Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: RPD63k/GgY/K8UkcUP7wnbf+tFfHazag/6laRdDB2Mc=
Subject key identifier: 6F:8F:8B:CE:B1:B8:FA:47:A4:40:16:EC:7D:04:5E:A2:CB:A5:44:9D
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 019D26CD5849E7DEBB159AFAC84F2E7B83BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0E69
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: ctbme0/U2ojnxFSm2uA2v0jvDwgNHFd4taoTBl9M/9c=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:58:49:e7:de:bb:15:9a:fa:c8:4f:2e:7b:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=6f8f8bceb1b8fa47a44016ec7d045ea2cba5449d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:11:85:bd:4f:ec:e9:dc:a2:e8:99:18:51:
d0:83:54:ee:11:bb:78:45:c7:a8:74:5c:0d:5c:fb:
b8:6b:96:38:b6:31:a8:5c:11:18:48:63:15:53:47:
c6:90:f9:a1:46:d7:67:37:86:4f:0e:b5:32:2e:87:
b9:c8:ed:42:8e:bf:db:95:b6:4a:1b:32:75:70:ff:
9e:f1:f6:24:ec:8f:8b:4f:8d:33:9e:02:87:f0:23:
77:de:1a:82:fa:51:43:d7:f5:d9:ea:c7:31:5c:ab:
f0:fd:7e:58:5b:c1:6a:12:3a:3d:1f:1c:b6:45:85:
d6:5e:05:51:bd:19:03:d2:87:a0:d3:01:93:48:8d:
17:27:93:4b:23:d5:91:de:a1:91:3b:a7:ca:5a:0e:
d4:3d:02:fd:b4:d6:37:86:4d:3a:fd:40:8a:58:8e:
15:e1:fe:cf:53:fb:87:68:10:20:f9:f6:23:96:01:
cb:33:93:08:e1:23:36:2f:c6:57:97:8a:b4:8f:44:
38:0a:ab:67:7d:6d:d7:ed:e1:75:dd:d1:86:77:b9:
4f:76:e1:78:6b:ed:33:d9:a2:b6:7c:19:36:3d:96:
5c:39:de:9f:c5:57:9c:c5:d1:53:c6:fd:be:45:fa:
b9:ca:1a:38:ac:55:0f:51:7b:9e:a9:0b:d2:dc:73:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:8B:CE:B1:B8:FA:47:A4:40:16:EC:7D:04:5E:A2:CB:A5:44:9D
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:0e:52:61:f1:0e:c8:5c:b3:eb:39:4b:0e:14:22:d5:89:
37:a6:bb:3d:18:d4:2a:bf:62:f9:9e:a2:2a:d0:d8:0c:78:96:
22:09:25:20:55:0b:fb:b1:af:4b:45:00:2d:09:30:fa:26:c6:
7a:f0:6b:e4:f4:ab:f2:43:5e:42:3b:5a:f6:6d:79:f8:b8:26:
54:55:63:e8:e0:1f:0a:d6:0b:68:c3:cd:3c:7a:31:c4:9d:e8:
3c:ec:5a:30:1a:72:2d:f1:cd:f2:7b:d9:af:a1:6e:9a:91:80:
a2:5e:26:49:98:60:ab:bb:d9:ff:14:16:19:b6:7b:26:37:13:
88:41:b0:ae:4d:a2:ef:a9:0e:12:9a:ae:f7:73:fc:ea:2f:1d:
da:9d:eb:6e:66:ff:66:b6:a4:6e:68:b7:6d:49:7e:65:6b:d7:
bb:48:c1:96:a4:4a:aa:58:d0:3a:d9:42:92:2e:77:0f:49:55:
98:1c:cd:98:90:bb:d1:ff:f7:80:a7:11:b7:48:e7:4e:1b:a7:
a5:3c:bc:73:69:ba:7f:55:bd:31:87:0f:ba:98:ad:82:a5:92:
c3:61:de:35:94:70:f3:20:08:8b:57:b3:5c:a2:f9:e7:15:0b:
d4:38:cc:d2:d3:47:3f:f8:04:4c:c4:22:1e:9c:42:d0:27:51:
5a:88:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:17 2026 by rpki-client