:10:4f:83:e6:f3:5c:18:ec:96:2c:bb:2a:f1:22:83:
af:c6:21:33:86:3c:ec:0f:58:98:05:c4:22:a2:de:6b:10:70:
19:50:19:44:e6:6d:89:7f:38:5f:6f:75:d8:4a:05:4b:e3:ff:
af:b9:e8:fc:1f:72:3c:e0:69:c0:e1:0b:ce:fd:b1:75:21:c3:
e8:74:2f:d7:33:cf:c2:b6:63:25:53:aa:3d:de:0b:15:01:d3:
87:b0:70:20:15:dc:0b:74:0a:7d:e8:1c:d9:cb:d5:cf:d8:88:
e1:05:56:ba:3d:95:e7:41:cb:8e:45:4c:bc:70:b7:8d:43:a3:
67:65:f6:a2:56:a2:f8:14:f3:55:43:95:6d:7f:3e:8c:14:c8:
64:41:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:11 2026 by rpki-client