Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: TSmyo5NaruLCRh32fLGmSih5Tc4HBmflJeriPhaHMBE=
Subject key identifier: E0:59:DE:1C:D5:99:03:3A:BB:97:E6:D9:19:E1:BD:11:D2:D7:A8:90
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019D2A3B7015CBA5FFBE91E228F775467343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0E89
Signing time: Thu 26 Mar 2026 13:00:31 +0000
Manifest this update: Thu 26 Mar 2026 13:00:31 +0000
Manifest next update: Fri 27 Mar 2026 13:00:31 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: mo0twRpnbvKoloIRiDibQICl6ZyifOcQP5rDIUjRzUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:70:15:cb:a5:ff:be:91:e2:28:f7:75:46:73:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Mar 26 13:00:31 2026 GMT
Not After : Mar 27 13:00:31 2026 GMT
Subject: CN=e059de1cd599033abb97e6d919e1bd11d2d7a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:f0:a8:5c:52:fd:87:96:9d:a5:65:d0:5f:
a9:45:ef:51:31:0e:37:fb:1a:4e:5d:9b:f2:24:e5:
c3:7c:7a:0a:34:fc:fd:f6:52:87:4a:1b:18:3b:d2:
18:b6:84:c7:bb:b9:5e:e1:1b:b7:8c:0c:e0:1e:a6:
92:43:38:04:58:9f:58:91:54:dc:7b:86:65:c6:8e:
41:4f:34:c5:42:6d:53:c0:1b:fe:4c:04:84:b6:51:
cd:b2:88:41:24:2c:da:75:b9:83:c0:a3:5b:3f:39:
5d:8a:65:3c:8f:6d:d5:1f:cf:02:14:14:62:e4:7c:
40:d0:cb:5d:4d:f0:a5:42:b9:84:d5:65:82:37:02:
bb:81:b3:12:a0:49:39:85:2f:24:6b:64:a8:83:9c:
1a:d7:49:20:03:d1:0b:a9:d8:20:81:a9:49:bd:7d:
07:b0:3a:91:fa:8e:d6:61:a0:02:d4:ba:af:d7:97:
d9:94:01:b4:bb:dd:08:4b:cf:a2:d5:d6:71:af:66:
c0:33:a2:e0:11:72:96:6c:c8:82:cb:c3:3c:59:05:
2f:3c:bd:fa:17:29:1f:05:a0:3d:b7:ab:e3:9f:55:
52:80:bd:1b:7c:8c:d3:c2:15:73:2a:3b:ce:39:c8:
c8:6c:e7:8a:18:a8:58:28:41:81:d3:24:9a:d1:a5:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:DE:1C:D5:99:03:3A:BB:97:E6:D9:19:E1:BD:11:D2:D7:A8:90
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:53:86:b3:ad:dd:ab:73:c2:38:1e:2d:45:c7:9c:96:8f:
b3:ea:6d:fd:3f:1f:db:09:08:41:72:a2:ae:90:96:e0:2e:c9:
b1:89:55:2b:11:d1:5d:60:7c:91:31:b1:16:d6:01:d5:ad:57:
ed:e3:af:c4:56:d9:95:71:e6:44:06:cf:e9:b5:51:fc:6b:d8:
81:56:2b:48:29:82:45:cd:29:26:4a:68:99:81:03:79:84:df:
f4:30:c6:0c:9e:e0:39:f8:4e:4f:35:d4:56:34:65:78:0e:b1:
55:5d:ea:f8:d1:87:2b:fb:04:e3:71:34:00:ba:10:2a:95:aa:
0d:bf:cb:63:e2:59:96:2d:52:bd:f0:5c:62:b3:9e:df:80:15:
1b:6e:6e:d9:e4:d7:08:ec:08:f6:4a:50:52:9b:48:44:64:30:
15:1e:f1:fe:4b:e0:40:bf:66:09:13:44:db:87:d8:e0:f3:2a:
2f:c8:26:36:5c:65:c0:4d:d3:c3:86:a7:b9:51:af:9a:47:85:
27:fe:3e:ed:f0:dc:e4:2b:4b:fd:99:a2:d0:4f:d2:52:47:7f:
d7:bb:96:25:28:18:6c:57:ee:d2:74:e7:d9:d8:64:14:74:ab:
cd:db:7e:6a:01:19:97:eb:bf:58:19:a5:e5:3f:25:62:a8:ab:
ca:3c:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:41 2026 by rpki-client