Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json)
Hash identifier: oDztcCVdV8cvp4IdQomc9j0cVPXiTamFIgcLD6dTnvA=
Subject key identifier: 4B:D3:05:35:FA:E2:27:4F:89:B2:43:04:7F:D6:BC:CE:3F:49:8E:5A
Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Certificate serial: 019D28BBA24AAB9BA901461BC3C1D898032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
Manifest number: 020A
Signing time: Thu 26 Mar 2026 06:01:18 +0000
Manifest this update: Thu 26 Mar 2026 06:01:18 +0000
Manifest next update: Fri 27 Mar 2026 06:01:18 +0000
Files and hashes: 1: wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa (hash: 0xU2M591t0tt0HcAOUX7ifjkri7E09ptWBOocOdK4g4=)
2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: iPxtL7e/dtbbsQ/W9XDWvuF3HxZq+SXyORyK7pw9ScY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a2:4a:ab:9b:a9:01:46:1b:c3:c1:d8:98:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Validity
Not Before: Mar 26 06:01:18 2026 GMT
Not After : Mar 27 06:01:18 2026 GMT
Subject: CN=4bd30535fae2274f89b243047fd6bcce3f498e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:89:a9:04:1e:31:27:9f:df:7a:05:98:95:
53:d5:c3:9d:1d:ae:c5:21:dc:07:c6:5a:8c:7f:85:
13:bf:bf:ab:d2:e9:99:9d:b1:3d:f7:6c:88:35:aa:
a3:40:20:f1:3e:d8:4e:6c:c2:f9:58:ee:70:4c:31:
87:0b:4e:70:54:3a:87:be:44:f9:20:b7:c7:3f:07:
79:62:ce:04:5a:4d:fb:70:ff:d9:25:cd:87:54:52:
5b:3b:d3:68:92:a4:2e:d8:42:23:26:a3:83:a1:56:
14:29:62:17:b7:42:cb:c7:72:fd:69:50:7f:4e:14:
a1:0f:c6:bb:74:8b:88:bf:ca:ed:f2:20:7e:4a:5b:
f0:98:4f:92:5b:88:de:59:3e:f4:1c:36:f6:c0:97:
de:de:93:03:ba:f9:61:90:d8:0b:4c:0b:a1:f6:9f:
9a:ce:04:76:59:7a:72:e8:f0:73:cb:0b:de:bf:8e:
64:18:ee:72:a5:41:2c:51:41:a9:9e:ed:cf:f3:7c:
ea:b9:7d:80:75:87:07:1b:b6:d9:97:ae:8e:9f:42:
45:01:16:ad:73:a1:2f:f4:3b:6e:12:f1:df:68:42:
cd:a9:a1:8d:6f:bf:41:b4:6e:01:00:00:a5:ff:b3:
49:ee:a7:62:5b:75:23:72:a0:2a:4e:de:e5:fa:3d:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D3:05:35:FA:E2:27:4F:89:B2:43:04:7F:D6:BC:CE:3F:49:8E:5A
X509v3 Authority Key Identifier:
keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a5:c5:b3:28:5f:a3:d1:d7:49:6e:6b:a9:86:3b:d3:f3:75:
68:47:9a:15:dc:f9:9f:3e:8c:41:4a:15:c8:bf:9f:5c:f4:28:
35:d8:76:38:4c:5c:57:da:af:e5:8b:e9:a8:25:77:2c:74:b3:
4b:36:49:de:95:4d:dd:5b:06:37:97:83:4b:4b:c4:e8:86:eb:
9f:80:03:e2:51:8b:04:c1:8e:d1:87:10:87:52:d5:01:a0:a3:
59:a8:4f:83:4c:9e:e6:f0:14:7b:18:a2:49:c4:44:af:d0:f9:
3a:b0:43:91:af:4c:1b:6e:2d:9f:d4:9c:21:49:76:3b:e3:04:
16:45:0f:1a:d4:80:8b:a2:7a:32:b3:7b:4e:47:e7:58:3d:7c:
fa:aa:03:a7:dc:e5:d5:2a:0a:06:49:44:34:af:64:75:0c:3a:
87:a5:47:7b:6b:11:54:84:d2:cc:45:00:47:5b:c3:b3:94:a0:
0c:93:cf:88:66:e3:59:7c:94:25:21:2e:8a:dd:6c:a4:e7:37:
39:d4:9a:4c:5d:af:66:44:6d:8c:e4:d6:48:61:bf:57:c3:5a:
6e:74:b0:f1:94:62:47:73:82:0e:11:54:5b:c0:15:60:a4:70:
df:65:cc:03:7a:24:c3:26:69:b2:49:8c:b0:8c:25:13:d3:6f:
9d:c6:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:10 2026 by rpki-client