Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: wvmJEH+DR7U13dFE7hxlATHlHXjIPQceWOimmYLNcwY=
Subject key identifier: ED:44:C0:ED:89:86:B5:15:AF:6C:A3:D8:49:C5:CF:53:F7:A3:36:47
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 019D2960843421DC6B504233164B726FE7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0DFB
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: xm2EH0bMS7Lp6R8nocX142XHBiE.roa (hash: Sw8xk1+itLI+I+ws0cUgg1V722l6xa6aNkokvCgQUD4=)
2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: vXaAmak3CEwwrqLUgFEGRM8rV1X9+wFgBdB9kf7GYak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:84:34:21:dc:6b:50:42:33:16:4b:72:6f:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=ed44c0ed8986b515af6ca3d849c5cf53f7a33647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:37:6c:5a:25:3d:f7:de:fa:78:36:d4:37:
af:68:b7:fd:35:14:34:be:eb:10:50:29:e8:a9:2a:
46:5c:71:72:8a:5a:f3:ef:76:15:81:23:be:d1:64:
e2:49:34:43:09:4c:c0:b2:38:3a:53:5f:6c:07:2c:
7b:f6:88:df:be:17:91:5b:58:f9:75:9e:a7:ab:65:
02:f0:39:d0:84:1b:24:b1:69:f5:21:4a:98:5e:01:
a3:83:68:10:54:7c:d4:f0:69:ca:c3:4d:57:cf:2a:
c8:31:44:e5:b5:70:c3:38:c6:69:c7:bd:07:34:46:
dc:be:5c:24:7c:a4:ec:df:bd:d8:e8:9b:0f:d5:4e:
36:64:5a:09:f2:42:5e:65:21:c4:9f:05:ba:4e:40:
7f:50:9a:3a:19:8e:e1:f7:7e:78:e8:a9:61:c7:7f:
3f:43:17:4d:34:f7:20:3e:29:65:56:ea:3a:61:91:
ee:41:0d:2c:17:bf:6f:66:05:6d:41:a7:37:68:ea:
ec:2d:a0:71:89:03:44:5d:d7:39:f1:cd:37:aa:4e:
4f:18:37:d8:7b:f6:91:c5:4d:e6:b3:f7:64:42:68:
a4:7f:9f:8d:60:cf:49:6e:00:17:c2:a0:f6:6b:3e:
d4:ef:13:ff:b0:cc:1a:55:fe:bf:ad:ab:3c:d0:99:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:C0:ED:89:86:B5:15:AF:6C:A3:D8:49:C5:CF:53:F7:A3:36:47
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:17:85:6b:4f:2e:d4:d2:73:43:92:95:92:be:39:b1:31:0c:
18:f5:ad:e1:63:9d:5a:bd:38:83:e0:67:be:45:d5:23:a4:3b:
0f:c0:b5:41:74:aa:b8:a3:54:b8:fd:36:08:fb:d0:0d:f6:df:
f2:e9:49:f1:23:4e:30:28:71:ac:1f:e4:c9:5b:e1:3a:2b:33:
76:30:60:9a:9d:0f:51:e3:b2:6d:ea:f3:a1:12:d9:3d:0c:97:
2c:e7:dc:3f:61:2b:77:14:7c:b8:70:93:28:4e:c9:36:98:9b:
fc:91:3a:17:51:a4:82:83:ef:04:e6:ad:0e:ca:30:dd:63:43:
07:bb:12:12:5d:be:2b:67:a7:4e:c1:d6:dd:c6:3e:28:e1:8e:
72:b2:18:d3:a6:39:80:5d:89:8e:eb:6d:6e:78:b9:e4:f4:d8:
38:8b:ad:a1:a0:42:4c:95:1e:7e:61:63:8d:20:62:b5:f9:dd:
09:43:18:a2:84:9e:9a:96:58:48:32:be:ee:2b:8b:89:8a:a2:
13:0d:60:e8:5a:64:36:47:c2:c3:d7:a9:67:a4:60:e5:e9:cc:
de:c4:28:fa:24:2e:5b:b0:20:72:0a:bc:58:3a:e0:e3:4a:bd:
96:ec:76:54:cc:c1:9c:47:8e:78:44:af:ac:05:6f:26:c6:68:
0f:45:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:16 2026 by rpki-client