Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: MZNAmzg7Q0szJ2wDFvNS+P9Hc9R1297U7ItKSou1yg4=
Subject key identifier: 2D:94:B2:0F:32:EA:07:BF:2D:22:B3:DE:55:D1:43:32:A4:D6:2B:1F
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019D2AA9AFDB1370A7C0EE3DB001FA563F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:00:56 +0000
Manifest this update: Thu 26 Mar 2026 15:00:56 +0000
Manifest next update: Fri 27 Mar 2026 15:00:56 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: KRURuV8B1wK1epqi+mTMd4GnDiqdk2pPu7JCM5JEvrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:af:db:13:70:a7:c0:ee:3d:b0:01:fa:56:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Mar 26 15:00:56 2026 GMT
Not After : Mar 27 15:00:56 2026 GMT
Subject: CN=2d94b20f32ea07bf2d22b3de55d14332a4d62b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:00:36:d5:05:f1:97:a6:f9:84:c8:86:66:
73:68:23:e8:c1:80:51:7d:b3:68:73:5f:7a:b8:45:
df:00:27:12:ec:3c:a5:0d:68:5b:bd:a9:f2:30:1b:
92:a1:3d:b4:23:bf:e9:02:33:c1:fb:66:4c:6c:e0:
f9:63:07:11:1e:2a:9c:ba:15:06:46:a2:f4:92:56:
7a:73:ea:7e:af:19:17:78:97:e1:84:95:78:01:14:
7e:7f:79:b0:67:8c:3c:b1:7b:3a:f2:33:33:71:ba:
b2:22:28:6b:1c:68:dd:24:f5:99:fa:70:38:04:d1:
c0:2b:57:8c:cf:72:c5:b3:c1:84:7f:21:3a:85:ca:
46:17:4a:ab:57:bd:88:87:c4:5b:fa:5a:85:4c:9d:
b8:94:86:71:c0:0f:56:53:99:4e:1e:76:09:06:73:
c8:cb:23:f6:85:fd:6b:0c:b3:b0:ea:60:ae:ff:dd:
89:db:44:e0:4f:c9:f0:9a:fc:61:7c:29:4e:9d:42:
b2:bb:74:33:7b:25:04:8f:e4:54:42:2c:fc:d2:bb:
bb:2e:b7:86:ef:33:82:b1:ea:65:c0:23:2d:30:20:
d9:96:d6:6a:4c:5a:d3:fc:ab:ca:e6:da:88:43:57:
73:60:dd:7c:ee:aa:5c:86:5f:06:78:f2:68:03:cd:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:B2:0F:32:EA:07:BF:2D:22:B3:DE:55:D1:43:32:A4:D6:2B:1F
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d8:25:4e:4e:97:b4:64:53:89:67:70:4f:c3:27:90:6f:63:
da:09:4b:89:81:33:e8:da:36:8e:f4:c7:89:50:e7:aa:3e:57:
fa:6e:9d:7b:57:04:d0:64:25:07:52:18:03:e3:75:8d:fc:ac:
58:28:4e:d6:1c:cb:98:64:8e:e5:fd:dc:cc:a3:2d:ac:04:1f:
20:84:15:d1:bf:96:db:84:20:97:33:2a:5e:4b:a7:77:2e:5f:
09:01:01:f4:e4:5d:df:d6:68:85:b0:24:a4:a2:4b:04:4a:b2:
69:f1:92:f3:31:0f:22:79:08:b5:0d:b8:ee:7d:f4:b4:54:d5:
55:25:61:d3:35:42:80:d1:c3:0a:03:b3:cd:53:2e:2d:16:d7:
6a:95:c5:ea:11:43:a9:82:43:6c:3d:c1:27:fd:44:53:14:bf:
5e:ed:d0:41:10:c3:1b:26:40:dd:d6:1d:31:d6:79:44:77:8d:
ad:2e:4f:73:4e:ed:c6:35:d4:68:33:b1:8b:44:72:c7:42:d9:
fc:17:7f:61:ac:2f:64:67:43:73:a3:0f:1e:35:5c:85:ba:73:
41:ca:f2:f1:34:23:4a:34:32:50:8f:02:e1:72:4a:1e:30:4c:
0f:b7:00:43:22:18:af:1b:14:71:13:ad:8a:b1:f1:8c:50:cf:
75:ce:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:41 2026 by rpki-client