Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: BtGQZBNYDD4QcRqPy31lSmQi5T+pupWzpUFrOmUe3KM=
Subject key identifier: 7A:26:B1:11:48:FF:CE:F4:AD:A6:B2:72:C5:82:64:A3:17:20:1C:FB
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019D2AA9CB0A206D2526E30051615DB3C68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 15D7
Signing time: Thu 26 Mar 2026 15:01:03 +0000
Manifest this update: Thu 26 Mar 2026 15:01:03 +0000
Manifest next update: Fri 27 Mar 2026 15:01:03 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: E07P54fYdnPR9l6QKyvsJoaBiyHMAEnIvkLaT03QS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:cb:0a:20:6d:25:26:e3:00:51:61:5d:b3:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Mar 26 15:01:03 2026 GMT
Not After : Mar 27 15:01:03 2026 GMT
Subject: CN=7a26b11148ffcef4ada6b272c58264a317201cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:2e:d3:f9:6e:6f:e8:8f:98:3b:d7:68:c6:
65:27:c8:fb:f7:40:0d:14:b8:65:df:fb:bc:c6:a4:
47:5d:1c:00:44:76:da:f4:6b:57:8b:8c:9e:5d:40:
27:29:c6:f5:6a:91:5a:11:bc:7f:6a:03:fd:c7:f1:
f0:26:6e:27:1d:3a:41:23:b9:71:58:bd:e9:ad:83:
72:59:0a:49:6e:cd:0c:6a:33:e7:8a:a9:a0:fd:b3:
42:98:dd:20:03:ad:4a:02:a5:b3:e2:02:d8:c2:f8:
43:37:0a:81:ed:9e:2c:04:e2:13:40:03:3e:44:32:
50:5c:c9:83:41:17:77:38:2a:ef:30:a2:6c:b7:f5:
a0:10:bb:1d:c8:d3:3a:ad:52:31:2e:23:0c:71:c2:
a7:f9:79:af:05:c2:aa:3c:68:14:38:33:74:e2:5f:
f2:8f:79:74:82:fc:cd:ef:b2:2b:3c:24:00:24:ff:
23:d9:ba:c8:9f:31:8e:90:d7:4c:53:dd:8c:e6:ed:
37:c1:74:d1:4f:47:6d:76:89:30:91:83:ae:2b:c5:
1f:8c:87:7b:a8:4d:2d:92:7f:6c:2f:32:ec:c8:a0:
1c:eb:a0:3f:05:d4:e3:1c:20:06:35:62:f5:1c:4e:
f5:10:55:b0:a9:7d:1f:5e:5f:22:52:3a:c2:81:24:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:B1:11:48:FF:CE:F4:AD:A6:B2:72:C5:82:64:A3:17:20:1C:FB
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3d:b9:b4:06:7c:95:dc:6c:51:dc:9f:6b:0e:69:72:3c:44:
93:c0:54:5f:18:84:b5:64:d6:58:a9:50:9c:c3:c7:bf:ed:c8:
9b:ac:15:42:51:df:e4:4e:5d:7b:92:2c:a6:52:a4:d7:d3:c0:
4c:df:b9:ed:35:41:7e:36:89:32:2b:6d:26:96:14:88:22:55:
4f:41:60:76:ca:78:44:09:33:60:f0:dc:6d:f3:d4:12:44:c5:
3a:92:00:8e:b8:d2:91:27:e9:e8:47:41:18:98:95:5e:e2:e3:
85:7e:e1:0d:61:c7:57:be:79:36:80:ea:68:ca:3d:db:69:9b:
7d:6e:51:39:e9:b5:33:c2:2b:16:75:9b:b7:3e:14:4b:03:82:
cb:35:1c:5c:a5:9f:52:68:c0:ed:c3:a6:30:71:09:c4:02:59:
3d:07:6e:b7:a0:9b:04:60:48:1c:64:94:b7:06:63:30:26:8e:
f1:dc:40:e8:2f:0e:86:64:e1:4b:4a:34:35:1a:ae:81:c5:aa:
5d:09:51:aa:66:f6:7a:4d:53:aa:e7:1b:3e:1b:6c:ff:c0:29:
87:09:13:21:b7:da:fb:ba:94:65:a7:0e:8c:ff:a9:76:98:0f:
bc:c7:93:18:e8:38:57:4b:5e:42:06:7d:7c:a8:32:25:1f:66:
eb:98:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:38 2026 by rpki-client