Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
File: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft (raw, json)
Hash identifier: 71cYDkFND4w75yd0DtEmbemcNPSoZTLTdvWZF9+D9TI=
Subject key identifier: 0E:DF:E1:8C:57:80:B0:5C:0A:6B:8C:89:6E:FA:7E:1A:D6:F6:39:6A
Authority key identifier: 63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
Certificate issuer: /CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655
Certificate serial: 019D27DFDE98F9EE8F21BCE82F1C30B5DFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
Manifest number: 010C
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl (hash: JzCp4RSbctHBEjVfzXhNQIk2maDaxTmR1eLpiC092EQ=)
2: vLHvO7nk703n1iEe79-rWj-ouAg.roa (hash: z05JBWptG6UDe/d2SgY5u2FZkYfNtJGPDBRKDKb40nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:de:98:f9:ee:8f:21:bc:e8:2f:1c:30:b5:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=0edfe18c5780b05c0a6b8c896efa7e1ad6f6396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:4b:78:91:3e:6f:0e:29:b8:27:4e:c6:b1:
05:2e:5a:9b:fe:82:8f:d9:b4:8e:07:9e:9d:2c:ab:
7a:fb:aa:e8:92:05:28:4f:b7:c9:df:a5:3b:91:c6:
26:63:fa:a3:06:1d:50:82:33:ad:de:29:4f:1f:5e:
c1:f6:80:ab:df:81:3e:75:ee:90:9f:e6:92:09:bd:
eb:ba:63:a9:1f:3c:fa:f2:e8:d7:61:e0:cb:f6:a7:
0e:91:e9:da:a6:bf:86:27:df:04:2d:37:14:a5:26:
a2:01:99:bc:4b:c1:b0:e9:03:52:01:95:10:49:ac:
3b:b8:45:ea:45:16:31:29:72:3c:0a:98:c6:f8:b7:
10:bf:99:8d:81:6f:bb:1d:ac:46:7a:2e:71:d3:d4:
14:a2:76:a0:25:c3:34:42:0a:05:6f:63:07:1d:21:
8a:11:5d:35:40:29:0d:10:c5:1a:ea:10:fa:15:fa:
b5:e1:67:27:b0:52:8e:40:4d:cc:21:4b:84:6d:f8:
97:e4:8b:d2:06:f2:22:b4:e1:bc:ad:53:3a:1b:17:
aa:bc:76:8f:fb:3b:56:8a:92:bc:bc:97:e6:f8:f5:
a1:38:92:d3:45:21:6d:b9:0e:39:6f:c2:c4:aa:1e:
ad:68:1a:14:58:1a:cd:16:e5:40:12:da:de:84:75:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:E1:8C:57:80:B0:5C:0A:6B:8C:89:6E:FA:7E:1A:D6:F6:39:6A
X509v3 Authority Key Identifier:
keyid:63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:21:73:e4:66:5d:66:35:59:f5:55:63:55:fa:5e:07:43:db:
76:8e:cf:8f:5d:3b:2a:1a:fb:bf:a7:6c:bb:b7:02:c9:b5:4e:
6c:e5:8b:96:6d:54:59:91:21:22:17:05:9e:8e:67:86:48:87:
ac:f6:e0:17:ad:46:c5:38:6d:49:12:37:b1:1f:bd:c0:18:14:
5a:3c:f6:b5:1d:ef:eb:0f:0b:60:8b:11:6d:d2:f5:3f:63:62:
29:3b:0e:cc:72:5d:d2:16:2c:e3:9a:74:85:ff:f6:a9:98:93:
b1:d5:5d:20:f3:85:1b:6e:b6:dd:cc:2e:42:e3:ca:c9:33:83:
77:56:6a:85:f9:12:4b:38:dd:20:99:1b:14:24:60:95:df:af:
31:f9:b9:48:a9:e6:2e:ce:f3:53:f0:92:bf:aa:a0:05:4a:87:
ac:75:92:d2:77:84:6e:d7:20:3f:01:86:89:ac:4d:ed:ee:a5:
a1:40:c2:89:74:88:36:81:b0:bb:70:74:c0:4e:2d:3a:34:52:
c5:ef:f4:a6:a5:bf:55:a6:ac:ca:d2:2a:a0:5c:ec:cd:56:24:
1b:34:14:f2:32:26:e0:8e:d3:b2:ef:52:eb:93:48:2a:0c:07:
73:da:69:25:6a:d3:00:fb:39:c9:a7:84:03:30:5c:7f:d5:0c:
40:a2:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:02:09 2026 by rpki-client