Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: c/ZIuxHXwz5TolPIvCW+kuy7AW+0g+mrZQln/E9PoA4=
Subject key identifier: E2:CA:97:5B:82:68:E5:64:04:76:D9:8F:A0:57:52:AA:2F:D4:1F:CA
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019D27DFE272389F736A1C6ADAAE85E622E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: YWluHD2jFbjPeK1e8VWQurKcz5MzCF0ooxBuIIZ2Efo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e2:72:38:9f:73:6a:1c:6a:da:ae:85:e6:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=e2ca975b8268e5640476d98fa05752aa2fd41fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:9a:2a:6d:7d:3a:2b:4d:a5:c9:cb:18:07:
ba:a2:71:6d:66:f2:97:3f:1d:7f:8c:1b:a3:76:dd:
f0:26:3a:b1:3a:b5:70:fe:64:07:47:4c:2f:50:9f:
f0:6d:5d:f5:9d:5b:9b:90:4f:87:17:e2:f1:20:06:
75:af:3f:10:69:15:3a:dc:b7:cf:6d:c3:8f:e8:85:
a3:53:ef:92:5e:a5:e1:44:02:3b:d8:7e:34:d1:a7:
1e:05:a1:2b:bd:6f:3a:57:e8:74:be:4f:02:6f:23:
d6:c0:b5:1e:d8:23:f8:33:99:80:dc:c0:ac:ac:6e:
31:e7:85:4a:d7:1f:74:60:17:03:e9:d2:cf:fb:88:
dc:79:26:e8:00:a6:21:75:6d:21:97:5b:91:0a:10:
17:2b:be:69:d6:3a:80:ef:33:0d:30:2c:30:17:83:
e0:48:33:58:5a:83:91:59:7c:0c:c9:5b:aa:72:3e:
8b:ab:f2:61:44:df:a9:9f:78:b2:a2:35:4f:84:2f:
4e:1b:94:81:61:c7:9d:6e:2c:3c:0a:6c:e7:9a:a2:
a2:7b:15:30:16:e7:bc:9c:d9:49:aa:25:a1:87:cf:
ed:e3:60:b0:1d:b7:d0:2d:92:33:73:eb:e8:85:ff:
e1:1a:a9:c9:f9:d1:90:f8:a7:18:62:48:c7:ed:4e:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:97:5B:82:68:E5:64:04:76:D9:8F:A0:57:52:AA:2F:D4:1F:CA
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:73:77:6f:d6:2f:b3:61:4a:25:a2:12:23:de:ef:a1:99:
7e:c2:3a:a0:14:75:39:ff:18:de:b8:83:03:8d:5d:8f:c7:e8:
c5:6c:a8:8e:f0:b2:d6:f8:41:ea:e2:86:79:01:13:ff:07:16:
eb:c1:e7:cb:d2:5b:19:aa:83:48:0c:dd:eb:88:28:0c:9a:c9:
62:62:94:04:93:8d:42:43:b9:ed:b4:ff:04:2e:0f:6d:7c:9f:
49:11:bb:e9:01:62:c0:6e:68:b7:1d:84:00:0d:3e:6e:f2:66:
2a:70:d4:5b:38:dd:50:b8:c0:1e:09:d6:cf:54:59:cd:33:96:
1b:e5:49:28:45:23:9e:9f:32:91:0b:2c:b2:f1:eb:7f:08:ed:
07:28:f3:a4:e6:23:b5:56:eb:57:fd:e6:cc:aa:f1:9c:13:ca:
de:f8:27:f7:b4:74:96:f3:fa:76:49:5a:56:d8:d4:77:78:e7:
f6:85:63:1a:f7:08:e8:62:3a:c3:7c:01:2c:6c:f4:62:78:18:
45:6c:e1:fc:2d:5c:1d:07:55:91:72:e5:46:cb:e3:53:fa:d3:
8a:fc:e4:ae:9a:c4:b4:7f:b0:df:c2:66:ef:35:bb:a2:48:97:
bc:ad:02:a2:96:3b:7b:e1:0c:ff:6e:34:25:1d:6f:78:5c:51:
cb:19:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:19 2026 by rpki-client