Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: xF2afzCo60GOHHkqQ8mdZf547kNbdS2G6nTYdwiPRnc=
Subject key identifier: 11:E3:4D:79:FD:18:BC:4F:16:FA:69:8D:AE:09:94:F9:E7:34:60:7E
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019D265EF88452A413D206A9C33B887E7471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1588
Signing time: Wed 25 Mar 2026 19:00:51 +0000
Manifest this update: Wed 25 Mar 2026 19:00:51 +0000
Manifest next update: Thu 26 Mar 2026 19:00:51 +0000
Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: Xbbip3eKxvjSJMuHYQjKp9E4DE+lbfIMUsV5iRbQh2A=)
2: m6N7HELrjq0BLATRDwGOIFqCEFI.roa (hash: SA6cDg1QSEbx4rFtnIc0Ww73sJQYtLI/mD1gBHeOlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f8:84:52:a4:13:d2:06:a9:c3:3b:88:7e:74:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Mar 25 19:00:51 2026 GMT
Not After : Mar 26 19:00:51 2026 GMT
Subject: CN=11e34d79fd18bc4f16fa698dae0994f9e734607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:cb:74:43:a6:f8:73:36:7f:94:48:5d:22:
96:05:0d:76:a2:9b:e4:26:94:88:ca:5b:e9:09:fd:
71:3c:d4:51:62:6e:81:85:4b:55:b9:42:41:18:56:
3d:0e:15:56:22:c6:da:33:29:23:e6:61:f3:8e:21:
5f:39:f1:06:83:31:02:62:39:f7:60:e9:07:de:e7:
19:70:f6:eb:ef:e0:9e:1f:16:b7:0c:bd:0f:46:c9:
59:3a:6b:87:7b:03:50:54:99:a4:72:16:6d:a8:73:
89:ce:71:a2:fd:21:47:a9:11:25:63:59:15:43:06:
d6:44:cb:71:f3:24:43:f3:0f:72:c6:d0:64:78:7d:
df:df:0d:19:e3:c8:07:e4:7d:07:ae:23:1f:2c:80:
d2:04:74:f2:87:84:8e:51:70:64:00:6f:70:f2:ee:
86:87:59:bd:c6:43:e9:96:2d:ff:a5:f5:0e:fd:82:
26:75:d0:b5:0f:1a:5c:08:91:a1:d4:ac:bb:5b:d1:
7f:49:ae:e1:2d:dd:4a:48:c2:a1:eb:87:0c:b9:a6:
d8:de:9e:45:24:1d:c7:35:3f:c9:0f:b3:36:71:1b:
b0:80:aa:cd:72:70:a7:63:fa:1f:a7:2e:10:4e:31:
ff:11:2c:07:3d:f0:5b:5e:2c:9c:d0:7f:86:4e:8c:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:4D:79:FD:18:BC:4F:16:FA:69:8D:AE:09:94:F9:E7:34:60:7E
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5a:73:06:3b:2f:4f:3a:eb:4c:29:55:2e:61:4f:cb:21:73:
b8:62:3e:a6:06:de:4a:f7:c0:db:fc:ae:58:a8:15:d1:c8:02:
43:48:dc:d9:c6:71:16:b1:1d:07:0a:a3:4d:bb:45:e6:23:1e:
33:ba:a1:c3:6e:6b:27:6d:67:75:38:5f:42:eb:2c:f6:5d:25:
25:ac:03:92:bc:7f:b4:c1:f9:7c:5d:8c:88:6e:e9:cf:04:16:
6b:5b:8d:85:ab:4f:33:39:21:17:fe:76:c2:67:c9:8b:fc:ff:
a6:e8:d9:fb:cb:d4:df:83:40:69:1c:50:b7:5f:57:38:16:36:
2c:ad:80:bf:d2:06:e8:05:47:3d:7d:d7:50:a6:71:88:94:59:
34:13:86:cb:68:e6:86:f7:2e:1d:fd:43:69:66:a0:33:26:1f:
76:62:f7:e3:d7:f7:d0:5e:70:97:31:d0:1b:04:fc:46:ad:16:
39:47:f0:d5:45:f1:d2:c9:07:83:5c:80:6e:6a:89:47:a9:24:
69:e7:a9:c7:b6:c3:20:44:09:12:94:04:0a:ce:cc:78:a6:60:
1d:93:48:db:b2:f1:17:50:7c:98:e0:a9:7a:cd:fe:50:ef:f8:
d2:24:29:40:f5:78:d7:19:31:cc:34:5a:07:c2:cf:a7:50:31:
df:84:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:38 2026 by rpki-client