Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: 4iKZ+aS2mkWNd5b3ZJgF3+GcMEwtlbA5RXnteqKuzPE=
Subject key identifier: EB:C4:FA:25:DA:B9:4B:CF:4E:0A:57:89:3D:BD:BF:52:86:E7:27:2B
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 019D262828E1552C3001AF3AEEB8E64EF0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 09E4
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: A3TEDffrBq56TDY4yudR7y6rEQs.roa (hash: 7fUrynjF6TZPsO+6oL6Q+ehgvRkl4Ttr2jC89/HQi3k=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: YNkJAAdLyy/+IvUzw2nIt5CheLx3C6Wh2wnP1xmg29U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:28:e1:55:2c:30:01:af:3a:ee:b8:e6:4e:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=ebc4fa25dab94bcf4e0a57893dbdbf5286e7272b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:79:d2:94:2c:96:2b:5b:cb:b1:ce:2f:d5:
8a:13:c0:e2:9f:d5:2f:93:7e:b8:34:c8:f1:27:a5:
95:6a:0b:80:44:17:a0:c7:50:2d:b6:95:1b:53:da:
48:e8:b6:37:3b:91:47:a8:3a:3e:1d:9c:40:44:f2:
5e:6c:ce:14:b7:7d:58:2b:fd:3c:6d:5f:12:fb:62:
f6:bd:f4:ac:1c:6e:d1:8b:23:4e:e9:53:a0:e6:2f:
ce:b1:30:76:37:15:a5:c1:33:60:76:f0:4b:c9:27:
a3:09:21:60:9a:dc:a4:24:db:8a:55:86:65:0d:9a:
f6:6d:6b:59:b9:ff:b6:ba:c5:27:e5:10:46:24:cf:
10:39:6e:f6:51:8e:27:b5:e6:3b:54:25:65:cd:2b:
b0:9e:85:0f:fa:9e:02:a6:f7:13:2d:f1:70:c9:dc:
49:69:2a:ff:48:9d:03:79:4b:2b:16:8e:1c:9d:af:
e0:14:57:c9:47:ac:b4:f8:ab:e5:63:8b:1e:f1:6a:
be:b8:70:00:74:a3:6a:41:32:e1:ba:ed:aa:26:8f:
24:8c:6b:8f:69:e5:7c:9f:dc:0c:d4:73:b8:dc:78:
c0:09:29:13:1e:1e:71:ee:9b:4c:44:d9:b0:a6:7a:
56:3c:dc:fc:49:a7:05:d0:a9:79:a0:3a:5e:52:12:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:FA:25:DA:B9:4B:CF:4E:0A:57:89:3D:BD:BF:52:86:E7:27:2B
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:40:4d:2a:9c:3b:b1:20:33:54:34:71:5f:bf:8a:39:f3:77:
ed:ff:d1:19:af:23:76:2a:86:9c:6d:b3:a6:76:80:73:03:4c:
d9:56:61:c7:a3:f6:a5:61:80:95:a0:31:3b:e1:61:62:12:c6:
a7:33:c2:b4:a8:cd:1c:b5:be:24:66:2f:3d:70:49:78:33:c2:
6a:0a:2a:03:67:10:52:b3:93:83:ca:28:e2:32:35:32:52:be:
61:de:46:1a:81:09:32:2a:38:0f:ab:01:cc:8f:69:a9:a6:78:
f4:d7:2a:83:73:d3:23:13:1b:f7:95:75:bf:2d:7a:cc:5e:1a:
9a:d8:09:e4:1f:29:a8:4a:55:7c:13:af:e9:52:77:ac:68:ba:
8d:77:9c:06:f0:a7:d9:41:d3:6e:7f:65:34:10:7b:2b:40:77:
7a:13:2f:91:e6:30:47:50:36:39:31:79:93:53:b9:2a:cd:49:
3b:37:9e:71:a7:36:dc:aa:a7:72:16:5c:c8:78:17:c0:94:4e:
a9:42:cc:f3:d8:85:a6:e5:58:cb:1c:a5:f1:8c:c3:e2:7b:c9:
c1:08:77:84:14:1f:f3:30:1b:ec:0a:70:4d:a8:db:e8:bc:5b:
79:9e:24:2f:3a:86:48:1c:31:24:04:db:be:8a:ea:83:65:a5:
6b:36:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:50 2026 by rpki-client