Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: TRXl7G+aqGHoDN2rYDlWaYK5ZfaOVpeL8nqpgV3HnrA=
Subject key identifier: 2A:3A:DE:C1:A7:DB:A7:D4:D0:B3:94:61:61:65:33:14:2F:4E:01:17
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 019D25BADBFA3C7552655F13BF635956D19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:36 +0000
Manifest this update: Wed 25 Mar 2026 16:01:36 +0000
Manifest next update: Thu 26 Mar 2026 16:01:36 +0000
Files and hashes: 1: 3O0Jx2Z7uS77XzKQjDLJgefRDU4.roa (hash: mTSPl2/i72Uzjsz/bmIER2rP7ZrpmVRXp35zfMqJjrs=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: obssbfbYWXT7fP4gk7p0L1G4mwsKD7Ffw2wAummAtuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:db:fa:3c:75:52:65:5f:13:bf:63:59:56:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Mar 25 16:01:36 2026 GMT
Not After : Mar 26 16:01:36 2026 GMT
Subject: CN=2a3adec1a7dba7d4d0b39461616533142f4e0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:be:f5:3f:25:0e:c6:b0:06:df:f3:27:c6:
d4:9b:4b:eb:ba:7f:0b:7b:7e:b5:8a:a0:1b:f5:e3:
24:fa:d7:36:ff:6f:01:ed:1e:c2:fc:33:5e:fb:c7:
d8:d6:cc:62:77:3e:94:ee:5e:0b:e8:d2:8b:7d:99:
a3:57:3a:2c:f6:16:c9:7a:60:39:d5:a7:3b:8f:de:
aa:33:46:4e:fd:5f:2e:12:25:a6:17:f5:4c:d5:40:
f4:c6:41:27:61:a7:87:cd:da:b2:20:f5:c5:07:76:
ba:90:b9:bf:0d:49:4a:1a:33:f8:fa:96:95:b7:ac:
22:7c:e7:b4:e2:76:a7:10:59:77:80:f6:73:bf:4b:
9e:ec:17:a2:66:fa:84:43:ba:9d:b5:fc:d6:5f:e5:
58:39:a2:66:26:f9:b4:26:c5:16:7b:87:32:a5:82:
a5:e7:e3:9c:cf:51:37:81:d7:74:a9:5b:32:b3:a3:
69:03:49:6c:e6:a8:14:22:b6:a7:75:3e:40:d3:be:
88:58:50:e9:62:10:35:19:e0:66:6f:3c:3f:5d:7d:
26:59:a9:15:4f:91:46:7a:2e:4e:46:f1:04:6a:48:
ab:f8:60:b6:5d:5a:97:87:b0:8f:a1:2f:f5:5f:60:
cf:99:46:58:f6:fe:b2:3c:31:ec:a4:7e:bd:7b:94:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3A:DE:C1:A7:DB:A7:D4:D0:B3:94:61:61:65:33:14:2F:4E:01:17
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:48:3f:06:92:89:4c:5d:a6:ac:9d:7e:59:8d:0e:67:f7:75:
ee:03:7e:8c:bc:45:d4:b1:d9:1b:71:2c:08:12:81:30:6c:3f:
1c:dc:84:b3:6e:09:e7:5e:80:77:87:af:b4:97:2c:31:3c:05:
17:82:27:30:fe:ad:dd:78:5e:2e:36:30:10:e1:5b:17:46:91:
70:90:ab:6d:77:c8:8c:b0:a4:88:e6:9f:02:55:81:b4:8c:59:
9e:27:82:e7:4d:6d:07:8d:5f:cf:0b:54:12:5d:7a:1d:aa:18:
58:5b:4b:bc:c4:bd:4d:46:74:c0:5c:a5:3e:9f:82:d8:a7:66:
0b:66:19:02:34:70:4c:ec:33:0f:ad:9f:98:74:8f:3e:b8:b7:
69:0c:a2:b8:3d:59:63:65:30:61:8b:e5:d7:ce:3a:90:71:ba:
8c:e9:14:3b:52:5d:f7:d9:3f:e7:16:d9:9d:e1:f7:44:c1:97:
de:42:12:d3:c6:84:c6:84:19:69:89:55:b2:06:66:d1:b2:9d:
5e:e9:0f:7b:9e:7b:fe:17:47:09:5d:78:5a:5f:a4:52:84:85:
3c:c0:dd:8b:de:0f:99:28:2d:21:8e:2f:23:d0:2b:27:b5:82:
99:f6:1d:75:83:f9:f2:d2:1a:ee:9d:cb:f9:82:bd:06:40:f3:
6f:51:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:51 2026 by rpki-client