Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: Ij8b0mr0PkosrzBYiYyMMkgIbaXUPK3Qv+1oHZ3JZWs=
Subject key identifier: 1D:3F:4C:3A:A4:DD:90:51:52:CC:6B:BB:0C:58:BC:A0:1D:FB:99:4C
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019D26CCA8AFF3CB949B4E0ED576D9857FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0E9A
Signing time: Wed 25 Mar 2026 21:00:39 +0000
Manifest this update: Wed 25 Mar 2026 21:00:39 +0000
Manifest next update: Thu 26 Mar 2026 21:00:39 +0000
Files and hashes: 1: 1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa (hash: shxMQ3h1iaMAoofuE3ugk4LgNhtgq4pRT6mevjRyS7k=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: GAZQ7oLwk36BkPC5QHSM6TtQDxsZ+NcH7k02SGm0kYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a8:af:f3:cb:94:9b:4e:0e:d5:76:d9:85:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Mar 25 21:00:39 2026 GMT
Not After : Mar 26 21:00:39 2026 GMT
Subject: CN=1d3f4c3aa4dd905152cc6bbb0c58bca01dfb994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:09:7b:2f:7b:f4:af:66:25:91:7c:e7:6d:
ad:57:b4:cf:29:91:a1:21:b7:6d:6b:06:65:cc:5c:
11:98:e7:e7:a8:ba:0f:f3:ba:3b:dc:d4:70:e0:ff:
4a:53:04:42:29:4a:de:dd:f9:cf:50:14:c8:a3:95:
81:f3:1e:18:15:d8:35:7c:5f:4f:3f:53:52:e7:88:
39:5e:10:54:ca:48:9b:01:f9:e3:8a:a9:c6:62:fe:
7e:c6:3e:60:15:3d:ab:f9:11:bd:46:44:fe:8f:dc:
14:09:40:86:25:c0:ea:6c:4b:99:19:13:67:18:86:
81:ba:75:b8:30:7c:66:8a:13:96:42:72:81:39:f5:
f8:1d:96:51:72:d2:26:2a:41:6b:45:94:04:f5:65:
04:b7:69:f8:4e:cb:d2:a6:63:93:c5:5a:00:2f:88:
b3:e1:20:93:e3:d2:8b:13:bc:2b:5a:59:5a:25:36:
44:54:f9:af:a6:9b:e1:24:fc:47:b3:38:86:da:50:
4a:90:5d:21:5b:b8:8d:bc:38:ad:c7:8f:65:41:a0:
68:38:f5:93:93:5a:3a:37:cc:3b:03:d4:fc:8b:74:
33:fd:9d:93:ab:7b:dd:fa:52:c3:8b:44:03:66:88:
2f:04:55:0c:71:32:6a:eb:5c:26:82:29:f5:d3:4a:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:4C:3A:A4:DD:90:51:52:CC:6B:BB:0C:58:BC:A0:1D:FB:99:4C
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:e9:4a:22:fa:31:5a:1e:43:91:87:4d:8d:1d:81:6f:c2:
9a:9a:73:f7:a2:83:6f:f0:cb:f6:0e:e8:ed:19:a6:55:65:b1:
a2:38:26:a9:14:62:fe:82:bd:8f:93:20:1c:a1:d8:d6:f4:0d:
68:7d:a8:94:f4:ca:a9:13:43:59:d4:14:75:9c:db:77:97:ee:
3b:7e:5c:76:6a:b5:a1:55:7c:4e:0a:13:65:4e:dc:7f:f6:e7:
cf:94:ec:dd:56:49:b4:cd:12:c7:35:ef:17:db:6a:86:95:aa:
d0:9a:ce:48:7d:04:af:2f:66:7e:64:bc:7c:32:a1:7b:3e:4a:
7d:19:d0:8b:ef:3d:78:a1:41:2f:59:a0:55:fa:4d:9c:18:99:
e9:05:bb:5f:d6:8e:e7:6f:84:ed:29:57:6a:1b:67:f7:f7:72:
af:09:f5:c7:1f:fb:77:44:11:90:09:19:43:74:7f:a2:10:c5:
e0:79:fe:1b:a3:d8:c2:30:e9:8a:92:25:c0:71:b1:05:cf:29:
8e:d9:b1:1d:99:21:b8:7e:4c:d6:c3:32:65:90:03:27:9a:31:
ea:ce:b3:b2:4d:97:ad:2e:10:60:ec:ca:8b:12:3b:49:fb:c2:
96:d3:8b:64:8d:69:2d:2b:f7:e8:53:78:cf:90:6f:5a:f7:7e:
da:9c:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:10 2026 by rpki-client