Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: DHhwskHCQjJjtAYwgQE7c8XC6ee7eVXXenPM2HUZD6U=
Subject key identifier: 9E:74:9F:CD:85:15:46:9C:3A:B8:A3:CB:58:EE:65:4D:50:F2:ED:0D
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019D29CDDB94DD905419042C07EE15E77262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: D6nxcvOCufxxT0816CIGNKTwTTbE+M0nnzZpvvUz1Mw=)
3: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:db:94:dd:90:54:19:04:2c:07:ee:15:e7:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=9e749fcd8515469c3ab8a3cb58ee654d50f2ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:2c:f2:72:75:71:37:52:1f:ed:a4:5d:35:
43:17:27:92:7d:fd:bf:56:27:e6:6c:5b:f1:ff:8c:
42:9c:b4:6e:db:ee:f2:e6:03:9a:78:28:f3:78:b6:
77:bd:1a:88:f1:d4:3e:69:d8:84:fb:65:c1:d4:1c:
55:c5:40:81:73:54:d6:ed:2d:47:6a:03:ce:75:93:
2f:42:c4:03:99:db:15:6c:1a:e6:49:ce:05:6f:f2:
c2:15:e5:46:3f:f5:9a:df:91:85:5e:65:fe:1d:06:
37:71:4b:12:91:1f:98:44:2d:65:53:76:51:8d:8b:
49:5e:eb:42:a8:c4:7d:8f:b3:79:ad:45:c4:87:a8:
7d:ca:64:e7:38:f7:de:cd:1c:15:7c:87:e6:36:5a:
17:80:3e:2a:63:a6:a9:43:a9:01:75:ce:e6:c4:9b:
0d:4b:08:9d:d5:9f:21:57:e3:b9:55:f6:09:91:ef:
79:9c:8a:ba:bc:87:49:92:51:d2:7e:e0:4a:96:28:
ea:0f:fd:69:02:a5:5c:77:ca:83:c7:68:c8:7e:82:
17:bd:70:dc:3c:fb:88:28:d3:c9:23:73:44:ca:a9:
ee:eb:50:3d:80:8e:ba:49:bf:6b:bd:1e:9c:80:70:
f8:af:d4:eb:61:83:70:6a:bf:42:5e:a5:a6:bd:42:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:9F:CD:85:15:46:9C:3A:B8:A3:CB:58:EE:65:4D:50:F2:ED:0D
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:1f:03:6b:88:b2:58:5f:4a:4a:a6:48:3a:63:2d:6f:ce:
38:f2:58:a1:5f:35:75:ed:37:46:58:68:bb:03:f8:ce:f2:d7:
8f:d0:8c:92:77:9a:4c:5d:a8:72:10:64:c0:6d:7f:c3:e6:27:
48:b4:a6:a0:3e:a7:ed:ad:02:af:21:e2:9a:14:a3:3f:80:8a:
ad:9c:34:02:e5:ef:75:44:d6:fe:f8:a9:74:59:88:b1:00:7d:
53:cb:c5:f0:51:40:3a:5c:5a:7a:e5:a2:9f:e2:78:e0:f8:f3:
ca:e8:a3:d0:ff:92:86:6e:c8:c9:c1:07:95:38:08:eb:58:b2:
7b:a9:6c:95:8f:2a:32:1f:1c:6e:2f:c3:2e:16:c6:c3:fb:1a:
f6:13:b3:b5:43:08:e4:93:e0:64:2b:49:21:95:13:cb:40:a0:
ce:45:53:83:da:3e:2f:9b:ec:71:1d:bf:21:80:5d:14:8b:14:
91:e7:50:98:aa:23:5c:f9:94:fc:e8:7e:5a:04:5a:05:26:66:
60:58:3d:22:8c:4c:5f:c6:32:71:16:35:b6:96:df:10:48:2c:
cf:a3:0a:59:54:4e:2e:c3:ff:6f:94:a2:ae:e6:35:35:18:2b:
dc:78:3c:d2:76:4b:08:9f:2b:30:a5:01:35:29:e1:e1:3d:f5:
de:b4:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:25 2026 by rpki-client