Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File: Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier: YHIH60sv4oe00/OC3UZgi5BsoTmk6InORdXA+4J1MO0=
Subject key identifier: EE:3C:20:D8:24:2B:62:75:8C:7C:5F:D4:41:72:81:AE:2E:53:FA:AC
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer: /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial: 019D26288F39808F531F7EF9C1E19C7174BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number: AC
Signing time: Wed 25 Mar 2026 18:01:25 +0000
Manifest this update: Wed 25 Mar 2026 18:01:25 +0000
Manifest next update: Thu 26 Mar 2026 18:01:25 +0000
Files and hashes: 1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: 9ZXwiRg3YxeHwDtR8QvoG+muUjx3pvf5zxoDF8nUSqQ=)
3: v5l5rLmhty_z4zNPYoM2CqX13sQ.roa (hash: iWmastkcHsmmH7pnaTSnEYzWRuOsX68BKyoXtSdp4wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8f:39:80:8f:53:1f:7e:f9:c1:e1:9c:71:74:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Validity
Not Before: Mar 25 18:01:25 2026 GMT
Not After : Mar 26 18:01:25 2026 GMT
Subject: CN=ee3c20d8242b62758c7c5fd4417281ae2e53faac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:2b:b0:3b:31:ab:45:e3:4b:6b:47:af:05:
71:8f:31:05:0e:88:38:14:4d:ba:76:32:6e:03:3d:
67:ef:b7:cb:e6:d9:c0:03:5b:e2:36:75:eb:78:01:
d6:67:4d:c1:fe:54:82:18:ba:72:0a:12:c3:c7:0f:
4f:da:8f:95:35:bc:28:5d:9a:71:51:37:ed:bc:3e:
58:3e:ba:85:ee:e3:27:d0:7a:32:59:6d:eb:d6:ab:
d4:80:33:41:a3:f5:6d:a4:ed:dd:96:34:3e:0e:d6:
1e:7f:92:ea:41:6b:d9:d5:02:be:f0:c5:cd:b2:8c:
7c:6f:85:e2:fc:6e:c7:7a:26:93:bb:db:39:d5:3a:
99:dc:14:89:d4:ac:c4:81:c0:d3:ac:5d:74:75:6f:
33:63:6d:e6:23:6c:33:62:e4:be:18:b2:97:9b:3d:
e6:b2:f5:0f:e5:df:4a:45:2f:b0:31:4e:58:0a:b5:
7a:02:04:8d:c4:73:dc:1d:2e:c1:bc:4d:a5:5a:9c:
54:a6:f5:59:3c:69:75:15:e1:f0:d0:5d:0a:2c:39:
05:5c:fd:37:5a:28:a7:35:6a:aa:30:11:81:97:2f:
31:e5:63:60:39:a2:ba:0c:5b:f7:6f:6e:df:d5:12:
21:fe:58:f2:70:79:c6:81:fc:e7:c1:99:8b:b4:08:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:20:D8:24:2B:62:75:8C:7C:5F:D4:41:72:81:AE:2E:53:FA:AC
X509v3 Authority Key Identifier:
keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:64:c0:3b:a0:bc:e5:d7:7a:1b:84:38:30:bc:de:80:a6:
e6:3d:37:37:01:3f:34:60:b5:bc:1c:83:50:33:be:c4:00:1e:
a1:46:4d:88:e4:26:79:68:f5:c9:dd:bd:32:80:8c:11:09:87:
58:4d:ab:16:bb:26:b4:97:3e:c6:97:a2:1c:15:ff:70:04:bf:
23:18:2e:a4:8b:b3:49:df:bf:14:a9:91:c9:bb:a7:e5:4d:7f:
dd:16:bd:c1:e8:60:75:a8:af:18:0f:40:6d:ab:f4:55:fb:d7:
c9:03:47:19:01:8e:0b:e7:dd:98:be:49:7b:af:cf:52:f3:ac:
ba:f6:63:97:9d:ec:1a:59:43:af:6c:5b:22:f2:77:91:27:ab:
a0:6d:8a:9f:9b:6c:97:f1:a9:b9:17:b0:ce:6a:f1:91:cf:18:
8b:1b:7d:51:af:b7:65:97:ff:25:9d:d6:da:c0:fb:cc:d0:98:
24:cb:90:f2:fc:d1:84:1e:05:6b:b9:fb:bf:49:7c:cc:1a:b4:
c9:5c:28:d0:18:4b:64:8c:1a:5b:92:c7:45:28:d6:41:7f:4c:
8e:73:c9:a1:25:82:17:5b:a3:1e:38:22:6d:32:c6:16:44:31:
ae:15:4f:88:11:5e:ca:d3:22:34:e5:aa:1f:33:14:ea:de:04:
25:d3:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:37 2026 by rpki-client