Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: I8jYZxZYk90DZSm3L0/s3w43g49FBC3ZlW6zbgSBsfQ=
Subject key identifier: D8:A8:5F:CA:09:DC:07:8B:5A:26:6E:03:E7:52:09:68:11:54:8A:2D
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019D281683CA7AF54085F8FAFB2C612F3FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 095F
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: ZIaANQFftYC/oE/IhyyRGtxSrmzFjXM1vl2bPbaMvX8=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:83:ca:7a:f5:40:85:f8:fa:fb:2c:61:2f:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=d8a85fca09dc078b5a266e03e752096811548a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:13:c7:02:5b:1d:f3:08:51:66:90:01:de:
75:0d:2f:4f:ad:b6:31:c3:51:de:de:16:36:e7:2d:
43:83:72:7e:5c:c5:eb:32:33:89:82:00:58:13:b9:
32:2e:cf:72:d3:e8:3a:d5:df:f6:b3:21:3d:92:04:
c1:dc:57:4a:c9:56:d1:68:aa:74:7e:39:7c:08:49:
79:7f:5a:0b:a7:76:15:78:47:16:37:46:79:97:25:
da:f5:01:0c:14:f0:b6:e4:f6:36:07:2a:a1:bc:c9:
57:01:1d:a4:7d:a9:ee:b1:5a:88:8f:62:59:fa:f6:
62:69:a6:39:23:37:1a:25:2e:29:37:13:10:4a:9a:
a4:c7:55:cf:76:fa:cf:a3:00:48:8c:2a:68:44:3f:
16:4c:66:67:da:47:c8:ca:f3:d5:ae:63:75:cc:ea:
34:90:e6:5a:41:97:b9:d6:f2:b3:5c:da:1c:0e:3f:
56:2c:a1:9f:e9:06:5c:69:e9:66:1e:54:9c:9a:1c:
67:54:02:1b:88:0c:82:ba:b6:d8:fa:19:d1:25:d5:
5d:4a:2e:99:b0:e7:fc:b0:fa:21:48:a7:cf:87:d0:
1f:98:bd:14:b7:18:06:f7:34:0a:14:6c:7e:78:8a:
28:14:6e:95:20:e0:4b:c0:4e:92:75:b1:69:58:65:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:5F:CA:09:DC:07:8B:5A:26:6E:03:E7:52:09:68:11:54:8A:2D
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fe:77:4b:80:b7:68:c3:45:41:fd:20:5c:5a:02:d2:81:c9:
8e:22:8f:bd:f6:31:c4:d4:86:df:cb:54:9e:69:82:9f:71:73:
c0:ea:55:ad:e9:67:10:e0:72:3b:88:9f:83:9b:72:87:cd:fb:
13:b7:aa:40:b9:77:cb:6d:68:2e:38:62:50:d7:a8:b6:81:61:
4f:0d:20:a2:17:98:d1:e6:f2:c9:d4:a0:25:d1:f8:de:dc:b4:
6e:89:09:6f:0b:bb:40:65:be:06:06:c7:fb:e9:c1:b3:da:15:
6b:3e:eb:8a:1f:bf:6c:6c:2a:5c:00:90:cd:f1:f8:17:76:b3:
da:ad:50:e2:2c:a5:28:c9:8e:c5:32:bf:0c:65:8d:a0:b4:0a:
56:ac:c3:bd:d7:d1:f9:dc:0b:1d:b0:fb:39:e4:db:35:f0:82:
12:35:4f:db:15:34:08:fd:26:db:6a:e6:c3:58:74:00:68:c5:
d0:ff:c4:08:24:92:43:3d:f0:b6:1f:f2:c7:f9:cd:db:5b:25:
d0:11:26:61:ea:2d:27:23:27:30:bf:cb:ad:a1:65:47:da:02:
52:c3:01:f6:d4:bc:fc:ff:b7:95:3e:66:d8:68:f9:c0:4d:d5:
80:b7:9c:c3:5b:51:80:e9:c2:e5:fe:87:10:e2:ba:10:63:ce:
24:ba:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:39 2026 by rpki-client