Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: mrmB5T0EiGbtH86JKQSv1OLQZA5dDzpAnMh4ghrg6HY=
Subject key identifier: 5E:4E:E0:15:9D:CE:45:36:34:3E:1E:7E:E8:1B:A7:BD:9E:6A:B8:75
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019D27DFEBBA41E8FD7A4CD123DB04FFFE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 09E4
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: fMZHq3PYfM6M/+Do5AxMwGlqkHIlR1NPEEm4fiIvh+c=)
3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:eb:ba:41:e8:fd:7a:4c:d1:23:db:04:ff:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=5e4ee0159dce4536343e1e7ee81ba7bd9e6ab875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:11:ea:aa:f0:41:d4:f3:c6:b7:fb:3e:89:
4c:d3:64:e0:1d:af:d2:58:fa:86:af:00:f9:40:96:
91:07:10:12:da:30:5f:8e:01:79:88:1b:db:ae:e0:
01:9a:e1:79:6f:8d:c0:8f:fa:fe:cf:8f:45:20:95:
d4:33:e6:67:fe:e6:84:be:9e:73:4b:b9:34:9f:b2:
fc:ff:80:0d:46:37:0a:38:b3:8d:b1:16:97:bb:5a:
81:bc:e8:d6:c1:86:4c:34:89:eb:b6:aa:1f:c4:15:
ea:46:96:30:89:31:dd:1c:77:d9:6b:c7:f2:5e:1e:
84:5e:cf:94:1e:40:53:fc:5f:63:f9:a3:98:10:50:
52:4a:da:fc:cd:bc:ad:93:88:cb:3d:7d:6e:21:1f:
72:23:9b:92:90:a8:ec:b7:cf:09:95:46:1c:63:be:
96:6f:21:e3:65:b1:ef:f9:ac:a4:5a:cf:2c:25:1c:
35:65:bd:db:aa:6f:82:a7:1a:8d:72:ff:66:6f:68:
46:6b:dc:68:e8:8c:25:72:de:8a:7f:d7:76:05:29:
f8:50:03:20:a1:31:0f:19:4e:a8:9c:d3:25:06:4c:
16:9b:79:98:bd:82:24:5e:23:67:dd:20:81:b1:bd:
52:f3:83:8f:67:a9:2d:c4:a1:04:c7:42:a7:e1:e2:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:E0:15:9D:CE:45:36:34:3E:1E:7E:E8:1B:A7:BD:9E:6A:B8:75
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:87:37:6b:8f:fe:00:14:ae:6a:2a:18:de:1d:9f:25:87:7d:
d5:5c:ce:55:17:dc:ff:f0:88:5f:f1:a5:d4:f8:54:d2:37:75:
79:5f:be:dd:c7:5e:c1:7c:ed:7b:dd:6f:1a:e7:f2:91:1a:c4:
a4:73:34:ef:5f:bf:3e:ef:ff:63:70:02:1d:39:60:97:49:27:
c8:03:ee:ec:0e:57:bd:38:5c:54:78:69:be:e4:7b:05:d8:ad:
be:0e:0b:cd:b6:f1:f0:1a:85:89:27:4e:5c:e4:67:20:3f:30:
fb:ad:70:36:13:da:8d:b9:21:f6:d4:75:20:dd:d7:d4:77:fc:
20:50:76:59:d3:ed:1a:12:1c:67:bb:3a:c6:8b:63:b1:04:0b:
e6:2e:8b:7d:c1:47:e1:e8:c6:3f:e6:37:0b:e9:c7:bb:63:69:
72:cc:5a:92:69:9b:38:93:ac:15:e3:46:c0:89:c5:32:8a:71:
b9:dd:4f:23:6b:f9:58:2d:f2:40:57:1e:84:cf:4d:f8:89:74:
6d:f9:e5:55:0b:2b:5f:57:82:4a:90:83:41:e8:82:43:bb:1d:
74:22:cf:4a:7d:f4:f5:87:25:1c:d5:33:5f:17:7e:c3:b5:5f:
31:15:ed:82:a6:8c:df:44:cb:39:3f:e7:1d:43:1c:04:d9:11:
a8:3a:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:42 2026 by rpki-client