Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: lzRCwHBNAjogQdHxhSVjM3X2RnXBAd7gdEvB1GXS6Lw=
Subject key identifier: 6C:15:E3:26:6B:BD:A4:CA:AB:4C:8D:63:55:29:D5:E6:8C:F5:CD:22
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019D25F1E7C596710E3BF9BDCB606089A8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: bSw6Pi0zRDDlv4wnXJWejCwchtv0cXzOZx1pJTkCXkc=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e7:c5:96:71:0e:3b:f9:bd:cb:60:60:89:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=6c15e3266bbda4caab4c8d635529d5e68cf5cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:72:dc:ef:1f:b6:20:7e:ef:9a:dc:08:e8:
07:16:43:4e:1f:98:fe:c2:69:0f:37:a2:fb:c4:6d:
01:07:23:0b:86:79:36:91:9a:fd:cd:dc:4d:f3:dc:
95:17:00:b3:9f:02:7c:cf:50:79:ef:ff:64:c1:0d:
09:53:d6:72:51:4d:96:0f:b5:b1:0b:a2:c2:ab:02:
38:2c:e5:af:7a:06:ac:6e:30:d7:c6:32:38:ac:ed:
e5:da:b8:59:7e:fa:03:d6:b0:78:37:34:b0:dd:8d:
af:7d:9a:2e:3b:41:24:98:b6:94:dd:4c:51:a8:ed:
93:59:0a:77:31:25:af:e0:e8:97:41:91:10:ff:a8:
19:f9:27:a2:9a:07:00:51:9c:b7:f5:91:51:68:a7:
56:49:1e:d6:27:15:0f:a4:34:b5:53:ab:3f:84:0b:
1d:07:06:1d:be:66:9f:fb:7a:aa:88:d7:55:07:f8:
f2:85:c1:c2:2b:a5:ea:ad:fa:8c:a0:76:2a:dc:f7:
22:57:68:50:84:3f:5e:2f:b1:31:a8:a7:e4:7a:73:
62:45:72:37:24:13:00:cf:7b:1d:1a:58:2a:9a:77:
8b:98:1f:92:24:7d:47:25:ad:4c:29:67:b6:f4:21:
34:95:2a:f3:53:8d:7e:67:82:81:4d:07:0b:f7:b3:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:15:E3:26:6B:BD:A4:CA:AB:4C:8D:63:55:29:D5:E6:8C:F5:CD:22
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:e9:45:16:11:0c:dc:c4:df:78:da:5b:bb:7c:fd:11:f6:
f0:f9:55:bf:7f:50:55:c5:b4:9e:12:90:d0:78:90:bf:95:b2:
a6:cb:90:8b:16:86:1f:79:4e:91:58:fc:05:e9:a6:37:8d:aa:
16:af:fb:06:8e:65:c9:b9:4a:b0:5d:03:1a:57:5c:a3:83:3e:
31:db:be:fd:7d:46:4a:57:9d:87:62:fd:28:3b:ac:31:d4:fc:
ee:79:b8:96:7c:03:2d:9f:72:d7:94:bd:ac:53:ba:af:e8:d9:
f0:dc:ff:0c:81:04:90:c8:25:8c:45:6e:e2:97:a7:0b:08:9c:
1a:73:33:0a:91:9c:74:22:4b:a7:45:77:4a:a5:6b:b4:5f:70:
fc:88:35:ea:38:b5:a2:78:b4:cc:da:a1:ab:78:9b:08:fb:b9:
f2:14:4e:f7:8e:6e:69:9b:34:f9:f4:17:7c:33:78:84:40:be:
ed:2e:13:95:80:e1:5a:7a:ed:80:c2:77:1a:c0:d5:2e:c6:5b:
55:dc:b6:59:aa:9d:5e:7f:e5:0e:ab:7d:05:43:a2:b5:71:a0:
33:bf:b5:aa:47:67:c3:db:55:f0:90:bd:bb:24:2f:cc:86:15:
fd:45:e9:fa:8e:cf:67:43:d3:da:3f:26:10:18:08:8c:be:98:
1a:0b:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:19 2026 by rpki-client