Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: WwHzexO5lgL0cUd1JTk57IeW0hBj5tBVEDnWG6I8N3I=
Subject key identifier: CD:B4:5E:6E:6A:1F:BC:93:24:6B:FA:D0:6E:25:4A:C7:3F:B7:15:22
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019D25F10C23887C156FE2694A720C6A5FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 145D
Signing time: Wed 25 Mar 2026 17:00:47 +0000
Manifest this update: Wed 25 Mar 2026 17:00:47 +0000
Manifest next update: Thu 26 Mar 2026 17:00:47 +0000
Files and hashes: 1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: JkGkYsM24gOORV8oRr2Uh9cJu+fvDmt3w1H2zZGKhmM=)
2: l6hhFXm91_1hUHfqAiTC3reWmvc.roa (hash: g7ZHYlhYjCzwKg6ri+src+vOXxkbh94Rt78zZvtYmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:0c:23:88:7c:15:6f:e2:69:4a:72:0c:6a:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Mar 25 17:00:47 2026 GMT
Not After : Mar 26 17:00:47 2026 GMT
Subject: CN=cdb45e6e6a1fbc93246bfad06e254ac73fb71522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0b:5c:c6:16:28:3c:52:d5:8b:e3:24:32:c8:
c0:f2:9d:38:15:ae:f9:36:3f:55:0e:16:1d:22:96:
c2:f3:41:26:9c:dd:98:df:6c:6f:91:42:6e:cc:72:
ed:55:3d:09:45:60:9e:a3:64:66:ae:16:c5:f6:b4:
e6:69:12:16:3d:e2:ab:ae:df:11:fe:7d:a2:10:3b:
d9:d7:6d:ae:7d:c8:42:b2:83:4a:37:bf:e0:cf:e5:
8b:2f:8a:44:67:36:84:13:c9:fd:65:a3:16:cd:39:
c8:37:ed:0b:47:b2:1d:c0:bd:18:31:52:9e:a6:d5:
05:64:f9:37:94:de:a1:19:4b:0d:78:25:86:d5:f9:
41:07:5d:53:b4:b9:61:d5:0f:23:ed:18:87:2b:d8:
c9:bb:7b:5f:8e:b2:26:91:e7:d2:91:07:4a:ff:38:
7e:98:1c:72:7f:2e:d9:c8:7b:1d:fb:3a:f7:a1:cb:
b8:87:e0:b2:ee:01:3d:cb:82:c4:0d:e9:70:bb:f2:
45:c8:3e:dd:02:f8:39:3d:fd:f3:99:5a:20:3b:22:
08:92:90:ae:e3:a7:dd:57:a5:71:04:5a:3a:6e:a7:
0b:13:8d:64:98:24:f4:8f:9b:b7:a7:88:ce:da:50:
99:91:82:1e:93:b3:5d:9d:ba:e8:ea:37:63:b5:3a:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:5E:6E:6A:1F:BC:93:24:6B:FA:D0:6E:25:4A:C7:3F:B7:15:22
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:f1:bb:f7:f1:0c:40:47:3e:79:96:b0:3e:75:cb:d9:ac:
53:06:fb:5e:df:dd:0a:9c:c9:4f:00:41:99:34:16:c1:5a:a4:
10:45:2b:a9:45:dc:b4:54:aa:14:bb:e0:78:0e:b1:d1:c1:7d:
77:2c:78:6a:20:cf:e2:77:cc:cb:b9:c1:79:74:3b:5d:87:88:
7a:e7:fc:6b:05:2d:14:b0:22:f5:0d:6e:48:36:d0:10:04:39:
86:84:f7:1c:d2:db:be:90:0a:14:db:43:81:0d:24:f7:39:a9:
fe:d8:b5:90:b6:30:72:a1:0d:0b:a8:af:7f:c5:b9:4a:94:3a:
9c:83:c5:ed:a6:2d:86:ef:28:d3:5e:39:bf:d9:fa:bf:25:fc:
49:c0:78:38:8a:42:ce:e4:12:00:12:80:a0:97:17:03:41:55:
90:02:69:de:f9:b1:88:70:8f:cb:53:46:3b:b9:1a:a1:97:8b:
ec:1f:0e:b1:82:02:ea:e9:7b:86:c5:fe:89:4b:49:9a:9f:af:
8e:24:5c:20:66:6e:b0:b3:ce:4e:2a:88:d6:32:b9:84:9b:3a:
cd:cc:36:8a:b8:e9:6b:10:f2:a9:3c:6f:50:d9:e1:16:6b:90:
83:67:eb:55:9a:bd:64:09:23:1f:de:f5:68:64:58:c1:57:21:
ec:1e:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:26 2026 by rpki-client