Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: uff0ErdnFXWu5vsK+MEHQYyafgafgyl3d7uCAx26+UM=
Subject key identifier: 04:11:F2:3A:D3:73:59:EA:FE:14:6C:85:BA:FB:BD:DE:D3:4D:8B:24
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019D27A94A5AA83D11234F9D88A7EA89208E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:39 +0000
Manifest this update: Thu 26 Mar 2026 01:01:39 +0000
Manifest next update: Fri 27 Mar 2026 01:01:39 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: oxm89Y2dPkGBWIJcY4+Ig+hJ13GKC36FAHqmckXacN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4a:5a:a8:3d:11:23:4f:9d:88:a7:ea:89:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Mar 26 01:01:39 2026 GMT
Not After : Mar 27 01:01:39 2026 GMT
Subject: CN=0411f23ad37359eafe146c85bafbbdded34d8b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:f4:27:56:eb:8c:5f:10:de:ff:74:9e:55:
78:9c:2c:4e:a4:0a:e5:ca:a5:b4:3d:6a:fd:27:42:
27:f7:33:47:8c:5b:f5:7d:fd:ad:12:88:f5:29:76:
eb:59:7e:3a:1f:d9:39:74:aa:3f:f4:46:8d:cf:3c:
93:9d:dc:45:67:5f:10:a0:1f:aa:ef:82:d9:0d:4b:
8b:07:34:2e:1e:46:9e:51:07:10:ef:8a:44:0e:99:
be:c2:ef:69:45:2c:af:6d:9d:f6:f6:18:a1:93:50:
89:1c:d0:c8:ee:10:86:d2:29:13:6b:84:e7:af:7e:
0c:8d:87:46:a3:88:31:71:35:93:6c:8d:51:da:02:
05:79:87:42:98:41:26:a9:38:4a:9e:b9:d7:54:bb:
67:89:73:be:8f:08:d5:41:71:f6:45:3e:26:88:17:
f2:1c:8a:bd:7d:87:93:2f:fe:e9:9e:16:1f:57:44:
e2:48:64:1c:dc:cb:24:ad:fa:8c:9d:33:de:f6:af:
70:77:0c:18:49:7c:a1:3e:80:36:77:0b:a2:f4:56:
a2:a7:67:a2:fd:1f:26:0b:0b:5c:d0:21:12:fa:5e:
b7:9a:88:55:b8:8b:06:41:0b:6f:24:d0:0e:c5:7a:
4d:9f:a0:04:61:a9:e8:42:ac:61:23:ab:b7:ae:94:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:F2:3A:D3:73:59:EA:FE:14:6C:85:BA:FB:BD:DE:D3:4D:8B:24
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:32:34:98:6d:f0:2f:6b:04:c4:93:d5:a0:c6:9d:7c:86:51:
ae:8a:f3:a6:47:ae:4a:55:01:be:27:d0:dc:a8:93:39:b1:b2:
cc:7f:08:40:2d:9e:a1:5c:c7:ff:aa:ad:9d:55:a6:d1:ae:f7:
b4:4c:6e:65:6c:4d:c9:8e:3e:13:fe:fe:04:18:97:72:e0:f3:
9c:cb:1a:4c:1c:40:9e:af:67:e6:08:5d:46:db:1c:ae:b5:de:
0c:bd:e4:58:95:1f:1d:2d:92:85:37:f9:9c:7c:a4:15:5c:09:
df:17:bc:49:5e:4b:ec:da:2c:1f:36:a3:b1:d9:de:66:72:e2:
f6:de:15:b1:45:a6:c1:4f:c0:03:78:b3:a1:b7:04:85:a1:0d:
1c:a1:f9:c8:3e:dc:57:14:6d:61:91:1c:06:fb:35:7c:58:bb:
96:9c:b1:d1:a5:31:d7:7f:3e:ae:38:88:49:40:65:09:ca:d8:
60:12:ef:56:59:84:62:d4:e8:4c:75:3b:de:c9:f8:a6:b7:e5:
40:58:2a:b7:b5:4f:41:d1:7a:64:4e:c5:75:8d:26:9a:96:17:
59:a3:84:bc:b8:a7:5e:f7:79:99:cb:ed:b9:10:58:64:bd:3b:
68:39:bf:ee:3c:b5:40:29:ec:dd:c4:0d:9c:a7:c7:4c:b6:72:
dc:0f:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:46 2026 by rpki-client