Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: yhEn6DAW/vZRaQ+egWsWHDw/lZf9VOCk5qdsPxS5xvE=
Subject key identifier: DF:7F:53:28:19:8E:B6:6A:CE:E1:D2:88:40:A0:3B:B3:1A:CD:BE:75
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019D27A913032B8743D5A2400E91BEBD4377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 12EC
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: EXVPboiDiATTjT5hBp6J/N6G6b2rmh7zkSCcb38q2OA=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:13:03:2b:87:43:d5:a2:40:0e:91:be:bd:43:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=df7f5328198eb66acee1d28840a03bb31acdbe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:ac:0a:dd:be:31:c6:17:a8:38:cb:2e:81:
10:88:0a:c6:b5:05:12:6d:24:2d:64:4c:a4:76:3a:
2b:d6:e2:60:83:82:d4:4c:a4:2c:a8:7b:e1:3f:06:
d6:3d:42:f8:70:c8:dd:e1:45:ee:43:75:b8:00:b0:
2f:34:4e:40:b8:93:e9:83:6b:8d:84:5f:6f:1e:f0:
e5:20:a7:02:d5:0a:e0:8e:b2:03:c3:95:53:77:a8:
68:ce:d5:17:83:58:5a:46:26:10:4e:72:7d:7a:40:
12:51:a3:20:02:ef:78:7e:30:0c:8c:18:85:9e:8f:
8b:67:8d:0e:8b:e1:50:1d:50:ae:d3:41:9f:cc:ad:
c7:70:6b:b3:43:98:99:9b:97:c6:22:7b:2d:d5:90:
7f:6a:7f:bb:4f:6a:43:ec:4d:3d:73:79:08:ba:fb:
2f:d6:f9:38:80:67:52:86:45:d6:fa:0e:83:8b:a2:
48:4f:ba:50:4a:3a:04:48:21:11:13:c9:8e:49:ed:
73:3b:6b:fa:75:fc:d7:47:99:a0:63:33:a0:ce:8f:
60:be:30:d3:a7:b4:ba:98:7c:d0:63:f1:d2:37:ab:
4c:81:a6:38:dd:6b:07:86:62:b5:39:73:30:e6:72:
d5:0a:c1:d8:ab:08:93:c1:c3:96:d9:60:d2:6a:9d:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:53:28:19:8E:B6:6A:CE:E1:D2:88:40:A0:3B:B3:1A:CD:BE:75
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:80:96:a5:b2:b5:75:25:d2:3c:df:6f:36:92:06:80:0c:
6b:77:be:9f:b4:8f:53:46:4b:aa:c9:1f:f2:90:99:83:0b:94:
a3:6b:61:11:86:62:96:a0:08:2c:f3:77:c8:7e:89:51:a2:ef:
50:0a:47:72:f0:b8:bc:0d:65:b2:13:2c:41:2f:21:97:a9:a0:
3e:e5:13:af:27:f4:99:76:ba:95:97:1e:3d:4a:02:6d:bd:94:
fc:ff:f4:d6:99:8b:09:47:66:09:48:d9:99:f9:39:e8:62:ca:
45:16:32:be:dc:6b:1e:2b:19:8e:23:d2:c8:a6:b3:fe:de:54:
54:0f:3a:72:f4:b6:09:79:63:80:da:3f:67:82:8b:31:3e:10:
eb:78:d6:7f:fa:ce:af:14:d6:dd:21:06:76:a9:2a:55:54:b8:
fa:c2:b8:eb:37:f6:f7:2c:5c:2e:ea:46:f3:d3:5a:4a:fc:d1:
64:c2:88:15:9e:ef:85:1d:ad:d7:b5:22:99:1b:09:b9:1e:36:
f0:12:43:73:04:8b:f5:12:b4:f3:92:60:67:82:db:03:46:2c:
5a:9f:3e:1a:1c:9e:dd:b7:3a:39:99:e2:16:eb:63:c6:eb:28:
cf:65:54:0a:81:2a:6a:6a:74:ad:49:aa:97:5a:92:e6:63:15:
04:ba:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:58 2026 by rpki-client