Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: ivXBtGxCdny51Ct+wivGMl/QUIwbaD0AjK/8QsovAt0=
Subject key identifier: 30:E7:13:F1:A4:82:4B:53:C5:29:86:23:C1:15:44:0B:8A:27:AC:A9
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019D2960B6B880C827EF6EFA2CF5246F3207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 17B3
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: 7ES16QBJiTF65MGzhqXwtzSDMcIlk3JpgFZwBeGYNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b6:b8:80:c8:27:ef:6e:fa:2c:f5:24:6f:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=30e713f1a4824b53c5298623c115440b8a27aca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:dc:ba:35:43:a3:f9:b0:97:9c:87:19:d0:
93:bd:57:6f:ee:6d:7f:ef:b3:a9:b6:94:44:cc:fd:
a6:79:c4:16:f6:46:b6:c0:90:52:26:11:16:4b:18:
26:4b:8f:84:42:e0:ea:ae:ec:1f:43:d1:ce:e9:1a:
a0:1c:f5:43:40:fa:36:03:ab:d5:1b:6b:b9:e4:49:
05:82:68:80:a1:b4:0d:1c:ea:2c:52:a5:4c:fa:f0:
16:93:4b:07:04:8e:fc:7d:55:8f:32:5a:11:ad:1c:
c1:22:8c:b6:cd:69:a8:e2:8d:f5:10:86:58:11:1f:
7f:07:96:08:e2:3d:79:21:18:b8:96:38:9d:32:15:
56:32:16:c1:4a:09:2f:44:d4:bb:65:94:a0:99:86:
19:4a:54:c3:dc:07:47:71:ed:b3:a1:5f:33:93:97:
38:e2:a1:d7:4b:68:77:06:b6:8e:a4:aa:eb:95:36:
b6:c6:f1:6a:0b:2d:6f:33:8e:ff:08:79:78:6d:70:
f9:57:be:f5:73:da:d1:79:ad:43:d0:34:1d:46:fb:
d2:47:59:d9:93:cb:97:31:05:9b:e1:a3:e2:d2:e1:
d9:89:dc:9d:25:39:64:45:f1:85:35:1e:b3:70:16:
6f:0a:b0:30:1f:1b:21:9f:10:77:bc:0e:ca:8a:70:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:13:F1:A4:82:4B:53:C5:29:86:23:C1:15:44:0B:8A:27:AC:A9
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:f4:39:cd:8f:ac:78:fc:2f:74:90:b4:be:0d:06:00:58:
9a:f6:2b:b5:f8:73:5f:58:dd:99:ba:51:27:e0:e1:ed:28:c8:
bc:2d:72:20:44:1f:d2:86:0b:e4:10:26:4c:3e:eb:00:12:4d:
2a:bb:13:77:a2:cc:28:70:ff:9e:8e:ed:a9:5a:74:4a:41:d0:
90:d2:b4:7c:63:0c:6d:c0:36:d2:84:59:ce:23:da:a2:43:d4:
03:3f:08:e7:23:1f:ce:79:d6:8f:3f:6f:80:6e:c6:57:4d:d5:
b0:be:14:0f:e8:05:ca:c8:3c:ef:1e:7e:ae:98:2b:b1:9d:c9:
4c:2a:96:5f:3e:d6:12:eb:c2:ea:b1:0a:93:33:6b:bf:eb:9d:
1e:fd:7c:7e:27:98:fc:af:c1:68:b7:5d:ce:bc:c7:83:53:28:
cd:e4:6a:93:89:ca:d8:9a:37:78:72:ab:e7:23:2a:32:e9:a2:
a9:70:86:3a:a7:eb:80:13:7f:d0:43:a7:61:f8:c6:4f:0f:d7:
e6:32:fd:e9:57:78:80:49:a3:7d:07:6e:d4:9e:1d:14:b2:68:
38:26:c7:72:9f:64:3d:f2:09:ae:fa:67:e4:76:bf:fd:c6:36:
2c:85:2d:28:54:ec:2f:1b:f2:14:51:3c:85:11:08:07:e3:6d:
2a:e5:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:51 2026 by rpki-client