Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: 3trPpitbMvA8CWXJoZgK1Fw4x2QKx4yhO7zgqK9BqZ8=
Subject key identifier: 6D:72:98:95:B7:BC:31:5C:64:B6:EA:69:5D:4D:DD:23:72:61:98:92
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019D258380F1E78349794413CE5EED779555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: 8N0bB8zhl4dwFd8B0QmO+xmo+RqyaeFiVc3nOZ9lfuY=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:80:f1:e7:83:49:79:44:13:ce:5e:ed:77:95:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=6d729895b7bc315c64b6ea695d4ddd2372619892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:ac:2d:88:c8:24:40:a1:76:ea:94:f5:e4:
14:d5:9d:c9:ba:ee:4f:3f:8b:d8:ec:ca:e2:6d:b5:
2b:86:9e:7b:62:37:01:e9:26:44:ee:43:0e:e1:30:
1c:6d:26:1b:7e:f0:2c:fc:ae:dc:7d:b1:d9:41:72:
da:b9:7b:98:f3:41:f3:13:fb:1a:c6:ad:45:6a:ff:
98:4f:f0:da:30:5c:bc:51:e3:29:b2:dc:20:67:43:
3c:9d:68:57:21:80:66:0e:36:ef:9c:90:35:91:06:
22:83:4b:77:46:e0:08:a4:c9:61:fd:d8:15:aa:12:
bf:1e:e3:42:34:a0:dc:8a:1a:b8:71:95:56:e4:ba:
a1:44:95:8b:87:45:d6:55:01:5a:f3:be:08:a6:62:
5c:43:2f:c3:4e:88:7d:cf:31:fe:ae:b9:8b:a0:38:
0d:3e:f6:3c:ad:44:2a:c0:46:33:95:09:ed:4d:33:
a2:67:ca:97:bf:60:91:7a:4d:27:fd:99:0f:c2:28:
02:ef:a3:83:00:17:73:dc:96:77:33:44:11:d8:6f:
da:9a:25:5d:66:4c:99:ff:09:49:cd:f8:d0:8d:2b:
6a:1e:6b:9a:7d:19:a6:b1:2a:1f:4f:ef:69:24:55:
ce:0f:8d:a4:0f:9b:0c:73:31:6c:22:81:a0:5d:f6:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:98:95:B7:BC:31:5C:64:B6:EA:69:5D:4D:DD:23:72:61:98:92
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:97:2f:a3:af:bb:86:67:01:b6:0d:a2:bf:b5:1e:c8:88:
e6:69:9c:20:9f:20:66:89:ae:26:86:7a:b3:b5:81:60:79:5a:
15:b4:ad:2d:da:68:5a:fc:de:cd:c3:2d:12:83:a3:dc:a4:62:
5a:c8:36:ff:62:83:1d:f4:81:b8:3f:54:31:90:62:74:ce:99:
a4:4f:91:7d:35:7a:18:45:e3:51:13:e8:1d:4b:6a:76:7e:60:
77:87:08:52:1d:5d:4d:93:e8:0e:0c:9b:1c:de:64:9c:ed:be:
e4:5c:dd:3b:a2:55:d1:d1:dc:02:9b:61:3c:13:e1:51:b4:cb:
df:ed:95:9d:49:5e:80:c8:2c:59:50:0a:24:08:b9:64:83:29:
7b:cc:5e:50:a1:71:af:ca:1a:76:36:8b:5c:4f:02:81:bc:03:
a0:84:94:95:28:4f:4d:ac:84:a8:40:d9:fd:4c:86:bf:99:f7:
e8:77:f1:48:d3:87:74:a2:da:ff:81:10:9f:a2:27:aa:5b:b5:
f8:95:74:0a:43:06:42:56:ed:da:b3:2a:09:db:01:34:60:a8:
1e:99:19:ff:2f:0e:57:62:c4:78:ff:96:0b:65:8d:6b:cf:36:
37:f0:82:87:d4:6c:a3:0c:42:7c:13:65:2a:56:f1:75:d5:f8:
5f:fd:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:23 2026 by rpki-client