Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: 1IwDOSHQz1dAf6EuUQ2z3J+irxSy0/6ykFaoSB2103o=
Subject key identifier: 45:CE:36:AD:98:02:A0:32:19:13:AC:C6:1B:B9:94:B6:18:EA:DE:19
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019D262892E1A3258CE1CDA7AEBD09076FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 06F4
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: GxNglowBB-qM4SyLCUpB8DxSym4.roa (hash: cXQ7oNvmgTnLy87CiQWasUFcfBCcYezCe1uKaHJSwpY=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: fVwgLJdpbIjGRs4KW6X7Y3sGTQnGC92Ew4qa38Vp1iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:92:e1:a3:25:8c:e1:cd:a7:ae:bd:09:07:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=45ce36ad9802a0321913acc61bb994b618eade19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:70:68:b4:ef:75:8c:f9:36:8a:a1:13:fd:
b9:0b:cd:e5:2c:4d:43:30:fe:5f:5e:f1:1e:8f:ed:
1a:d9:7d:83:60:58:e7:16:4e:dd:b4:b9:75:08:fb:
ea:4b:83:7c:2b:39:c6:73:cd:ed:43:a6:24:86:2f:
0d:77:d7:29:9a:8e:c4:3d:9a:61:84:13:1b:2b:a9:
96:a2:40:1e:c7:9f:17:be:dd:7e:13:67:c7:8a:19:
a1:e6:25:22:86:c2:a7:c1:4d:9c:79:2e:6f:07:e4:
b9:41:e0:aa:ad:19:0a:d6:70:d8:9a:c8:9e:d8:72:
a5:a6:0e:bd:b4:05:bc:89:f0:d4:bb:d9:1c:00:94:
d4:00:d1:62:1c:79:1b:0a:1e:65:4c:7f:74:53:5b:
3b:9c:1b:3c:9b:5a:67:6e:cb:3c:5f:02:e2:dc:49:
e8:43:18:3e:9b:51:5b:7b:ea:d2:48:a0:5d:98:f2:
39:6e:2b:e7:13:bf:1d:b0:bb:e4:64:94:ef:52:31:
46:50:77:98:42:d8:32:e1:fc:46:ee:d4:23:db:9d:
46:51:96:05:a1:c5:bc:68:75:76:42:11:0e:32:f0:
ce:db:49:25:d1:7b:a0:97:ed:fa:72:91:03:ec:0f:
e1:6d:fe:e6:8e:2a:44:21:65:f1:3a:19:74:9d:2a:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:36:AD:98:02:A0:32:19:13:AC:C6:1B:B9:94:B6:18:EA:DE:19
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5e:61:e2:8c:b7:5b:ae:3a:ff:83:ea:e8:95:9a:39:82:dd:
cb:51:ab:fe:da:0c:49:3b:c5:b0:45:9f:c7:df:5b:7c:1d:9e:
4d:29:e5:82:8c:77:c8:86:62:51:cb:cf:8b:a1:a7:0a:47:36:
a2:fa:05:8a:a6:ad:a0:ce:38:d9:cb:9f:03:2c:82:f3:c1:8f:
1f:bf:85:d2:7a:8d:53:76:11:db:30:9a:cb:4f:bf:f1:b1:01:
4a:a6:bb:70:b9:9b:92:28:51:d4:65:d1:4a:4a:23:dd:6d:52:
a1:98:26:22:01:8c:a8:53:ab:a3:b0:f1:5d:7f:38:b8:e6:c7:
3e:6b:c1:a1:2c:d4:9c:c6:03:82:19:03:8e:c3:c8:d9:73:2e:
1f:ed:44:40:8d:34:d9:80:44:3c:37:e4:a4:af:f2:75:70:46:
9f:a5:e4:7d:26:21:d1:9b:07:a3:f3:58:f7:99:03:8f:22:8b:
cd:df:66:c1:63:4e:7a:ff:d0:d8:87:bb:6a:99:b3:66:34:10:
7d:b2:61:9c:08:3c:3c:f7:9b:ba:b0:8f:95:c4:8a:91:9a:19:
d9:ad:66:85:66:db:a1:d4:2a:8b:96:1d:1e:ec:aa:05:06:a1:
81:e8:6f:a6:ba:71:11:33:76:76:9b:3f:3e:01:0f:e5:2e:fc:
cd:29:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client