Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: tXl37ICijbbhEqSgHfwCB8oZPJfNrf27FDGa+YhxkAI=
Subject key identifier: 7F:38:6C:B6:19:5A:CF:F1:D3:21:AD:06:ED:8C:6A:F4:B5:3D:9D:62
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019D25F0EBCBB1290B1D67B57B60A0D45AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: kRt9bUyJdFBB9Urf88wqGCyD9z8.roa (hash: ru+g8q6Q2p0jDg0nGr5M9c3LVV0Tl9BDqYju45TyK18=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: NPnxb565pWReQ5oaM4sFrrFfzcpZ/4/v2GL1n0msqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:eb:cb:b1:29:0b:1d:67:b5:7b:60:a0:d4:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=7f386cb6195acff1d321ad06ed8c6af4b53d9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:42:19:7e:8e:ef:ca:74:4c:8d:8f:05:64:
2f:fa:95:2a:03:2c:ec:95:7e:29:d8:9f:ee:1e:69:
bc:08:1d:4b:9c:a4:4f:fd:bc:e2:99:ad:bd:b1:02:
6c:db:75:7f:be:8c:21:b5:83:59:c5:34:9c:48:f0:
32:2c:5e:86:0b:1d:93:e2:fd:11:d3:4f:c2:89:02:
d8:47:45:d2:af:cd:7c:fc:ec:a2:78:39:86:57:14:
13:62:65:07:e5:ea:4f:27:e1:27:49:35:6e:27:bb:
9a:ac:17:45:7d:2e:2f:81:3d:00:b7:f9:42:e7:32:
ce:7a:fc:bd:79:ee:26:37:ad:10:fe:09:67:83:11:
b6:ed:3d:dd:32:bf:56:97:5d:94:18:6c:e1:f2:1a:
8a:5b:e4:ef:b8:54:40:46:ac:2f:bd:bb:d2:57:e8:
09:ad:2a:e2:49:25:65:f2:13:4c:2f:5f:62:96:1c:
48:b8:aa:b6:7c:fe:44:21:69:ff:9e:9a:a8:44:7c:
97:da:bd:c5:e5:6e:e8:dc:8e:97:65:7c:4e:b7:1a:
ed:74:9b:0a:7f:90:3e:1a:b0:9b:ca:6d:a4:85:e6:
31:56:31:ce:9f:99:47:70:a6:d2:4a:01:b1:81:12:
95:c9:37:eb:93:da:17:dd:30:68:8b:c9:ae:98:a8:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:6C:B6:19:5A:CF:F1:D3:21:AD:06:ED:8C:6A:F4:B5:3D:9D:62
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:54:a3:40:58:c1:50:ce:d9:24:e7:69:5a:e6:15:e0:a9:c0:
e2:df:07:ff:44:9e:00:ec:f9:33:67:4a:af:ed:4f:f1:89:48:
c6:c2:23:c2:51:9b:15:ac:f0:7a:14:d0:ac:95:18:a9:f8:46:
53:55:08:35:e0:84:51:bc:99:cb:a8:d8:b9:16:d2:23:93:7c:
ba:f6:9e:7f:23:24:6a:bf:48:f6:86:fd:95:61:b5:f8:2e:43:
fc:1e:ca:88:0c:e7:0f:cb:de:e6:30:ac:97:43:fb:8f:76:45:
16:22:53:1e:c8:83:52:3b:25:ce:48:af:1d:62:cf:73:98:6e:
9f:60:d6:af:65:81:c2:b2:dd:ce:a0:91:c2:74:6c:68:7a:e6:
58:68:8b:9d:4a:47:40:94:eb:62:c6:2d:ec:2d:d7:bb:19:bf:
8e:02:8f:f4:6b:0c:d5:97:9e:b7:1f:52:65:0e:dc:0a:18:61:
fb:37:10:94:7f:e1:42:c1:a9:32:ee:a1:19:b7:b5:87:69:d1:
78:ca:b8:8b:4f:49:72:0a:e4:d5:89:69:60:d3:69:ab:fb:70:
65:88:13:95:cf:d7:0a:20:2d:6d:3d:f2:1d:42:7a:e2:94:16:
34:b2:b7:ca:f6:b6:e7:70:08:71:8e:69:60:62:69:64:a5:d7:
33:07:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:59 2026 by rpki-client