Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: C9mDIY3YZJUZ85xFXxCJV65Adhh193SySfCynGACAX4=
Subject key identifier: 2F:8E:E1:D1:1A:84:BB:12:02:20:8E:99:89:7A:C8:D1:B6:A7:30:5F
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019D2884CD2BE5104EFD8DF8C10F5690B424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0254
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: Qbz2pYuOBOfBpzEOuJv8pkvNdJ3b02KSdbZervW7avE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cd:2b:e5:10:4e:fd:8d:f8:c1:0f:56:90:b4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=2f8ee1d11a84bb1202208e99897ac8d1b6a7305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:8d:48:33:3a:47:92:ef:60:72:e5:59:5a:
46:2d:45:6a:0f:f1:f1:43:f7:91:9a:cd:09:37:97:
3e:77:f0:5a:1f:ee:d4:d5:0b:ac:5a:a1:09:0c:de:
38:13:7a:dc:7b:81:11:29:a6:62:8f:a8:48:87:08:
96:8e:62:86:11:5d:2a:fd:e2:e6:4c:5a:c8:1b:de:
f8:40:4a:e3:d6:3b:6d:c0:f8:3c:66:b6:0b:fe:94:
f5:83:b8:e8:82:41:30:c7:eb:74:66:f7:6c:53:ba:
8e:1a:8a:32:87:a9:85:00:13:c3:ee:2e:1b:20:8b:
ca:f3:4c:ca:0d:62:0d:55:eb:ee:10:5a:5a:9a:8f:
3b:11:ab:11:ce:42:be:da:16:e0:d8:77:35:c9:0c:
f8:e4:32:29:ff:d8:b1:f8:b5:26:d0:80:22:0f:fa:
b6:e2:01:3d:e0:5f:04:07:3d:02:71:35:56:d1:0f:
b6:8c:47:dd:b5:60:32:74:98:d0:42:68:09:23:60:
b9:94:ba:7c:89:15:c1:71:f8:9d:85:71:30:66:c9:
46:a5:58:b4:19:9f:aa:62:06:1c:a8:62:d9:92:02:
47:d7:06:20:b6:d7:70:b2:1f:80:47:e5:b7:50:c2:
30:42:ed:03:aa:6f:a3:4a:54:b3:d1:49:29:b4:c4:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:E1:D1:1A:84:BB:12:02:20:8E:99:89:7A:C8:D1:B6:A7:30:5F
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:06:d1:74:31:91:8f:81:e5:97:56:88:d9:96:02:37:62:
ce:50:d6:19:fe:46:b8:54:e1:36:1e:98:8d:11:9d:22:88:2b:
45:e5:3d:a5:22:3c:a3:32:02:b6:68:bc:a9:e6:06:fc:83:f5:
f0:2b:09:c3:49:7f:69:f0:91:52:4e:84:99:d3:06:55:15:2d:
b8:aa:dc:93:36:37:b2:17:29:4e:48:41:71:c3:97:b3:29:31:
e8:c2:c4:8f:85:94:3e:71:78:f8:2e:ab:b0:12:44:6d:05:57:
56:a3:f3:62:fb:8e:c8:8d:e9:eb:1a:4a:c7:28:4a:89:4d:f9:
de:e1:ee:ca:dc:34:2b:3d:9a:aa:ea:5f:ac:c2:a0:bf:b3:0c:
80:79:22:99:f2:2d:b4:27:22:2c:26:35:8f:e6:e1:04:d0:e8:
89:0b:2c:83:5f:65:d6:4d:41:07:b3:c2:e7:4a:ea:d6:80:a8:
c7:e2:cd:26:d2:bc:11:bf:41:93:52:db:0f:c5:36:ab:b0:23:
4f:bc:df:b3:13:7a:f1:f6:74:63:5c:d1:52:34:43:db:6d:0a:
1f:69:a0:27:b1:4d:36:f3:11:dc:b8:d3:83:ef:2c:10:ba:5f:
2c:c8:83:e5:45:cf:52:b7:f3:53:a1:9c:0d:b4:e8:f7:68:83:
34:a4:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:06 2026 by rpki-client