Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: zJ8y6cqGwV2ZdC1EUcSTxwalGF+xffUYu0d8EvkOphw=
Subject key identifier: CA:45:3B:EA:87:B9:5C:48:BA:3A:AE:20:43:9E:F9:DE:42:0C:A1:B1
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 019D273B2EEBFB0274C11038D4630D0C7CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 1593
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: kWXAQo/bM0bmqXx6N9p2VErusc3P8vLpeZBkb2db1+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2e:eb:fb:02:74:c1:10:38:d4:63:0d:0c:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=ca453bea87b95c48ba3aae20439ef9de420ca1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:f1:f4:be:e4:74:db:7f:ab:56:09:7a:6a:
b1:ec:af:98:20:f5:88:1a:f4:52:a5:34:fb:e5:77:
8a:62:12:fc:28:3c:85:0f:34:cc:a9:83:b1:9f:de:
c9:2c:b8:67:03:19:63:30:13:a4:9d:41:92:c2:71:
a4:e4:fb:34:64:85:36:c5:23:a8:56:df:7c:56:2f:
8f:d5:ef:48:18:5e:c0:9f:a1:0c:66:11:43:d1:3e:
73:43:39:81:5c:b3:a3:80:8c:87:e5:33:51:3a:44:
8e:07:ee:ec:2d:c4:eb:1d:bf:43:c6:e9:3e:e5:ad:
7a:41:22:8b:ef:54:8d:1d:7f:52:57:e6:f8:55:1e:
bf:53:04:ed:05:13:64:6c:24:4f:d0:06:a9:54:a8:
7b:95:22:bd:c0:c9:0c:1a:0c:f4:fe:81:df:a4:be:
d6:eb:bc:4a:42:92:70:63:ab:68:b9:1c:d0:94:8a:
54:81:88:37:a4:a2:fd:39:ad:e7:d9:dd:46:9f:be:
5a:32:1c:e4:d9:b9:c0:72:93:0c:49:1f:3e:cf:c5:
99:4f:88:16:fc:b5:b8:13:4a:f2:35:d3:9a:a6:0f:
90:98:c6:ca:27:a2:8d:20:5e:a7:99:bc:63:bb:6b:
c8:6b:ae:40:67:84:ce:33:c9:63:e0:3a:e4:49:9b:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:3B:EA:87:B9:5C:48:BA:3A:AE:20:43:9E:F9:DE:42:0C:A1:B1
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:8c:ee:c3:8c:88:3e:ec:48:07:e1:eb:42:3b:57:ff:1f:
18:30:9f:06:ba:88:e3:06:f3:4a:d7:d9:d5:d9:81:89:44:b3:
28:80:b2:90:01:62:b7:5e:43:a5:a6:8c:56:3d:c8:5e:27:92:
d9:8c:d6:89:79:e2:c6:3b:46:b1:0a:1b:08:e5:95:bf:d4:f1:
c2:c8:09:5a:87:e5:86:c1:b8:c3:d7:b3:9b:71:e2:d8:98:fc:
d3:84:ec:81:9d:78:ad:7a:5b:aa:cb:8b:15:4a:b0:50:97:37:
30:92:ea:d0:cc:30:3d:55:ba:ab:82:c6:6b:f0:c2:68:b6:d7:
91:a7:73:77:f0:78:a0:47:d9:2f:09:09:b3:24:cd:4f:50:89:
f9:7c:1b:be:c0:af:03:e5:83:83:3e:ee:00:7e:78:8c:dd:e4:
46:e1:03:87:fd:8a:e8:fb:40:da:48:01:34:1f:45:46:21:3d:
de:59:f6:f8:0e:9f:fa:2e:b6:a3:95:96:27:b3:42:be:49:8a:
56:01:42:a3:c2:df:e3:0a:cc:19:71:f0:f2:16:7e:24:3f:9d:
60:e2:04:4a:3d:8a:0a:86:89:db:f2:c6:1a:92:c3:06:32:b4:
73:0a:10:1b:fc:39:4e:d6:38:81:94:11:52:5a:4a:a1:bd:1a:
6c:20:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:55 2026 by rpki-client