Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: g7xYD3BQ6QMBP3nLThs34WIfY7f5E5ObvUtSB58FxLo=
Subject key identifier: 59:B5:05:9D:16:D6:C7:E3:3C:82:84:19:B5:44:13:C0:3D:AF:F8:BF
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 019D284D4B6B38EDAFC3C7E377A3ED6A7892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: y3+Rf0qox6b9vfC8YERNHK4y9grqP+VtCHnfYkRLFFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4b:6b:38:ed:af:c3:c7:e3:77:a3:ed:6a:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=59b5059d16d6c7e33c828419b54413c03daff8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:3a:20:3c:d8:da:4a:a7:bd:47:ce:32:d4:
93:28:b7:f2:ae:28:f3:b0:f7:fe:ff:8e:5b:ba:3c:
f5:10:ec:88:a2:6c:d5:2d:dc:7f:b5:82:64:4d:57:
41:0c:73:07:2b:98:96:37:5c:db:51:40:ac:05:1f:
77:2b:61:bc:da:ce:dd:c2:55:a9:e3:a9:07:44:1f:
af:10:1a:f0:d3:c5:43:26:c3:db:ee:c3:d6:a3:2f:
34:f6:31:54:5a:49:70:dd:6c:7c:6e:11:97:d7:a1:
2f:4f:75:30:9f:6f:13:8c:57:55:c1:39:45:e9:e0:
9a:7a:77:b3:b8:7a:ae:4c:71:6c:f2:eb:30:89:06:
af:23:4e:da:30:6e:e8:b0:26:23:b9:47:4f:28:8b:
ed:24:30:4e:25:22:dd:07:cb:e1:b4:c1:e0:82:f5:
e2:e7:d7:00:d4:88:d1:59:be:c4:da:13:da:3a:a1:
a4:1e:67:68:91:18:79:0f:b0:52:44:5d:0a:1b:92:
10:f2:a8:98:54:d1:58:70:d1:9d:58:ad:9c:dc:df:
40:99:89:49:fc:24:27:04:52:bc:4c:2a:9a:e0:05:
36:52:17:69:a3:d0:bc:bd:5f:26:2f:9a:2c:c8:db:
15:18:2c:ab:0c:00:3b:85:ef:66:ca:d9:63:e1:0d:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:05:9D:16:D6:C7:E3:3C:82:84:19:B5:44:13:C0:3D:AF:F8:BF
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:64:56:9d:b0:24:bf:82:1a:4d:f4:32:aa:36:ae:9c:5e:
53:e2:e3:b7:dd:f0:d6:31:22:97:86:92:fa:06:c5:69:ff:9b:
93:9d:64:c3:7d:d2:81:22:29:13:38:b7:7a:ff:ed:8e:02:3c:
2a:76:32:68:0c:8a:81:09:e2:aa:52:b8:92:76:f7:93:56:09:
a9:9a:20:07:d4:0a:c7:ee:26:06:ec:03:a2:24:d1:ed:56:62:
22:d1:45:fc:43:17:b6:ef:9d:d4:aa:df:42:03:ad:8b:be:61:
36:40:13:c0:25:20:55:4b:a7:98:dd:f2:d2:7b:56:35:f3:03:
5f:70:06:e2:62:a7:54:66:f0:61:f1:28:a3:03:f2:b9:85:e2:
33:0b:bc:71:3e:c3:ac:ed:c1:5d:74:94:66:a0:6c:8c:11:85:
ea:00:92:9e:a3:90:6c:bd:15:91:95:b7:a7:9b:2b:33:af:e3:
56:98:0c:af:fc:b6:db:80:fb:7e:2e:5d:11:00:f0:42:ae:a1:
ac:03:49:9c:0e:bd:a4:f6:91:81:c1:cd:09:fe:3e:0d:eb:1d:
9d:45:1a:b8:1e:b0:4c:45:31:5b:b7:48:c3:82:14:26:be:bf:
1e:0e:81:dd:6b:5b:1b:c6:f1:96:52:cd:d7:8a:11:d1:a8:6d:
4a:a6:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:20 2026 by rpki-client