Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: SP1tsVQ1v86JGlChjKSOON7ZJb526SreHfMd8pprCh0=
Subject key identifier: F4:18:ED:C3:18:23:58:F8:8C:47:5B:83:CC:D6:67:E5:9A:51:8C:DC
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019E1FEC6C3A03750CA476F1B115CFAA3768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1656
Signing time: Wed 13 May 2026 06:00:48 +0000
Manifest this update: Wed 13 May 2026 06:00:48 +0000
Manifest next update: Thu 14 May 2026 06:00:48 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: BBrzl75ZK2zcgjarN72G5bxR5rG+MBENfPUb/W/kl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:6c:3a:03:75:0c:a4:76:f1:b1:15:cf:aa:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: May 13 06:00:48 2026 GMT
Not After : May 14 06:00:48 2026 GMT
Subject: CN=f418edc3182358f88c475b83ccd667e59a518cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:7e:41:13:2b:49:8e:83:d3:2e:e0:a2:27:
c0:67:8b:7f:e9:e1:6a:f3:74:9a:e1:e2:39:2d:44:
d0:3e:77:b6:76:e3:46:63:fb:29:29:00:25:dc:9a:
9b:b6:bc:38:7a:bc:9d:4a:51:41:3d:8e:ff:5b:df:
28:e6:69:c8:33:cd:a3:53:18:cf:8a:93:00:1f:52:
86:ff:a5:aa:e2:e1:7c:c3:2d:fb:df:25:2f:ea:ae:
65:44:5e:d9:11:85:1b:3a:0b:99:1e:cb:cb:af:4b:
6e:d0:42:5f:41:64:27:00:1c:06:17:ce:56:51:2c:
e4:ad:6e:6a:72:28:6a:91:58:6c:75:00:87:72:f9:
69:03:74:e6:f5:00:97:89:08:47:6d:e5:35:08:98:
ce:35:aa:b9:0c:bc:14:62:cd:84:15:97:f5:a7:a6:
e2:d8:39:c7:e3:ac:a5:23:a9:26:80:5f:38:f0:32:
a6:6f:dc:a7:c2:70:60:48:03:9a:4d:e0:f1:aa:57:
c6:f5:f1:9d:d3:6c:52:ae:ca:9c:c7:fc:ed:d9:6f:
52:81:27:71:74:c0:a8:bc:fa:e7:cd:cf:c8:89:5f:
e2:45:58:e4:e5:a1:a0:11:98:6f:5c:54:a5:c7:6b:
03:dc:55:9b:5d:48:41:5e:c6:32:61:e5:b7:99:4c:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:ED:C3:18:23:58:F8:8C:47:5B:83:CC:D6:67:E5:9A:51:8C:DC
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:77:22:97:41:ce:9e:64:e5:7d:1f:10:ef:2c:2f:ad:ae:
4c:e9:43:fb:96:fe:e2:ea:f7:bc:02:94:8e:db:8f:2f:22:20:
cc:28:3d:f9:e9:1d:10:1f:35:79:e6:25:9f:84:41:36:25:d3:
a5:5b:7c:1d:94:21:3a:6e:54:51:2e:9d:8c:b5:60:fe:da:0f:
17:de:21:ea:a0:f7:1b:e5:95:99:9e:61:b5:c0:4d:0a:4b:65:
3c:5e:0f:49:f5:7c:67:25:90:05:79:0f:26:d8:99:76:b6:f2:
1a:00:72:e8:cd:96:1c:c0:23:ad:52:80:c9:e4:69:be:e3:3a:
60:38:61:aa:15:fd:84:ba:d1:e6:f8:1c:f5:66:26:8a:97:d6:
bd:cf:9d:03:92:8c:64:30:b9:07:5d:bd:1d:d4:0a:c4:ca:e8:
8b:91:73:09:83:fc:72:b6:e7:f2:ed:a6:01:53:ea:6a:fe:d0:
7a:64:fe:f9:4b:0f:ee:8f:57:5d:94:ff:8e:f1:4b:f8:a7:37:
73:8d:2f:45:cb:4d:9f:f3:72:03:73:1c:14:16:a2:80:32:d0:
15:03:57:bc:1c:b5:5d:e7:ae:4e:43:7d:dc:97:e3:e6:34:84:
4b:f1:73:4b:e1:3f:0b:7d:3b:9e:e0:bd:d0:6e:1e:be:41:83:
2c:f5:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:57 2026 by rpki-client