Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: HTTmUGySE54xnw+R8DVrEMh5rwqpxIlJ3jOl1B5vrKI=
Subject key identifier: 72:C8:86:34:C9:65:16:72:A5:B4:DA:E3:1E:C6:51:F9:05:F1:11:0D
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019D284DD6100CC251986D037CB5547109EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
2: M6YDzlZVr545-NRDZbfv7XkNikA.roa (hash: vga3ADtyJ30uY+qd7xLsXyiEJYmB+7pvZRn567PTxOw=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: Wh6Y090bIo316QxG7RgiWEh2wFbhOciM5RpR9aTW0YY=)
4: mGYiLhfQNyctSYzl32C3_8pgLyg.roa (hash: 8HmTTsNkpzWmVIPPrtxGzEKkk0EjZwa9jEIOmHI0uZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d6:10:0c:c2:51:98:6d:03:7c:b5:54:71:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=72c88634c9651672a5b4dae31ec651f905f1110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:b7:d3:d5:74:7f:4b:66:c8:e9:9f:6c:e1:
76:f6:07:52:77:10:26:82:0f:fc:b9:4a:d2:11:40:
17:d3:9b:71:ef:4a:2f:5c:e3:85:82:4c:a1:26:29:
bd:67:ec:7b:f3:89:32:79:47:92:d8:01:b3:3b:c6:
27:c5:26:4f:60:ea:75:e9:ea:50:33:c1:89:45:ee:
33:86:8c:5b:29:0b:74:63:a7:f3:80:58:03:6b:87:
6e:82:ac:15:a8:57:0a:f6:71:a6:c4:04:31:e9:f1:
8e:8f:06:84:5b:d8:1a:3b:01:1c:92:75:59:4a:5e:
6a:df:a7:c7:49:25:f8:bc:e3:4d:25:78:0e:de:7c:
92:eb:d4:97:7c:21:76:a0:ed:53:03:11:4c:6d:ca:
25:5e:48:b7:33:ac:13:50:82:7b:7e:94:f1:29:ac:
70:78:80:49:e4:d0:7c:e5:e3:bc:c3:7b:1d:c9:60:
53:6d:6a:8d:1b:61:3c:1b:86:10:71:79:b8:7c:62:
3f:ad:bd:06:af:55:67:2c:6f:96:25:ba:87:bb:38:
fc:c1:ba:ff:88:39:47:44:e2:43:a8:66:76:dc:b7:
d7:45:e9:f9:ce:34:3c:44:5d:b0:77:75:00:a9:76:
69:7b:7b:a7:ec:97:7d:25:7a:3b:21:74:5b:75:cf:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:86:34:C9:65:16:72:A5:B4:DA:E3:1E:C6:51:F9:05:F1:11:0D
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fc:ae:8f:76:69:78:05:ba:d1:a1:34:ea:0f:ea:68:5a:4e:
b4:7a:3c:0f:f0:1c:60:8d:38:8d:da:c0:64:08:4d:a7:ec:78:
84:d7:79:dc:8d:2f:de:ea:89:04:1f:18:13:34:fc:1f:8b:6f:
09:08:c1:2b:89:23:2d:13:ca:ae:b2:7e:9c:9b:b2:6e:ca:1f:
a2:f6:bf:9b:16:94:f2:39:f3:af:04:a3:fd:4b:b2:4e:f0:89:
19:47:9e:79:01:92:3a:16:67:27:2c:19:48:d9:bb:37:97:3b:
2f:0d:ab:3f:73:52:03:80:ef:4d:67:0f:f5:5d:8c:90:3b:f3:
78:6c:8d:39:50:8e:b9:d8:c0:f3:68:b8:95:cd:b6:78:c2:8c:
e3:41:8d:54:68:c9:92:26:9a:aa:2c:ba:87:94:55:d1:14:d2:
71:ab:86:46:fe:6e:ed:64:80:b6:42:88:b9:42:b6:26:ca:a9:
64:4f:11:14:d9:bf:49:65:a2:d4:6c:c1:84:a8:4d:2b:68:f0:
91:f2:64:5c:34:19:e7:1c:41:bd:82:ee:af:bc:03:ff:7b:11:
14:46:74:bd:0d:ac:99:76:f7:fc:e7:7c:d6:96:94:92:ba:f5:
4a:a5:6c:39:a3:4a:b6:d0:1d:f8:ee:f3:fb:c4:ad:ce:44:ab:
02:46:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:16 2026 by rpki-client