Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: bdbeb8+EJZzHTSoQiOVeXKXSrxDhJHlQVsC4VoeLkzc=
Subject key identifier: C5:A2:7B:84:FB:49:FD:EE:05:A3:A9:37:71:74:B4:07:03:6D:9F:98
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019D333EA8B6DBEF193FC5EF6109245B593E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 17BD
Signing time: Sat 28 Mar 2026 07:00:37 +0000
Manifest this update: Sat 28 Mar 2026 07:00:37 +0000
Manifest next update: Sun 29 Mar 2026 07:00:37 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: 68rPWrtO4dXyuN88xkTqRTOsaZINGNXGInlJCUpc5eo=)
2: j11RSuGZdP978fle7rZl9lYrLos.roa (hash: cc6p0W3mXzrkRQrbuZH3I0FsotddQvFdCECy4+DwMbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:a8:b6:db:ef:19:3f:c5:ef:61:09:24:5b:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Mar 28 07:00:37 2026 GMT
Not After : Mar 29 07:00:37 2026 GMT
Subject: CN=c5a27b84fb49fdee05a3a9377174b407036d9f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:c3:fe:9c:aa:d4:99:90:4e:29:64:f0:af:
18:54:9b:aa:f2:04:a8:fe:25:f7:ba:6f:95:0b:1c:
dc:c4:e0:f0:06:e1:33:06:24:88:e7:e1:66:df:19:
b1:07:ac:49:ed:05:5e:bc:2f:c0:4a:22:b3:ba:d4:
5f:b9:4d:e3:da:17:a4:ce:66:d5:56:3a:d1:f3:34:
07:17:f5:e8:36:ea:31:90:85:df:f1:12:ae:98:9d:
ef:c7:b9:ed:91:54:3c:d5:68:fc:a0:43:51:62:fa:
15:a5:1b:1a:53:8a:5a:be:43:0b:18:92:9b:fe:55:
4e:89:3f:ec:4d:8e:3a:e4:89:00:b0:78:08:75:97:
f1:aa:50:61:5a:72:eb:c0:26:eb:bb:6f:cd:b0:1c:
93:18:40:34:93:e3:04:5a:3e:97:cf:67:44:ba:37:
a9:65:b1:e9:ab:28:16:3a:fc:78:05:2c:ce:48:c8:
ac:00:6b:de:de:14:d7:ad:84:50:4b:84:63:6b:a6:
f5:72:ac:6f:e7:e1:fc:04:40:1a:1a:ab:4e:b0:05:
b7:dc:cf:8b:af:b1:05:7a:7e:b6:7e:89:b8:1d:f0:
00:ab:3a:70:56:1f:4b:20:2d:d7:c8:d0:db:d1:5d:
a3:81:54:db:73:70:37:31:9e:2b:d8:1e:1d:ba:44:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A2:7B:84:FB:49:FD:EE:05:A3:A9:37:71:74:B4:07:03:6D:9F:98
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:a8:fd:a2:2a:78:e0:80:07:84:de:7f:ba:3c:74:d3:d8:
ac:d5:00:a8:ae:0b:a4:1d:dc:24:de:74:87:b4:62:8f:8f:59:
3a:be:6a:2d:59:be:e6:88:ee:80:13:bd:6e:66:1c:02:28:f2:
b6:1c:f1:f7:d6:da:c6:e5:45:51:16:f4:f8:d0:e8:04:b4:b6:
26:92:a3:94:68:56:c2:77:f0:9c:54:f1:d7:1a:62:a5:4f:81:
30:ae:fd:48:98:e6:5e:ba:73:92:2c:65:03:85:8f:5c:98:de:
6d:35:4c:fe:f9:6f:7a:83:a9:27:30:6d:6d:33:08:f2:8e:4e:
31:65:24:5a:9c:43:ad:d9:e2:db:1e:bf:b9:00:3f:d0:2a:68:
bc:18:ea:c5:d1:44:d0:ff:42:24:ea:ee:72:a6:f8:a5:38:f0:
e1:3c:12:37:4b:3d:ac:79:df:34:c5:ae:9f:41:da:24:86:44:
5c:aa:aa:8d:95:6d:8f:62:79:d2:d7:2b:ca:4b:73:2e:81:47:
f2:e4:3f:8a:01:46:3a:2c:2b:34:da:14:5d:41:d1:eb:81:22:
48:7b:17:74:7f:08:0d:27:3d:b5:56:06:c3:fd:c1:2c:ef:8d:
a1:bb:6b:4c:02:2e:73:e8:d1:9e:2f:99:59:b4:d1:7a:e0:7f:
6f:47:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:40 2026 by rpki-client