Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: bRREMLrx2t6q3ksjSbkJN/p01+r9Oz86sX6TbhXmafo=
Subject key identifier: 81:09:E1:50:44:C0:38:79:37:11:ED:CE:5A:C3:24:00:ED:EB:D1:28
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019D2703BD2E0E6A90FDCB6D894262E9CD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0F19
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: 9qaqud_c4V53thjjkEblp5yEtNw.roa (hash: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: IXy0f7kl9ltumUQa5lia2qk/22rhocxFx0dLcTuNBR8=)
3: h_hzjLW67wHlOyeEeE48OzILdyk.roa (hash: OBEq0IJXfkXFzJ3vqHNWHMcPsC7MjRnngy52bDrCEpY=)
4: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (hash: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bd:2e:0e:6a:90:fd:cb:6d:89:42:62:e9:cd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=8109e15044c038793711edce5ac32400edebd128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:42:b3:c1:0e:09:1b:37:2a:f9:f8:95:95:
f5:d0:21:a1:0b:f5:23:3c:c6:86:e7:a3:6a:62:cf:
c9:b8:6d:88:59:f5:0f:1d:84:0a:da:4a:66:04:34:
c6:b4:4d:f7:75:18:d0:c0:21:fb:dc:50:18:3f:72:
c9:89:bb:6b:35:aa:7d:a0:6f:66:9b:52:30:b6:f9:
05:6e:dc:02:b7:71:e5:72:31:4e:a0:91:ff:bf:99:
3a:15:a4:eb:61:c0:a8:a1:51:d9:de:c1:40:83:d3:
d0:97:58:0e:ef:17:c6:03:dd:7b:60:c2:07:c7:81:
d1:69:c0:6b:10:1b:c0:32:1b:5e:02:be:1e:1d:c3:
47:a2:65:1e:ee:4b:e1:9f:a8:a6:b2:e9:78:81:ca:
0d:c9:73:4b:45:07:3f:5b:b1:b6:78:7e:ca:10:f2:
05:d0:f8:0c:7a:f2:40:05:4d:08:59:f8:ce:7d:f9:
7d:0f:c5:6e:09:c9:8c:26:59:1d:4e:de:e4:94:af:
85:f5:e2:1d:45:79:2a:2a:d1:bf:f5:a4:e3:de:0e:
28:04:8e:74:62:1c:e9:3b:89:5e:68:10:c4:91:a9:
7a:e0:4d:8e:d3:5e:b8:6d:fd:a7:cf:49:ad:a8:3f:
f8:79:23:7b:0e:7e:d6:21:29:88:cb:f0:d4:7e:63:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:E1:50:44:C0:38:79:37:11:ED:CE:5A:C3:24:00:ED:EB:D1:28
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:af:9b:7b:b9:70:d5:4c:f4:0f:bc:0a:1e:b0:12:19:f8:55:
2e:98:76:19:4e:93:84:46:92:7f:39:61:63:d2:c5:19:54:a4:
63:20:99:03:49:c8:55:e0:3a:8a:3d:0c:74:b4:4c:2c:d1:ee:
55:e9:02:02:7e:c1:fa:44:14:cf:3d:33:88:66:61:6b:df:e7:
5b:df:a6:3c:f3:c1:2a:1c:9b:a3:b6:2f:59:9a:5b:ca:c3:28:
b5:4d:95:2a:e3:c7:40:02:37:1c:ed:fa:96:20:bc:de:b3:57:
ea:97:85:02:7a:2e:d7:e5:a3:cc:35:0c:b2:66:ec:3d:1b:da:
11:d2:13:3e:e8:f4:0a:d9:52:c4:4a:30:62:3f:d9:b6:71:24:
32:0f:ca:fa:84:fa:14:24:df:a1:41:ae:49:36:64:4f:ad:60:
9c:0c:57:18:e0:8a:70:8e:6d:ad:a5:3a:0c:b3:f4:93:0a:ea:
8d:09:bc:d1:48:2f:37:9b:c3:10:2c:e6:9d:8a:ad:dc:aa:45:
12:f1:20:42:72:85:69:4e:47:b1:b1:18:ec:c3:34:dd:d3:7f:
5f:8a:a6:3c:99:c2:6b:57:ac:47:0b:11:bb:9f:3e:a8:29:b0:
db:a0:6e:1b:b5:cd:b3:f1:fa:c5:30:42:45:b7:ee:52:03:6f:
df:1e:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:36 2026 by rpki-client