Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: 6Ne3GSnWMJnFBpqyCV5iHm+cJ4eeg2ygslSUYHtPuRs=
Subject key identifier: 10:05:82:EF:15:E8:3D:93:94:74:18:9C:F3:31:81:6C:FF:37:9D:FC
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019D26CCB30A48A4438253832001C237EB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 094B
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: PR91ry3J0euYdorH5rO0N-Bkpvk.roa (hash: DbSkzL37Cl5yQPPXgAD1SKpuqfRlWV4g2sxvgZ9ZsC8=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: vHPWIOVQt91jmVvXd3daPZmU0tn3TjHgbME+wkoSXN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b3:0a:48:a4:43:82:53:83:20:01:c2:37:eb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=100582ef15e83d939474189cf331816cff379dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:46:ef:26:16:6a:1a:f7:2a:b6:6c:86:29:
2a:9f:6b:f3:16:7a:70:1f:e5:a0:6f:4e:33:5b:ec:
86:21:8d:e2:c1:7f:61:cf:c6:f9:9f:a1:83:80:39:
9b:f5:a7:6e:f6:c5:ac:f9:8c:cf:78:21:6c:34:16:
74:fe:c6:41:95:88:71:9a:5d:79:b7:f6:18:5a:00:
5c:20:70:8b:02:d0:83:68:0f:04:63:7e:08:2f:c7:
6d:f2:4b:38:13:6f:37:a0:95:6a:c4:46:04:6c:5e:
75:81:bc:97:71:71:1e:f5:f6:e3:74:40:b8:0d:83:
04:ca:b3:2c:bd:02:51:74:ed:fd:98:18:16:64:34:
61:59:00:21:6d:06:69:2e:1d:b9:b3:4f:45:dc:82:
bc:5e:a9:29:dd:f5:de:0e:a5:db:b3:7d:35:c4:93:
c4:bb:c7:b4:44:30:3a:44:c0:28:18:71:f0:60:13:
a6:f9:42:cc:5e:34:78:29:a5:a9:54:29:a7:37:45:
08:10:8e:66:91:bf:7d:47:eb:6c:0e:8c:1f:f4:df:
7c:a4:cb:c9:02:5e:cf:f0:1a:b0:db:fc:30:09:a0:
91:a8:6c:c1:61:e8:73:45:4d:40:72:7a:94:2f:76:
8b:25:46:79:14:00:bc:41:50:95:47:b6:2d:c0:c6:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:05:82:EF:15:E8:3D:93:94:74:18:9C:F3:31:81:6C:FF:37:9D:FC
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:92:ee:7e:b0:4a:ff:3f:9f:7e:18:da:f3:51:e6:69:4f:9f:
db:b5:b4:89:08:34:8a:5e:55:b1:5c:6d:eb:61:2c:4b:83:c5:
1d:90:6b:de:65:a3:9a:c3:4a:7c:1d:7b:01:84:9f:fa:36:2b:
47:53:54:d3:e3:2a:40:bb:bf:eb:30:c3:82:be:24:53:8f:9b:
b6:cb:b9:90:3d:0d:97:f0:5f:2a:d0:c2:41:d7:3b:50:d9:ae:
4e:b3:e8:af:a5:08:69:31:9c:a0:f2:ec:24:73:4f:49:4a:17:
ac:cc:e6:42:49:f4:ae:32:7a:43:a8:10:b0:22:ea:27:c8:06:
22:16:25:a3:a7:fd:dd:fd:79:c5:3d:35:db:d9:b3:b0:35:45:
27:fc:5c:14:e8:0f:65:7e:4d:aa:1c:74:a3:05:9f:b9:e7:20:
30:79:f6:b7:13:ef:bf:a0:29:6c:28:96:4a:13:72:38:e7:8b:
7a:36:97:61:82:57:90:ed:a5:8f:7f:57:38:16:91:fb:d7:cd:
3b:90:ba:ea:26:fa:9e:e5:03:81:93:04:04:df:aa:eb:b9:67:
13:17:cd:36:e7:c4:ed:35:63:34:fc:5c:29:35:7f:b3:a6:52:
5f:a5:06:9d:09:69:0c:97:cc:60:83:88:67:d9:59:ea:88:da:
d3:fc:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:36 2026 by rpki-client