Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: nSp89s28ddvfdEXa6AzVN4Ed8kaLa8/HHtNrO48HTrQ=
Subject key identifier: 32:F5:EF:35:21:24:78:CC:1A:86:85:BD:DD:46:B5:9D:58:BE:96:C6
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019D28F32BCCA53256C31DF316FDA3A7ED79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0A72
Signing time: Thu 26 Mar 2026 07:01:58 +0000
Manifest this update: Thu 26 Mar 2026 07:01:58 +0000
Manifest next update: Fri 27 Mar 2026 07:01:58 +0000
Files and hashes: 1: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: DL3+Y0/Fb/I2Ppza9D/3a/KNDOUKX9zIuMbjhTugoOU=)
2: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (hash: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2b:cc:a5:32:56:c3:1d:f3:16:fd:a3:a7:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Mar 26 07:01:58 2026 GMT
Not After : Mar 27 07:01:58 2026 GMT
Subject: CN=32f5ef35212478cc1a8685bddd46b59d58be96c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:ef:7e:65:f0:b4:8f:51:85:fb:35:34:c0:
25:d4:58:c3:bd:72:6c:df:d5:41:7a:1d:80:df:df:
9c:c9:a1:eb:4f:08:19:c8:35:63:f4:06:70:77:b2:
84:7a:1e:ce:a9:bc:c4:dd:8f:f9:e3:ee:24:2b:14:
76:8e:b0:d6:76:64:de:f7:f1:af:91:bf:82:c5:3c:
b8:9e:10:51:07:c6:32:d7:50:60:fd:72:3f:99:21:
ed:35:26:18:dc:ea:85:e8:0c:84:4f:dd:b4:ee:2f:
e3:10:e4:b1:b6:cb:87:1b:a6:68:dd:7c:e1:cc:39:
d7:21:e2:c6:60:50:c1:80:b5:22:64:b6:25:91:6f:
93:b5:90:9d:4c:7b:64:54:85:ce:de:47:84:1f:91:
08:1e:52:95:9d:69:8f:5d:3a:0f:93:29:17:67:6d:
34:31:e2:f0:10:84:01:04:31:9b:75:8a:5d:ae:b7:
5b:10:b3:d2:dd:0c:be:3a:1b:eb:e8:24:3b:6f:4c:
a6:06:dd:b6:1e:0f:4f:b2:2f:11:f7:ac:8d:ca:6f:
25:5b:04:ce:22:64:4b:b4:53:8c:73:b4:95:6d:da:
d3:16:01:6b:bf:e8:cd:1f:10:ef:4d:66:94:d5:ef:
59:62:f6:1b:b6:1e:93:82:6d:38:a5:c6:35:e2:57:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:EF:35:21:24:78:CC:1A:86:85:BD:DD:46:B5:9D:58:BE:96:C6
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:3d:2d:f1:0d:15:4c:93:0a:f9:8c:3b:29:9a:4a:cc:17:
d9:4d:eb:fa:e1:68:63:66:31:dd:41:dc:de:f3:81:0d:8c:72:
02:5e:86:1d:eb:63:c7:35:a9:76:a4:53:1d:7b:b6:a8:df:a3:
f3:b2:16:af:52:a5:c0:4f:7b:fd:c8:b7:e7:d0:8a:56:2f:40:
df:86:d6:4c:c9:a8:0e:f0:2a:dc:79:5f:53:e3:8e:5f:c9:6f:
b1:98:c7:b0:c2:bb:93:a7:ba:8b:b8:f8:ae:50:e9:cf:15:0b:
a2:c5:91:b3:2b:d8:7d:b0:11:25:cd:c3:1c:47:28:f5:31:90:
13:1c:d2:5e:a9:19:ec:b6:67:03:39:92:c3:f9:e0:56:af:8e:
74:2f:5c:85:38:1f:0f:89:e3:ed:d7:c0:be:1a:b5:86:cc:60:
b1:60:5b:0f:82:57:77:42:7a:3c:5d:5c:96:67:ee:9c:81:cc:
4f:30:38:8a:f9:9e:83:47:77:ed:23:8d:bb:98:ea:c5:18:b5:
73:51:d7:71:26:3b:bd:7f:ba:c9:be:d8:3f:c2:78:a7:d4:73:
a2:da:64:bb:40:e3:b2:2a:a5:e4:2f:57:55:d2:f8:60:48:35:
86:fa:70:09:46:52:fa:52:b3:5d:f0:50:cc:6f:11:fd:d9:d8:
13:68:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:16 2026 by rpki-client