Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: Ji8Me+mI7nRAzGMqmqOfZcA4w9IeSpo3A71HBK58HkA=
Subject key identifier: EE:16:24:97:CC:43:95:AD:DF:7C:87:01:3D:59:00:FB:25:D8:2B:A7
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019D27A8ED1396A5ACE224EBFE5E1C78C221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 043A
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: wBHAWujhXckJe7Wd9PR8UiXDuqLfmXFgCqeYA7dZcu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ed:13:96:a5:ac:e2:24:eb:fe:5e:1c:78:c2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=ee162497cc4395addf7c87013d5900fb25d82ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:d8:3b:0c:e4:9c:fb:a7:46:52:50:94:c4:
7b:3d:73:94:d6:a8:e9:4a:ef:0d:d2:f9:c5:3f:45:
fe:c9:f7:72:b7:78:ef:bc:0f:46:ac:e8:5a:fe:87:
8c:af:8b:10:8f:2c:67:c1:9c:07:32:7d:b9:c5:06:
a1:7c:b8:f9:2c:e2:ef:12:07:76:bd:08:bb:ac:40:
d9:48:bf:c6:78:cb:fd:e8:ab:f7:f2:11:ff:86:9f:
50:0b:52:b3:c4:bc:f0:21:5f:82:86:64:2e:97:db:
9c:e1:73:be:aa:6f:a7:e0:01:04:e8:51:90:96:27:
4f:53:fc:a5:0c:55:2f:83:15:88:f6:b4:b6:05:3b:
9b:2a:3d:1b:8f:6e:b1:32:94:23:3a:17:b4:2d:4a:
65:3c:c7:e2:4b:2a:91:71:53:e7:f9:bd:65:12:c4:
85:0c:ec:fb:10:60:5f:6e:b8:04:f1:bd:50:00:2f:
c2:4f:bd:9a:e4:c4:e8:0d:34:5a:70:c9:68:b7:a9:
81:7b:14:92:32:af:dc:41:97:9c:5f:5a:4c:a6:66:
50:4b:8c:16:b4:e3:d2:30:36:01:e0:4a:59:b3:55:
dc:2c:67:93:81:57:c4:3a:d7:67:c0:5a:eb:ab:29:
46:93:fe:73:29:06:11:50:61:dd:8c:78:3d:05:3b:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:24:97:CC:43:95:AD:DF:7C:87:01:3D:59:00:FB:25:D8:2B:A7
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:20:1f:a3:78:2e:78:0f:1e:db:20:a0:ba:52:4e:74:16:4d:
05:39:23:7e:e6:f8:77:6d:e2:26:ae:2e:df:56:66:4f:2e:99:
d9:4a:96:4a:97:7e:64:f9:e7:a8:77:d4:84:ee:7e:de:b5:47:
e9:59:51:46:2a:88:fd:a2:c6:d3:6b:b8:af:b7:84:05:8a:29:
66:81:ed:4d:68:b6:23:84:ab:de:2e:0b:1d:77:d5:fc:95:91:
e9:79:bf:76:cf:d2:e0:77:f6:1a:a0:4e:de:e7:01:47:90:e3:
e2:fd:c6:7a:dd:0b:95:6f:3c:60:4a:59:81:e6:34:8f:9e:6f:
be:ac:92:08:ba:1a:0b:d3:dc:67:6b:94:c1:84:9e:dd:1c:36:
07:48:3a:c7:65:aa:33:eb:60:4c:c7:57:70:f1:dc:a6:7c:d0:
33:16:9e:95:c1:3f:cb:e6:8c:84:f2:b9:f0:0a:49:df:64:eb:
64:f8:e3:8e:b9:38:e6:08:70:d3:3e:f4:0b:85:e9:57:9d:0f:
ae:0d:23:fe:5c:3b:db:47:61:6f:f4:b9:79:8a:9b:0d:01:e6:
e2:e6:ee:d2:74:c5:89:c0:03:a1:4c:26:e0:c9:33:cc:af:98:
59:df:cb:39:d5:c0:78:9c:92:64:2e:7b:88:c3:59:7d:ac:1f:
d3:44:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:19 2026 by rpki-client