Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: Nnw51q7f1YZVoPRKsI0WCVMgvtZVJ6Jjvx4TFW49e9o=
Subject key identifier: 59:1F:C0:20:C6:11:ED:87:38:3B:EF:D5:F7:C9:6B:2A:52:25:69:AA
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 019D2695E4AEDC40BD7D7AFB233FFFC8CA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0A88
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: aHU6rjVfZtAlhTLbATiJFKIonOazy6CiIWZK6kJQJrI=)
2: vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa (hash: mQvtqYD2eC+84hVmHavb+1UIl2NHrV+2/J+tCnR9oyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e4:ae:dc:40:bd:7d:7a:fb:23:3f:ff:c8:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=591fc020c611ed87383befd5f7c96b2a522569aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:cd:5d:5d:6b:dc:55:3d:c2:8e:f0:c6:1c:
0d:25:51:58:1f:f1:31:04:a3:7a:56:9e:25:1b:1e:
64:4b:85:06:88:0a:bc:e0:0c:f2:8d:b5:d8:11:eb:
a4:23:4f:62:02:ff:3d:6b:6d:9e:d2:29:53:3c:bc:
2f:7e:cd:28:b6:5a:79:cc:fe:a4:f1:c6:40:30:d7:
84:98:ee:22:cd:01:a3:7b:34:80:a5:be:06:eb:e7:
b5:97:62:f9:36:9e:d2:e8:ce:6d:9a:98:6b:a8:da:
bb:ef:e2:b1:fe:2d:96:71:8e:a9:d7:0d:4d:a7:53:
b2:bc:ed:f8:11:2f:86:57:97:3d:37:b7:3e:ef:69:
f0:be:b2:eb:24:f9:c4:fe:59:77:19:e8:23:86:01:
59:74:50:77:3f:c3:a9:ca:0e:88:32:96:bc:77:50:
2e:0f:c8:0e:1e:29:30:be:5f:54:4d:21:96:89:1a:
32:3c:24:38:99:74:81:c6:c7:88:de:91:ca:7a:ef:
9e:5d:f2:0c:ad:e9:31:bb:5f:11:09:7f:0a:24:65:
99:b5:82:0c:41:ab:c0:fa:b3:55:15:60:cd:80:00:
7a:2b:26:b3:a5:ad:b6:d0:90:d4:21:d3:f7:64:17:
fe:0f:2b:a5:70:63:60:4d:80:70:be:94:c0:fa:81:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:C0:20:C6:11:ED:87:38:3B:EF:D5:F7:C9:6B:2A:52:25:69:AA
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:9d:7d:6c:0e:f7:6c:24:88:79:0e:f4:f3:45:89:73:43:
46:c5:83:93:2d:ea:cf:a5:52:81:af:d1:f4:9e:33:99:22:be:
62:1a:f6:32:e9:75:21:13:d3:b6:bb:0e:7d:d0:6c:9d:40:43:
45:5f:5f:75:93:a7:2b:3c:6c:80:74:56:4e:7f:a2:8c:fa:42:
c4:04:25:eb:58:2a:82:a2:1e:e9:5f:88:43:58:34:65:71:79:
da:a0:cd:1c:a5:13:06:b9:87:91:b8:2e:9e:a6:58:d4:7a:ca:
f7:2d:1c:6f:d3:c0:4e:cd:d8:5e:4c:65:00:78:fb:09:73:ee:
e3:ec:9f:f7:93:d4:f8:fa:5f:99:0b:a5:2b:a5:b4:5b:d9:b4:
90:71:cc:cb:fe:7b:e6:17:d7:20:9b:3a:03:b2:0d:96:fc:d1:
43:10:f8:75:a3:a7:55:76:32:6a:63:8d:a4:ff:43:d7:b2:82:
10:87:a5:0d:2c:45:a6:38:71:b7:a7:5b:7f:99:5c:30:57:82:
de:26:33:ef:56:a7:59:07:e2:e3:c7:ed:2d:dc:90:1c:a9:d3:
96:69:ff:4f:59:cb:e2:6e:3a:38:2e:43:f8:55:01:6b:6e:fd:
ef:a6:e6:c0:40:f0:e4:85:50:fd:96:20:5e:a0:a5:8f:16:49:
33:a2:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:55 2026 by rpki-client