Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: zJAb7fX9Zfi8anUpNJh1JX8fxcN+QwckRuCemNmqt54=
Subject key identifier: 1C:7C:70:43:76:41:77:7C:4E:C9:BB:E8:02:CC:27:AB:9A:43:17:C6
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019D258390C262D893404438F320884666A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 14E4
Signing time: Wed 25 Mar 2026 15:01:12 +0000
Manifest this update: Wed 25 Mar 2026 15:01:12 +0000
Manifest next update: Thu 26 Mar 2026 15:01:12 +0000
Files and hashes: 1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: +mrQlFsq9dO469rF8zqArSS0zhksv/rfqtEkazrpF4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:90:c2:62:d8:93:40:44:38:f3:20:88:46:66:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Mar 25 15:01:12 2026 GMT
Not After : Mar 26 15:01:12 2026 GMT
Subject: CN=1c7c70437641777c4ec9bbe802cc27ab9a4317c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:f6:7d:fb:55:e3:6b:3f:7f:0e:47:7d:3b:
9f:88:83:2c:53:18:12:2e:e0:15:c3:2b:d2:7b:35:
32:d7:3e:78:b5:e1:b6:a9:6c:92:20:1c:d1:ba:33:
99:2e:cb:c6:ce:e9:4d:d7:71:ee:e3:b1:48:79:5f:
a6:73:10:69:68:9c:96:08:0f:26:cc:4a:e5:48:b0:
02:61:3c:ac:2d:01:3f:b0:6b:5f:d2:3c:78:4d:eb:
bf:46:73:4e:02:1f:8b:e4:07:84:a6:51:d3:b8:06:
66:52:d7:df:23:30:38:aa:bf:b8:b6:9a:bc:99:46:
dc:fe:9d:bf:e4:34:1b:cf:75:2b:00:00:07:f5:86:
6a:b0:95:20:2f:f6:3f:5b:9d:30:4e:d6:60:9e:1e:
10:71:d6:9a:46:3d:f3:9e:31:a0:8e:b8:3f:7a:99:
6b:11:de:be:7c:9d:b0:1f:eb:97:bc:fc:89:ff:39:
0f:62:d7:4f:bb:8b:09:46:18:09:ce:cc:36:b9:bc:
2a:44:b7:5e:56:47:fc:89:e9:62:eb:f9:46:e3:f8:
64:5b:10:70:7a:7b:2b:0e:a0:b2:16:9e:35:ae:a8:
84:84:dc:3c:e3:1a:c6:9c:69:16:ed:24:a0:98:ce:
c7:3b:41:8a:46:1f:ec:25:cc:62:97:f1:e0:6f:22:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:70:43:76:41:77:7C:4E:C9:BB:E8:02:CC:27:AB:9A:43:17:C6
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:13:65:42:32:a3:59:c3:5e:35:3f:51:48:d2:c7:4c:8d:
83:8d:a6:71:53:4e:89:4f:28:db:f3:ef:15:ed:9b:48:ae:f3:
f1:70:0c:52:2e:78:53:fd:4d:11:2b:f1:eb:3a:80:b5:f3:28:
a9:d9:1e:bc:d5:7b:95:07:a6:8d:85:ca:a2:d6:ae:a9:90:19:
ed:2b:5a:fb:49:0c:31:6b:18:66:3f:be:f3:61:b9:06:80:7d:
77:a8:8f:04:fb:e5:1d:40:52:b7:b1:c0:d4:18:b1:b5:20:38:
02:40:39:5d:0c:78:49:6e:a2:3c:e8:7a:34:36:1f:1b:8c:32:
8d:19:b9:83:a0:ce:f7:20:e8:56:e7:4f:51:ad:97:35:84:f6:
19:97:6c:fd:0c:5a:9a:f4:30:38:d2:59:6e:69:08:82:68:24:
92:a7:10:5c:b3:f1:c5:ca:d8:34:5d:6e:bf:44:ed:d9:9b:7a:
db:06:fd:d6:ee:7c:f0:8f:f9:94:23:53:b1:00:d2:d2:1c:5c:
1b:81:21:91:30:f1:b2:3e:cb:2a:16:a2:e1:fa:e8:41:1d:eb:
98:36:5d:e4:e2:eb:f8:a0:cd:ab:38:ba:91:2a:96:7f:78:74:
da:14:34:ef:c3:87:2d:e5:8c:96:41:ed:49:7c:59:31:d2:2c:
b2:c6:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:32 2026 by rpki-client