Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: C3ZnhNP5gYQbXipOjEGSJNk1iLnI76jXup73pwBDICU=
Subject key identifier: 2B:41:36:91:A0:FF:7F:3B:66:2D:20:61:7B:19:B2:F5:44:E8:40:E6
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 019D28F298DF639C9DBA23F1D2D35143263B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:20 +0000
Manifest this update: Thu 26 Mar 2026 07:01:20 +0000
Manifest next update: Fri 27 Mar 2026 07:01:20 +0000
Files and hashes: 1: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: 0Dt9TzjJw5NZX20wggTJwCsAKnVUxf4W+BTs5xdSgOQ=)
2: s-442GvPfebUGbpFw38BzwA9S00.roa (hash: kIHquz+BFUO9MvkaDuyA2nEs9BLGKEJWTiDy2rOI/Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:98:df:63:9c:9d:ba:23:f1:d2:d3:51:43:26:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Mar 26 07:01:20 2026 GMT
Not After : Mar 27 07:01:20 2026 GMT
Subject: CN=2b413691a0ff7f3b662d20617b19b2f544e840e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:29:d3:17:8b:d1:00:1a:8c:dd:86:cc:55:
45:0a:28:86:ae:0d:5e:96:49:68:74:81:aa:f4:ba:
a6:49:8b:ec:bc:53:18:14:7e:d6:45:71:20:2c:fb:
1f:bb:f1:39:86:fd:1a:9b:2e:d5:86:34:fd:91:85:
f7:49:62:ef:94:46:3e:56:83:c6:b9:43:60:ac:d9:
0e:48:1c:64:5a:18:b3:07:69:87:05:36:ac:89:64:
14:9d:1d:23:03:a8:4e:33:50:02:5e:4a:c3:8c:63:
4d:32:cd:97:10:ec:1f:d8:c3:1a:93:5f:e3:d6:e7:
72:5e:df:22:d5:3d:c8:f7:d2:ce:b4:b1:f6:d9:a5:
35:4d:d9:1f:fb:59:91:dc:1e:44:16:b7:8f:5b:9d:
2e:7a:00:32:49:66:28:90:0e:73:34:fc:e6:2e:4f:
a4:8e:0a:86:55:6c:1a:8e:17:be:87:fe:af:0b:1f:
a1:37:ba:af:99:a2:c6:9e:c1:43:b9:d7:d1:92:ba:
21:34:13:c3:01:13:27:ea:f8:2b:12:c6:98:0b:48:
47:fb:30:c5:c2:f1:67:c6:af:6b:e2:32:cf:89:8a:
d9:75:72:ea:d1:a8:3f:c2:fa:70:27:96:7d:9f:e6:
3d:e0:ac:c3:d4:0a:ce:df:50:7f:57:6d:4c:16:00:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:36:91:A0:FF:7F:3B:66:2D:20:61:7B:19:B2:F5:44:E8:40:E6
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:48:04:07:7a:1a:d6:bb:ee:b6:b6:b8:6a:b4:01:b2:88:55:
d3:f1:e7:ba:03:49:9b:c8:08:fd:4b:99:d4:7a:46:3c:f4:a7:
6b:78:8d:86:7c:09:5d:50:76:a3:ec:1e:b9:51:39:f7:b5:c9:
68:c8:fd:1a:08:33:77:d8:01:8e:13:36:a7:40:de:14:6a:ad:
87:e7:36:46:3d:b1:b7:6f:81:8a:a5:f1:02:71:83:57:75:08:
77:0a:91:c3:02:83:8c:57:7b:0b:6c:52:cf:64:da:75:71:ba:
ca:8a:11:ca:54:f2:4f:fa:f2:c8:c7:a0:1c:6a:99:32:de:d3:
84:8f:fb:91:9d:f7:3e:de:ea:a7:7f:67:e4:d7:f6:b7:54:c4:
10:ec:82:ae:ef:b3:b0:96:1e:61:af:46:5e:fa:ba:5c:51:dc:
19:c9:59:af:b8:d6:4f:ef:11:14:b4:0f:bc:d9:ed:9a:db:db:
a8:5a:55:b4:5f:d1:69:05:14:dc:b0:ce:d4:53:50:7d:57:e3:
83:70:f9:7e:ad:eb:0d:f3:94:d4:6c:e0:fa:59:15:5d:16:13:
1b:95:91:91:9f:44:55:2c:0f:fe:2d:ed:ec:cc:ce:af:d1:4f:
91:6c:58:05:72:d1:29:c4:3b:e7:a8:44:aa:8e:1c:a8:f1:2c:
6a:f0:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:06 2026 by rpki-client