Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: h9wrBYHjN8Z9ILRcCzI+VItopssoKTWYSxT47R/B8FM=
Subject key identifier: 73:6B:B9:1A:46:94:66:71:9C:55:0F:5D:F4:D1:3C:2B:7A:89:E2:4C
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 019D27A8C490C8558674FF2BB9B9EE9C5AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: xxZ/LxfY1b5nxbTKhjC0pPkdoq9lb7Uj/SLXRfnyiNM=)
2: yh8RCY-bj175I6qO1y_qoa8Z7Jc.roa (hash: 4zdPWYLlDQUfMdRZQkA+GGAtm8jeXR0HD9R4ibPVvfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c4:90:c8:55:86:74:ff:2b:b9:b9:ee:9c:5a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=736bb91a469466719c550f5df4d13c2b7a89e24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:ba:23:14:aa:f9:3a:61:86:05:6a:1a:0c:
fc:c2:e0:38:15:f1:5e:49:01:c2:bb:97:92:88:f6:
d7:97:1a:83:35:4b:df:79:af:25:23:38:2b:6d:13:
7d:7e:bf:63:9a:42:17:9b:a5:ed:be:ba:95:ca:3f:
3d:fe:da:29:15:0d:b5:70:62:38:4a:92:dd:dd:7a:
41:7f:d5:12:02:ae:f9:f5:ea:57:4b:8e:35:00:df:
b1:e4:5e:89:ae:46:9d:3d:bc:6e:b9:05:75:46:6e:
4f:bf:50:e9:c8:5d:ce:c9:bd:a6:47:f8:ef:e2:1f:
5b:26:01:00:9e:5f:2d:83:20:a8:48:41:33:7a:29:
78:c2:ff:54:5f:f3:fb:ac:51:dc:db:fd:5a:6e:8f:
62:7a:a5:91:04:35:4f:98:c6:26:f8:62:7e:ce:aa:
d2:e6:38:8b:c0:b7:94:f0:c8:e1:10:d9:57:ec:e2:
05:ef:0a:82:31:04:0f:f4:14:54:64:80:3e:d7:cd:
5a:14:cf:e9:51:b3:b2:e6:3c:58:c6:ea:29:22:25:
5b:b1:9e:ab:37:e0:08:d8:70:c0:e5:11:d5:2d:6d:
d0:58:22:1f:fe:e1:55:29:b9:ae:c2:db:8a:ac:ca:
15:1f:a9:84:6b:99:97:9d:a9:c4:d4:20:eb:33:7c:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:B9:1A:46:94:66:71:9C:55:0F:5D:F4:D1:3C:2B:7A:89:E2:4C
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:23:ee:b8:9d:13:4c:cc:dd:d5:01:a3:49:95:95:5b:2f:
0c:bd:1b:d3:39:8b:56:26:ed:1d:91:e3:09:3d:22:5d:68:af:
5d:01:4d:cf:45:62:9f:37:b3:04:5e:98:17:0f:eb:aa:07:40:
51:23:5a:c7:5f:af:13:38:77:5f:22:40:a5:ae:2a:da:07:be:
c9:80:5a:72:62:bf:86:0c:47:36:5b:40:8c:a9:4d:6e:fd:17:
85:84:41:fa:10:33:e9:81:6d:60:68:b1:37:de:5b:55:c0:18:
45:18:5d:5d:05:86:06:a9:bd:d3:ca:68:89:ff:e7:d8:1e:a7:
cb:bf:f0:61:fa:51:47:93:5f:ae:57:f6:1f:87:4d:3b:ed:f3:
dc:ea:5b:c9:59:dd:c7:36:28:fd:f4:cb:dd:20:c5:c2:4f:ca:
fa:4f:24:94:c5:cd:bd:cd:5b:04:ec:0c:f3:61:3f:2b:66:88:
55:39:18:d3:1b:fa:4a:b6:d5:b9:1f:60:f6:c7:2a:d7:c5:43:
63:19:63:ed:d3:03:42:7e:6a:62:63:b0:da:48:e1:71:b3:e6:
44:8b:9a:29:70:b9:3f:49:2a:43:24:d0:d2:b1:ea:0d:8a:c5:
be:7b:4f:39:1e:79:85:8f:b3:bf:00:48:ba:c1:8c:fa:b4:9e:
e8:ae:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:48:59 2026 by rpki-client