Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: FjWxn4SUgHFrCnBz0sSZwkfdfPV5lBpW+n4ifpWM2t0=
Subject key identifier: 6A:F2:41:24:A2:BD:98:57:32:BF:9C:88:DE:A2:4C:BB:4C:70:82:6D
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 019D2583D0BA17A7C60E9CB492137951C00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: 0aV-tHfpu8rpkUoVNaMM6FE4FdE.roa (hash: KP4i5VhWoAFHGaSkT7VTeYsqIMIZacJTjVM3FavYgB4=)
2: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: BfWuIbDBHZR8TpMNkvp1iX5rG8C1VDP9zOBU/w6wjbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d0:ba:17:a7:c6:0e:9c:b4:92:13:79:51:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=6af24124a2bd985732bf9c88dea24cbb4c70826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:19:50:aa:39:b5:7d:f5:a8:af:38:e8:5e:
0a:7a:ad:d5:2e:f0:fc:c9:87:ec:9e:f5:f1:17:3a:
b8:ee:56:25:3a:13:c3:dc:de:66:38:43:9a:21:13:
16:19:c6:cb:87:ef:04:c8:c5:43:cb:85:9e:70:8e:
d3:3c:d4:2d:c6:82:d3:f2:12:b5:39:04:09:14:3b:
06:78:2c:0b:04:21:b6:cf:16:75:97:5b:82:88:32:
0e:a4:a0:31:e4:51:9b:e4:d2:3b:1c:e6:00:2f:6f:
6f:f3:93:3f:fa:a6:83:25:98:cf:a7:c7:79:68:7a:
9a:e9:ad:f8:33:d3:f4:68:af:1d:0c:90:d7:76:ed:
ee:a1:38:02:c2:80:20:83:30:59:53:de:4e:d3:2c:
4f:de:bb:88:ab:87:58:be:9e:5a:41:b8:24:ba:48:
dc:36:22:5a:98:06:11:74:94:d9:e8:65:8b:c3:1d:
ba:85:63:59:ce:0d:44:4a:fa:7f:fa:a8:e3:f9:00:
0d:fa:a6:82:38:53:12:b4:48:bb:6f:4b:be:5e:06:
f7:03:d9:8e:69:db:e7:a3:7c:1f:ce:23:8b:de:99:
d5:84:46:b0:00:2c:ee:02:78:9f:36:46:3f:a5:b2:
a4:14:23:1f:85:46:0f:b9:b8:5b:95:7a:1d:e2:56:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:41:24:A2:BD:98:57:32:BF:9C:88:DE:A2:4C:BB:4C:70:82:6D
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:03:b4:35:11:ed:99:9e:5d:10:09:ad:e5:d2:5c:1d:8d:4d:
8d:ac:02:72:a7:fb:a9:90:67:c8:bc:32:61:58:3f:7f:f2:d7:
43:8d:03:56:12:dd:43:dc:4e:4c:9f:c4:1b:8d:c4:4e:96:d9:
2c:f6:d5:82:15:35:85:60:47:8a:e1:01:ec:fe:97:14:fa:2f:
a6:e0:ec:e8:05:78:c6:ae:c3:ec:2d:27:27:7c:87:c6:41:18:
3e:e5:53:fd:84:a8:7e:35:6c:77:f3:ca:0b:f0:7f:e9:1e:b5:
e1:c4:1a:12:bc:03:fe:d6:49:12:b2:67:6b:94:99:80:69:4d:
dc:4f:c7:33:d8:5c:cc:79:53:0b:41:1d:88:6b:e8:6f:10:d3:
1a:27:9e:27:51:8b:0e:91:5f:9f:e9:93:f7:e8:79:95:c5:d1:
80:b0:32:7a:d2:61:14:dd:86:10:43:74:6f:03:74:4e:17:35:
3e:13:fa:eb:1a:71:86:f1:c8:11:d5:8d:26:7f:75:23:44:46:
28:8f:db:ad:b1:9b:37:e7:57:8c:c3:bb:cb:f7:44:70:d2:0e:
6d:8c:d5:1d:cd:46:5f:fb:f5:d5:86:8e:87:81:25:b7:95:80:
e7:41:48:a8:85:66:fc:d2:ec:a0:ec:a3:3e:a1:71:e5:0d:35:
95:ef:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:57 2026 by rpki-client