Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft (raw, json)
Hash identifier: TnYcBuAf6XvM/Qq//TM9+0COTttplrNyb9YT3N3NOSo=
Subject key identifier: D9:6A:9C:87:57:70:38:83:BF:88:39:9F:62:16:22:89:AF:31:79:0B
Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Certificate serial: 019D26287AC12520350EC636AF302C8CE83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
Manifest number: 05B2
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl (hash: XmQcT6LqMXDaLA9DTZ31k7mHZB35poxb6uQqqzsSEIg=)
2: pGs7xsxzlpU1tXn2yh5NBLhf9X0.roa (hash: uYgJSnGFmsrKbeTYAmeT6QjGNlnW8e1sEIOLhpiP3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7a:c1:25:20:35:0e:c6:36:af:30:2c:8c:e8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=d96a9c8757703883bf88399f62162289af31790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:38:75:ba:b7:c0:0d:c9:f1:56:91:b0:b3:
a7:d0:9e:df:e6:9a:d7:1c:fb:c7:8b:d7:57:35:8f:
f8:e0:4f:37:19:95:de:41:43:63:b6:14:4a:a5:b5:
7b:9f:bb:27:a2:8e:ec:2d:e6:5f:a4:d2:f0:2b:28:
04:d1:a3:be:8c:9e:ba:e7:ee:90:32:75:56:a5:ae:
d3:ad:85:c2:70:b1:94:2b:74:ce:8d:84:62:4c:e1:
c5:8d:70:79:ff:0c:fa:aa:be:92:af:c6:68:9b:6e:
b1:29:21:9c:be:ae:f5:0f:8e:68:84:bb:7c:96:be:
0b:2f:92:ff:5e:4a:87:9f:52:8f:1b:21:7e:d4:58:
29:73:bc:f7:11:f1:8e:fb:46:8b:60:0f:90:4d:b6:
11:72:fa:08:91:59:cb:02:22:aa:15:96:53:15:6a:
0a:da:83:80:37:41:f7:ab:a5:1c:49:67:83:e6:6d:
4d:9f:e4:ff:48:c8:ec:6c:0b:73:7c:63:9e:d4:a5:
78:53:f5:88:d6:b7:56:8a:6c:6e:5f:20:91:e4:6a:
69:93:28:8b:ef:aa:26:b1:17:e2:af:6a:5b:07:d5:
c7:44:27:7e:d3:e0:f1:74:e2:69:a0:e2:f5:e4:3b:
4b:3f:a4:c1:f9:f1:7e:5b:50:1a:7f:f0:f1:79:2d:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:9C:87:57:70:38:83:BF:88:39:9F:62:16:22:89:AF:31:79:0B
X509v3 Authority Key Identifier:
keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1a:67:c4:cf:72:5b:5c:1e:56:15:fa:19:06:f2:48:38:7e:
dd:e5:2e:5b:67:53:fa:b4:71:f9:f0:ec:3b:05:ba:be:65:e4:
3a:46:b4:52:44:fa:5a:df:1a:37:85:82:5c:2b:dc:8b:05:54:
ac:11:ee:2c:7a:0f:d1:d3:1f:11:e8:69:52:3a:32:f5:9b:62:
89:8f:51:af:16:25:3f:01:be:6c:9e:b8:d9:08:97:a4:e0:b9:
9b:4a:6b:9c:98:90:98:6b:43:f6:c3:ca:2c:89:e8:19:44:1f:
55:9e:87:01:72:a9:a0:64:a6:b3:89:ad:b2:37:ea:a5:b9:20:
4f:46:cd:04:ed:aa:2a:47:9f:d8:a1:58:d2:f3:34:1e:e2:e5:
9b:a6:68:42:e4:5c:7a:0c:0c:7d:67:99:7a:06:40:e7:30:00:
99:47:c4:94:3e:50:d0:e7:8d:98:f3:59:de:63:57:99:d1:21:
35:fc:63:bb:c8:a0:b4:28:d0:b3:5d:dd:de:fb:55:a5:d6:1d:
ad:1e:4d:aa:8d:1a:ed:19:32:4f:11:38:60:a8:41:04:47:14:
46:7b:8c:c1:1b:f5:76:8e:e5:4a:a8:52:80:5c:45:a9:6b:d6:
5c:db:48:c2:b7:fb:4d:bd:3e:ca:bd:90:17:7d:c5:8d:3d:80:
d1:f4:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:36 2026 by rpki-client