Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File: y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier: yJ67/n70kls3I8S6T2w40VyfH6MCXDg4xEe/RmIMHZg=
Subject key identifier: 68:29:A8:63:D3:0D:6A:68:65:8B:E4:B2:C5:05:CA:CB:3C:2B:F4:7A
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 019D28BB94EC15A80C8152701FD9012CC609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: gTn5FRcz1WjHbFIUzmESIJRxMLs.roa (hash: 3+4+41QBJiY0s+CghRUoKRon+yDRu0Zt5Sbg75kXtZc=)
2: sxT3f0dvZnHHcSZ34lCIOZ9GuVw.roa (hash: pBbjOXEXTBhzJuJASEYw2dI37yzvRUATFTwvTf15Ndw=)
3: vx4wFGxK42R6qe2Ojjm-3TboKKQ.roa (hash: sq7lKfoyNzXqh8ifJ6Y3jNbECu87UDlvl3/h5jz4zpo=)
4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: e4yQTNmN9kOl/zhRoZyW9rNI4qNayutiibCV2D0/a8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:94:ec:15:a8:0c:81:52:70:1f:d9:01:2c:c6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=6829a863d30d6a68658be4b2c505cacb3c2bf47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:43:bd:d0:0e:8c:8b:3c:42:fd:20:83:f4:
15:18:c4:de:d9:10:65:33:3b:cd:95:34:75:bc:2d:
76:17:aa:f4:46:b5:1d:3d:24:62:71:3b:5e:0e:61:
bf:b1:a9:0c:f7:b4:7e:2a:c1:9f:8a:d6:a0:d2:44:
76:06:23:0a:41:3e:85:75:37:66:57:66:f8:db:08:
68:75:1a:aa:22:92:7e:e4:91:0f:97:08:7e:ed:ce:
1d:4e:34:48:21:19:e4:b7:b0:e7:40:66:4e:a0:c5:
bb:06:75:fa:89:89:87:fc:0f:8d:dc:99:cb:a6:2f:
27:22:8a:b5:e1:ca:57:01:ac:3d:c1:30:0a:d0:d1:
2c:2a:48:70:32:8c:e1:cd:74:32:0d:2b:ed:d1:86:
d4:46:a4:26:2b:e1:a1:6f:af:29:6d:f3:1f:bd:3f:
4f:59:d7:b9:0e:a0:7e:90:fb:c2:5a:2b:f1:db:b4:
93:2b:00:4f:68:e1:ae:b9:a9:49:56:57:26:83:32:
86:d7:9a:83:c8:6a:4a:af:77:85:c3:c8:f0:a6:f7:
88:74:0a:a9:5d:3b:49:24:7d:0b:ee:9c:07:40:c4:
4c:7b:7b:13:b2:a9:4a:1f:b8:5f:7f:8b:9c:83:f3:
41:df:4c:31:ac:c9:2f:ec:fa:f6:8d:9b:c8:90:87:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:A8:63:D3:0D:6A:68:65:8B:E4:B2:C5:05:CA:CB:3C:2B:F4:7A
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:d5:ca:31:bb:72:0b:ee:2a:f5:86:98:01:e7:9f:a6:a0:
02:ac:7d:4f:64:d9:a0:c6:a9:f4:84:62:5a:33:a6:86:1d:67:
07:7c:f9:8f:b7:c2:20:14:46:2b:14:c3:1a:54:f2:09:8b:fb:
30:82:8d:91:13:fb:bc:df:c5:d6:c4:c8:14:aa:a4:47:14:ff:
ba:12:b9:01:75:33:44:14:46:fe:d2:7c:bb:55:6a:03:25:17:
21:d6:c6:8f:c0:00:de:de:03:52:16:d8:b8:45:04:42:08:94:
99:de:db:36:fb:29:4f:9b:32:37:3e:b1:88:b2:0b:cb:84:df:
96:60:88:3e:e4:9c:14:d1:74:f1:d9:92:53:9a:b4:0d:5a:28:
e3:5e:1a:07:f9:b9:f2:2f:35:58:6a:43:73:fa:76:48:c2:f8:
2d:d3:c6:d0:50:10:59:18:e1:87:fd:6a:9a:63:ab:4f:10:80:
48:57:5a:58:90:38:5e:5a:0b:34:dd:3f:f0:07:31:7f:34:57:
46:b5:a9:df:f1:48:b8:a2:80:19:10:45:a2:04:7c:d1:2b:b9:
23:3e:7a:d4:8a:2d:6e:63:2d:2b:7c:cd:31:10:43:42:ed:5c:
b7:87:ba:00:79:b9:22:dc:62:8b:9a:99:57:38:97:3f:1c:43:
f5:85:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:19 2026 by rpki-client