Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: IujEWOwS5kU1yu3GcArEK9jRKZT/Fj6q9ai5Rg4XD9Q=
Subject key identifier: 9C:65:69:80:5A:5C:AB:0A:89:4D:26:01:E9:41:A1:BE:78:62:31:81
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019D2A0488D0586F0E7D8FCA8AEA4CE32544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0960
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: eE8HaVxhorJLXc/MOaNNqDxfVfZ3JyQdubnElFHKSJ0=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:88:d0:58:6f:0e:7d:8f:ca:8a:ea:4c:e3:25:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=9c6569805a5cab0a894d2601e941a1be78623181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:5e:f5:94:cf:91:a7:ee:b5:5a:39:a7:ca:
5b:d7:c0:4c:71:3d:9d:07:b7:de:77:c0:4d:b1:98:
f9:c7:4d:e6:0c:4f:51:80:05:6b:01:dc:97:1a:06:
81:35:94:e3:58:01:2e:3e:14:3c:45:1b:91:c5:f5:
2a:89:42:07:64:16:27:38:b9:15:a4:75:da:42:6e:
a6:04:67:53:a2:0c:ae:05:d0:e1:72:18:26:75:aa:
99:48:2d:64:f1:2e:95:c4:03:e7:8e:56:b4:58:7c:
ab:d6:52:a4:77:22:7d:ec:b5:91:7c:39:e8:25:67:
22:91:e4:d6:88:75:ea:04:b1:82:45:6c:05:14:d5:
81:3e:5c:b4:2c:e7:4d:8f:24:84:a4:cc:41:3e:77:
2c:cc:4c:55:90:54:09:0a:86:25:74:9e:27:52:37:
b7:df:fc:00:8e:8f:e3:75:6d:8f:fd:ac:50:95:d7:
a0:0a:86:28:70:49:dd:58:96:fa:0d:f6:1a:e9:f6:
e1:51:20:ed:bf:5c:2d:74:da:1e:f3:10:7a:aa:f4:
78:04:bb:27:12:10:5a:71:2d:a6:15:5f:1e:ed:00:
32:29:47:f6:9b:79:af:13:14:d2:1c:46:f3:32:20:
7c:74:9a:dd:4b:88:fb:dc:5e:c9:5c:42:ed:98:f7:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:69:80:5A:5C:AB:0A:89:4D:26:01:E9:41:A1:BE:78:62:31:81
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:ff:8e:49:11:4c:7d:be:c4:b4:05:db:e8:50:a4:fc:73:
15:57:5a:36:df:ff:02:e9:81:b1:4d:1b:e3:7d:68:10:bc:a2:
76:3d:e7:26:c0:d1:6e:a1:6c:6c:56:85:42:d1:ff:1f:fa:35:
ad:53:7e:ac:59:eb:b2:93:c7:74:a7:f4:b8:1a:af:b6:41:2c:
f9:a2:4b:1e:61:c2:6f:99:37:64:82:b9:28:31:02:82:89:fe:
38:0f:0c:69:e5:ad:9e:3d:5e:8f:74:9f:96:7b:54:f1:d5:f6:
05:ed:40:30:ec:3e:d2:1a:49:cf:8a:fa:96:a8:80:38:ee:b7:
3b:d8:e5:26:3e:0b:68:00:75:89:ab:b3:a2:7e:bf:41:43:84:
3a:00:d4:32:4d:3c:a1:af:c5:2b:aa:42:20:ea:37:5d:38:1c:
3d:13:24:4f:70:5b:9f:f0:e0:c8:3e:e9:12:2f:88:8b:f4:d0:
fc:d0:ba:b4:1b:20:77:af:15:3c:05:27:c5:86:38:cc:1c:fd:
4d:d2:3e:5e:3f:34:5c:d1:31:59:26:af:03:44:69:5d:37:06:
db:32:29:58:01:05:54:1d:86:25:27:3a:ce:c1:0f:76:68:93:
1d:28:2c:5f:9b:af:1d:bf:f9:0d:24:fa:16:99:6f:d4:d7:eb:
4b:2a:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:34 2026 by rpki-client