Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: aN/9hODbzB2GO6NELsYqfYMlMZcPbkCtzT2IlHQcm3w=
Subject key identifier: 71:12:A3:09:DF:A5:A9:A6:43:3D:8C:DB:8D:4B:1F:29:35:62:69:E4
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019E1EA2F7DA7A6A2355CB281C1D7CDD92F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1832
Signing time: Wed 13 May 2026 00:00:57 +0000
Manifest this update: Wed 13 May 2026 00:00:57 +0000
Manifest next update: Thu 14 May 2026 00:00:57 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: CUlkP+QJsp/Gcn5fz+iV6P+KGjaG7jKBTNNP6/KYYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f7:da:7a:6a:23:55:cb:28:1c:1d:7c:dd:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: May 13 00:00:57 2026 GMT
Not After : May 14 00:00:57 2026 GMT
Subject: CN=7112a309dfa5a9a6433d8cdb8d4b1f29356269e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:25:99:3f:e4:59:ed:57:cd:dd:6d:a0:98:
bc:9d:87:39:ee:f2:c8:41:d0:a3:ab:3f:c0:ee:f4:
ab:f6:4d:e6:a4:85:fb:56:0f:0f:a6:02:23:b5:bc:
6e:d3:6d:68:cd:17:91:90:eb:8b:7c:d6:60:fc:8a:
24:03:db:f2:98:84:4e:d4:5d:b3:96:58:71:17:63:
9d:ea:4c:bb:20:ff:0e:ab:54:e4:08:a0:06:e2:1e:
b0:75:e4:9c:49:c4:88:69:f4:10:31:e1:96:51:9e:
c9:f9:8c:9a:7a:5c:f3:0e:fe:5e:71:02:16:d2:59:
bc:02:fd:b9:de:60:89:c9:2e:2e:ee:3e:45:23:b8:
8e:b5:f2:83:90:3a:9c:4d:75:f3:ff:3e:89:4d:e0:
33:07:05:41:8c:b1:94:40:d0:6b:29:6f:aa:9c:bf:
03:c8:76:8d:4a:b2:09:a3:41:74:af:77:3c:c1:d7:
b1:63:12:f7:a9:08:cb:4f:fe:60:8e:95:d5:1f:bd:
fb:03:8f:66:44:8b:e3:19:96:91:ae:49:25:c8:88:
07:55:68:27:21:c4:6e:ca:c6:77:07:ff:da:c3:d6:
42:90:59:55:65:1e:a7:bf:c3:b4:a3:42:70:19:7b:
70:8f:26:5d:40:5a:08:5b:56:43:03:48:04:25:16:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:A3:09:DF:A5:A9:A6:43:3D:8C:DB:8D:4B:1F:29:35:62:69:E4
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:97:b8:58:31:a6:ba:c4:89:e2:15:d1:97:e0:ef:6c:40:1d:
9d:52:38:fc:3d:28:2f:4d:77:3b:22:b2:8c:56:6f:88:a7:db:
82:d5:1c:77:51:6e:d0:71:b5:ea:92:3e:90:47:91:3f:43:8a:
b3:a5:ab:e2:09:3b:c0:a4:af:c8:c6:f6:7b:63:c9:01:82:64:
51:45:f5:77:37:17:9a:f0:92:d9:03:a1:0f:8e:35:43:15:5e:
af:92:9c:0f:fe:df:69:76:5a:0b:cf:93:2a:f2:dc:51:b9:9a:
a5:04:88:ef:dd:b6:e8:1b:2e:ad:33:96:09:d5:c1:ff:17:1a:
18:6d:96:7a:6a:bb:00:89:a8:1b:f6:aa:31:b7:3a:be:38:43:
97:e2:84:80:e4:87:6e:82:a4:6a:bc:48:dc:63:e8:a3:47:69:
fd:37:78:27:ef:14:b9:c2:a2:16:9f:3f:be:56:e0:4a:3e:78:
75:68:b4:60:1c:8d:e9:52:48:9e:2f:9e:0d:d0:21:ef:5c:6f:
4e:ed:a6:8b:b6:31:0d:cf:c8:37:78:1b:a7:1e:5c:99:9d:fb:
9e:24:0e:7e:1a:cf:45:ac:9e:1c:c9:4a:e9:82:2e:a5:69:fb:
c6:8d:eb:dd:1d:0e:df:4a:7f:6d:50:4e:fb:e0:d9:d2:92:4d:
9e:d4:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:12 2026 by rpki-client