Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: AJAxXQGQGtpx2evDBBo8tsB9zbDpvRF74ytqaY0KGpc=
Subject key identifier: F4:F4:2A:24:5E:02:42:A7:68:2E:21:D9:9E:38:60:77:54:C0:92:69
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019D284E66BFB333D056DE6064BFF6991F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:59 +0000
Manifest this update: Thu 26 Mar 2026 04:01:59 +0000
Manifest next update: Fri 27 Mar 2026 04:01:59 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: P1cukUlmwZjedLc8Js2YvVDZtDD0qLnRLxJSgg9xiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:66:bf:b3:33:d0:56:de:60:64:bf:f6:99:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Mar 26 04:01:59 2026 GMT
Not After : Mar 27 04:01:59 2026 GMT
Subject: CN=f4f42a245e0242a7682e21d99e38607754c09269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:73:30:d6:76:fc:59:6d:09:d4:df:8e:52:
56:3b:0a:03:c2:2d:7f:ab:59:d5:6a:a5:ba:ac:88:
13:9d:9e:77:71:7f:c7:64:b6:05:4f:83:47:6d:c5:
3e:73:77:0f:90:a0:d3:02:9a:7d:38:b7:ec:c2:35:
5e:34:37:67:8d:76:47:e9:32:de:1e:df:b3:e4:38:
6e:87:67:ab:71:c8:ce:d9:b4:e1:44:f8:60:ad:a3:
85:63:ca:b5:b1:ba:e1:7a:7c:93:13:2b:be:48:50:
72:ae:07:ed:d3:05:ec:56:94:ea:32:c2:37:d1:07:
2b:cf:44:e6:35:58:14:15:d9:d7:be:3a:af:86:a8:
8c:44:79:92:79:d1:e1:21:b9:d8:92:45:51:fc:42:
29:41:db:ff:1d:63:be:23:cb:db:45:3b:34:1e:8b:
e3:19:9a:15:d4:85:9b:ef:72:bd:5c:62:17:e6:f3:
91:bc:f1:de:c7:ac:f5:33:b9:8e:ed:91:c5:91:de:
74:9d:c1:11:1c:90:ea:7b:4e:1e:ec:9a:8d:58:0f:
54:46:dc:78:c3:3e:d9:6a:70:fa:b7:45:7c:02:5a:
aa:a2:c8:a6:ec:39:87:c2:c3:7d:45:50:95:9f:42:
98:81:22:33:cf:76:c5:34:60:cd:50:e6:8b:b4:66:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:2A:24:5E:02:42:A7:68:2E:21:D9:9E:38:60:77:54:C0:92:69
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:20:e5:28:49:81:31:aa:fd:a7:7a:ec:01:89:a1:b6:39:ff:
0c:4c:5a:fe:17:51:a4:bc:03:7f:bc:42:fc:0d:38:a1:c3:48:
eb:53:f6:f2:d5:ab:73:93:10:b7:99:20:a0:8d:f5:9a:77:ba:
20:ae:05:88:28:1d:94:37:25:37:fe:9f:29:e7:36:95:6c:81:
cf:8f:8a:11:ae:69:01:64:79:99:a2:8f:7b:7b:9d:e1:c4:77:
81:66:91:2a:ce:69:7c:e6:e7:35:26:e3:c8:46:c5:87:9a:c3:
6b:da:f3:9a:19:aa:1b:2e:67:90:57:72:7a:63:df:e9:a6:a8:
36:c9:3c:6c:ab:6a:fb:51:a4:eb:f2:0e:9a:34:4c:cc:39:b8:
72:0f:b7:87:16:59:fa:20:37:75:a7:f5:85:38:7d:65:7f:83:
d5:6a:16:c2:9d:ac:14:85:29:bc:70:42:d6:d1:70:24:1c:c3:
8e:9c:11:5a:c6:e8:e2:03:b5:7f:d1:c0:f9:7a:fd:82:48:8f:
3b:ac:4f:c9:4d:8f:f1:ef:46:26:d9:e7:b8:ea:a0:1c:f6:47:
9e:0f:db:85:5c:d7:66:9e:ea:b7:0a:46:16:d3:c7:2c:61:50:
3e:6b:7d:9c:d3:32:1b:47:ca:ad:6d:81:6a:b0:22:2d:6d:31:
66:0d:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:54 2026 by rpki-client