Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: xlSk+/86bTLb8eXlVsX7TCu1AF0mAZo09lLJHf7TXWM=
Subject key identifier: 3E:EF:E9:FF:CF:82:14:4E:ED:65:C0:A2:7B:6B:2A:61:C4:83:50:CB
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019D27042A84FCA68F0E5F736264CF002B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 5VujoTR73q1zo+fQwRnsp8+6bb9sgc4HXxbCcSqm9Cc=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2a:84:fc:a6:8f:0e:5f:73:62:64:cf:00:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=3eefe9ffcf82144eed65c0a27b6b2a61c48350cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:ae:21:53:d5:96:fa:ce:3b:46:44:73:0c:
82:4a:df:d7:cd:5f:e0:23:73:94:ef:1d:73:6d:81:
90:fe:31:50:b8:2a:dd:89:ad:91:8e:29:e3:04:1d:
c7:3d:6b:23:07:d6:44:1d:f4:b3:8a:2d:3f:38:a2:
e7:96:67:09:ce:3f:6d:f6:3c:03:00:3e:bc:f2:60:
de:cb:f6:cc:5f:b7:47:bf:62:4f:0e:e5:77:0f:c4:
a4:6a:4a:2a:9a:68:12:e3:b5:f3:9e:d0:1e:5f:c6:
16:88:e5:db:53:8c:c4:09:c5:e4:21:7a:36:fb:62:
fb:8b:62:0c:a1:ab:1d:3c:ba:39:d8:64:c6:68:f6:
16:d5:46:80:e0:30:5b:44:3f:ed:71:ed:f8:67:84:
93:f3:69:da:1c:14:f3:8f:ab:7e:52:ff:ab:b2:55:
1d:75:dd:f3:20:3a:d4:cf:c4:3e:05:a7:d3:0e:c1:
03:02:78:58:df:a8:84:6e:18:90:a3:ae:11:4f:19:
eb:62:8a:7b:33:ae:8b:e3:1c:a9:de:db:ae:40:9f:
0b:cb:6f:54:69:fd:47:50:3f:ad:54:f9:2a:b0:05:
56:c9:37:f9:18:0a:25:ad:e2:25:5a:78:37:5c:81:
f2:3f:70:96:f3:72:f0:c9:88:30:59:85:78:d4:5f:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:E9:FF:CF:82:14:4E:ED:65:C0:A2:7B:6B:2A:61:C4:83:50:CB
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:9b:54:4a:0f:13:01:54:83:4e:9d:11:5e:bc:0e:fa:38:
8e:f1:c3:8c:ec:59:ec:e1:69:21:cf:fc:33:d2:dc:ec:b9:74:
81:0c:c3:f4:f6:52:4d:7c:5e:6b:d9:80:d7:98:f2:1b:7f:30:
38:df:35:3a:5f:cb:a1:f9:92:a9:ea:6b:e1:ca:bb:47:73:c2:
c0:ac:c7:26:51:fe:e3:2f:47:71:1e:dd:57:aa:c1:71:e5:c2:
8d:82:dc:5b:1c:a9:94:8b:59:f7:52:b8:06:af:c5:8e:6c:03:
93:10:c0:f4:e0:03:d6:94:42:61:e9:20:0b:b1:2f:c0:02:3a:
9e:fb:09:10:5c:1f:7f:2c:ea:be:12:6c:6e:72:16:21:1e:2e:
96:f5:a7:06:bb:61:0b:cc:6b:f7:72:85:39:7f:81:7e:07:bf:
f8:bc:6e:8c:76:a2:8b:fd:bd:af:50:d4:39:3a:35:14:14:9b:
8e:03:75:b4:26:2a:78:60:1f:34:ba:39:45:06:1f:0b:11:22:
40:18:9b:ad:3a:56:37:8d:d7:58:c7:2c:4c:95:f5:a4:68:d6:
7b:d6:c7:1a:be:db:b5:b9:53:39:fd:8f:4c:9b:3c:9f:cf:65:
70:df:c7:b5:35:d8:66:c1:09:d4:dc:d5:fe:9f:37:73:8a:b3:
58:b4:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:39 2026 by rpki-client