Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: UjWlH1w3CT4Zwm7/EvH4Y9pqndkycbpv4fD47X/pdvE=
Subject key identifier: 94:BE:B4:18:FB:1A:57:EC:C8:FF:9A:94:88:80:4F:F9:8B:38:DE:BC
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 019D284D6A2F71A69B44FB170E9BF8E17C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: KUxEUlamd4E2qGXwHyZg5bjCk2dNYdk1RRpP/AMXEPU=)
2: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (hash: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6a:2f:71:a6:9b:44:fb:17:0e:9b:f8:e1:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=94beb418fb1a57ecc8ff9a9488804ff98b38debc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:eb:40:b8:c3:41:66:91:46:9a:6b:57:1d:
35:78:b4:95:e8:5a:87:9a:f8:14:b5:a1:b0:bc:2e:
af:b9:d5:38:01:23:9f:e8:a3:c6:99:75:b1:0f:37:
38:53:b7:17:18:f6:71:75:33:5d:11:29:4d:0f:95:
41:14:81:02:ae:0d:93:4c:5b:30:83:4e:14:51:df:
37:f5:61:0d:15:88:ec:43:f2:2a:32:99:70:a0:2b:
87:3a:24:c6:0e:00:cb:25:fe:9c:72:d9:45:0d:b9:
d8:f2:35:7b:7e:a9:ce:96:76:d0:4b:6c:86:7d:ad:
7f:b5:29:21:d9:ed:65:d8:81:f6:95:4d:4f:d7:42:
e8:2f:bd:a7:b6:fb:47:62:18:01:b5:c8:bd:25:80:
51:8b:08:e0:98:b1:02:41:90:77:ba:8c:c4:f2:1f:
59:7a:e7:d7:6c:77:9a:3d:37:cd:e6:33:f0:39:e1:
a3:0f:50:8d:bb:0d:32:d1:36:95:c6:e3:04:01:26:
8f:d6:39:03:6a:3a:32:6c:cc:0a:cd:61:cc:e7:c1:
c9:cf:02:56:39:80:68:b3:07:c1:19:78:f9:4c:38:
5c:49:c9:10:70:1f:68:55:52:55:5e:16:fd:3d:11:
52:6b:a0:38:2b:ab:41:80:31:9c:00:42:2c:a0:b3:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:B4:18:FB:1A:57:EC:C8:FF:9A:94:88:80:4F:F9:8B:38:DE:BC
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ca:ce:c5:be:0b:c9:a9:78:64:13:d7:ff:a2:1b:70:f3:a5:
41:0f:49:e0:a3:cd:05:9f:19:66:4a:04:3f:71:5e:18:42:95:
5e:02:08:2f:e0:55:60:0d:5b:57:47:cc:cb:fa:18:8b:65:b6:
27:c8:70:96:2b:cc:93:01:96:99:ee:84:42:83:be:03:d9:6e:
c3:7b:14:b3:e9:12:fd:ac:6b:0b:57:71:38:9e:54:45:98:51:
cb:d0:d3:1c:0a:22:94:55:b2:dc:dc:05:d6:ca:63:95:f2:78:
a8:a3:3e:9c:8b:8e:c7:ad:73:a2:3c:02:97:17:c9:a1:9a:80:
82:da:e3:b2:8f:b5:ea:0e:a9:4e:04:70:25:03:60:22:6e:df:
c6:c7:41:33:29:35:33:20:6e:57:90:93:09:71:6b:1c:14:d5:
51:7b:35:f2:25:ab:ac:01:e8:73:a6:57:95:19:97:9f:c5:27:
44:e3:1b:1b:cd:c8:47:2b:17:d4:a1:a3:f4:67:9c:4e:5d:e1:
1c:66:36:90:04:23:07:e2:bf:5d:70:76:ca:9a:2b:ba:4d:51:
45:ae:7d:6f:c6:e1:30:61:fb:df:71:71:c3:19:cb:1e:20:5d:
21:59:8b:d1:58:a8:f0:03:66:83:50:b6:5c:9b:84:44:22:5e:
fe:fe:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:29 2026 by rpki-client