Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File: Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier: ypNiohf1Rqw3hNjaXTISVTrq6yGW/CYqLXg4lUlSQ8w=
Subject key identifier: D6:FD:FD:92:B6:EB:DF:F7:09:F8:AE:9F:96:9A:CF:4B:BC:0A:60:DE
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 019D258315C39E120AC949E90E62575181AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:40 +0000
Manifest this update: Wed 25 Mar 2026 15:00:40 +0000
Manifest next update: Thu 26 Mar 2026 15:00:40 +0000
Files and hashes: 1: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: DSfd3S9fP0Df+pSjk0DV89usi9m3hek8I8FsKgFiMWk=)
2: _gz8x1xGW4-7OCEk-C8VchnNXgo.roa (hash: fFsAwtO9RzQxvli7T//NB0hYVb7zH2oavZtCFJaj1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:15:c3:9e:12:0a:c9:49:e9:0e:62:57:51:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Mar 25 15:00:40 2026 GMT
Not After : Mar 26 15:00:40 2026 GMT
Subject: CN=d6fdfd92b6ebdff709f8ae9f969acf4bbc0a60de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:8d:87:e3:04:31:f9:06:a3:ae:ef:1e:c6:
bd:d4:a5:20:07:18:d4:f3:ac:1f:52:95:d3:4e:2a:
0e:21:c8:8e:bc:10:b4:97:79:a0:36:5e:9d:62:35:
d9:3f:d5:01:a2:7f:12:51:2d:8d:fe:ca:5b:45:eb:
91:78:92:dd:07:45:e6:ac:45:8d:c9:dc:cc:aa:a7:
3f:f0:04:10:93:23:f1:ab:6d:a7:d0:34:df:ce:66:
59:7a:db:1f:15:f7:7f:7b:00:bc:b7:0d:a9:e5:e5:
a1:96:a0:57:f6:97:af:55:5a:38:97:30:ae:8d:55:
66:1b:50:01:3e:be:4b:5c:68:d2:c5:fb:69:9e:b7:
7d:a7:f2:59:0d:c6:76:40:81:74:72:25:a7:6e:a2:
51:78:49:6e:86:55:71:cc:e1:0f:31:a7:29:0b:0c:
eb:ae:92:9e:30:a4:77:67:7e:cf:51:e4:1e:8f:3b:
11:90:f1:7f:8c:06:28:df:01:b4:a6:93:c1:9a:15:
bd:5a:9a:6a:9f:dc:b1:19:c7:55:fe:d7:17:49:ca:
86:18:5d:1a:c0:71:6a:e1:01:35:a3:d5:70:c6:3c:
a2:1a:1a:c4:90:c6:88:46:6e:c6:c3:d7:49:4c:a6:
56:d3:c4:c5:a0:91:a9:fa:90:3a:d9:25:ac:52:8d:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:FD:92:B6:EB:DF:F7:09:F8:AE:9F:96:9A:CF:4B:BC:0A:60:DE
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:03:fa:3a:c7:7b:c6:81:e0:59:c2:9e:a3:9c:f6:71:84:26:
c1:61:3a:60:85:9a:d4:f7:cc:bc:53:5c:36:03:43:38:46:cb:
0a:08:62:8a:cb:55:a2:1e:ca:b6:50:50:a3:9b:a1:68:d1:72:
d3:43:7c:ca:16:4c:f4:a9:58:5d:70:f5:3c:ed:e7:3e:bf:ff:
b2:ba:10:2b:24:42:09:32:7b:89:8c:93:50:fc:49:8b:f1:fb:
e5:db:ff:72:2c:d3:29:45:93:c3:09:75:67:25:b3:6d:f6:0d:
c4:dd:fe:b9:0b:79:9e:d9:3e:92:df:f9:1a:a5:18:6f:0e:6f:
b1:ce:29:b7:3f:53:2c:5a:81:be:28:a9:b5:81:b6:fd:3b:1b:
3c:ea:91:46:7e:15:bf:1e:30:7c:05:50:d5:9a:0a:96:e5:05:
fe:d4:61:41:aa:77:2c:23:53:40:77:9e:f7:8d:10:d3:de:99:
47:52:1c:33:c1:29:fa:0a:a1:74:76:1c:1d:56:e7:ae:a6:c4:
b3:61:56:e3:55:41:ab:2d:09:b3:46:d7:bf:a9:16:29:64:a8:
83:e5:9d:7f:46:bf:52:d0:22:45:0f:43:ab:87:7a:49:7c:54:
fd:d2:ee:37:f1:de:18:3e:19:36:03:89:26:1a:dd:dc:55:50:
cc:c8:3f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgxXDnhIKyUnpDmJXUYGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzgxNDBkYmQ0ZTZlZjE3MDIwZDg5YjBkNDI1MGRmZmIw
NDgxMWMwHhcNMjYwMzI1MTUwMDQwWhcNMjYwMzI2MTUwMDQwWjAzMTEwLwYDVQQD
EyhkNmZkZmQ5MmI2ZWJkZmY3MDlmOGFlOWY5NjlhY2Y0YmJjMGE2MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVGNh+MEMfkGo67vHsa91KUgBxjU
86wfUpXTTioOIciOvBC0l3mgNl6dYjXZP9UBon8SUS2N/spbReuReJLdB0XmrEWN
ydzMqqc/8AQQkyPxq22n0DTfzmZZetsfFfd/ewC8tw2p5eWhlqBX9pevVVo4lzCu
jVVmG1ABPr5LXGjSxftpnrd9p/JZDcZ2QIF0ciWnbqJReEluhlVxzOEPMacpCwzr
rpKeMKR3Z37PUeQejzsRkPF/jAYo3wG0ppPBmhW9Wppqn9yxGcdV/tcXScqGGF0a
wHFq4QE1o9VwxjyiGhrEkMaIRm7Gw9dJTKZW08TFoJGp+pA62SWsUo10JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb9/ZK269/3Cfiun5aaz0u8CmDeMB8GA1UdIwQY
MBaAFGN4FA29Tm7xcCDYmw1CUN/7BIEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYt
NTYzYzZiNTJkMDg2LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYtNTYzYzZiNTJkMDg2
LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwP6Osd7
xoHgWcKeo5z2cYQmwWE6YIWa1PfMvFNcNgNDOEbLCghiistVoh7KtlBQo5uhaNFy
00N8yhZM9KlYXXD1PO3nPr//sroQKyRCCTJ7iYyTUPxJi/H75dv/cizTKUWTwwl1
ZyWzbfYNxN3+uQt5ntk+kt/5GqUYbw5vsc4ptz9TLFqBviiptYG2/TsbPOqRRn4V
vx4wfAVQ1ZoKluUF/tRhQap3LCNTQHee940Q096ZR1IcM8Ep+gqhdHYcHVbnrqbE
s2FW41VBqy0Js0bXv6kWKWSog+Wdf0a/UtAiRQ9Dq4d6SXxU/dLuN/HeGD4ZNgOJ
Jhrd3FVQzMg/qQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:49 2026 by rpki-client