Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: xd9aapLBkjdduzBQx+TkFdlQKF4/DqRS2uUUNwwCuCE=
Subject key identifier: E0:8E:9D:B5:E6:76:52:5B:63:51:0E:FA:C2:76:FD:CA:FB:B0:7C:E6
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019D2B4E1051049DEDF5B304A3A25E6B0237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 18:00:29 +0000
Manifest this update: Thu 26 Mar 2026 18:00:29 +0000
Manifest next update: Fri 27 Mar 2026 18:00:29 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: ELyGwvY3Uw7sXzRefIQA5UzAYWEvoo1WzolcSpwR/MM=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:10:51:04:9d:ed:f5:b3:04:a3:a2:5e:6b:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Mar 26 18:00:29 2026 GMT
Not After : Mar 27 18:00:29 2026 GMT
Subject: CN=e08e9db5e676525b63510efac276fdcafbb07ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:bb:3c:74:e9:33:18:b2:f4:85:26:a7:76:
6c:fb:55:31:1e:cc:8f:68:d4:cb:3c:75:ed:43:30:
7f:6d:5a:47:26:8e:23:f9:10:51:a2:90:99:10:2d:
f1:b8:05:9a:79:84:82:4a:d4:6d:5d:ec:1a:22:0b:
60:58:35:4e:cb:64:05:e8:39:e7:6c:01:04:b2:41:
6b:9f:cf:fd:7a:bd:e0:a6:2a:63:2e:01:c3:5e:8d:
3e:5e:da:63:30:73:43:19:30:9d:72:53:cb:56:92:
6a:6e:50:41:e5:57:8e:dd:27:58:96:4e:fb:31:b6:
b3:9b:f7:ee:a1:4a:df:7b:b3:b2:23:c0:1b:e3:67:
c0:ac:2c:3f:8b:83:ee:7f:28:dc:cb:c7:d8:e9:1d:
f3:c0:7c:42:d3:b2:a8:c7:b6:3a:3d:8e:fb:3b:6b:
f1:11:54:a3:90:b5:54:f4:b0:dc:db:65:02:d1:52:
db:e3:d5:0a:ce:f6:53:21:c7:1e:17:c1:7d:d1:b3:
99:5e:ed:49:33:57:5b:24:ae:76:a9:08:d7:5d:b5:
dd:6f:9e:d3:ea:d7:17:5c:55:e8:8e:5e:15:93:cc:
00:39:22:ca:22:fc:4b:67:20:3f:16:ef:3b:9b:1e:
89:ce:ad:e5:fb:4f:4e:39:40:8c:46:b6:3e:62:b0:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:9D:B5:E6:76:52:5B:63:51:0E:FA:C2:76:FD:CA:FB:B0:7C:E6
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:03:77:26:78:27:0e:c3:8a:32:be:61:3e:74:9a:1e:fa:f6:
de:0f:42:38:8d:7a:9d:d2:ab:0c:5f:0a:59:8e:1b:31:6b:c1:
05:0b:ec:c6:1d:6f:56:ba:42:58:8d:9d:cb:9f:d6:9b:84:fc:
2d:ca:91:4e:bd:e2:66:13:cb:69:ef:d3:bc:6b:ef:bc:91:c9:
55:bc:01:04:d3:a9:98:c2:4e:ba:5e:7e:4f:04:a0:20:b8:01:
66:0a:a4:2e:53:eb:39:e2:d9:03:df:5d:c5:7a:c2:e4:e0:92:
6d:b4:87:d0:78:b6:96:88:f9:6c:7a:1a:d6:fd:1b:70:6f:81:
84:2a:c4:71:36:5f:48:ea:2b:24:ad:3f:da:a4:ed:7c:2d:d1:
90:dd:da:52:1c:bb:cf:ce:ce:5f:2b:dd:65:73:ba:6e:eb:81:
b7:9e:e0:da:72:9e:a2:9f:71:54:60:f5:0d:fa:8d:c0:a9:58:
3d:fd:d7:6a:a4:83:5f:10:1b:bc:5c:94:da:80:e5:f3:43:23:
18:b5:93:0e:3e:0d:8c:a2:5f:94:75:e3:58:c8:58:34:ab:b6:
96:27:dc:51:47:66:0c:05:60:22:70:06:04:d7:71:e8:27:0c:
0d:e8:2e:58:2b:29:3b:71:ce:78:cb:a7:1a:94:16:6b:fa:b5:
37:65:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:55 2026 by rpki-client