Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: LzG3RoxB7Kk4lUFazM6EwZzS9SZQUMhHT1ynuDQOa1U=
Subject key identifier: 97:FC:7C:68:6B:C3:7E:C2:10:CF:A3:9F:7D:10:5F:4D:60:D8:8F:6F
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019D284D308513D678E9AAE0BB6FBCEBE92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: 1-iaQVGIRiX5iu1fv45oI-_0UAMs.roa (hash: UJsZfJvQEHGoE3GSbiyNR/EqoxSd0S1YeBtQv8m62RM=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: dd5Jr3ivbJC4UMmjmj7pXJiUq+s/QyFgTQ5GD6/J6P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:30:85:13:d6:78:e9:aa:e0:bb:6f:bc:eb:e9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=97fc7c686bc37ec210cfa39f7d105f4d60d88f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:5f:4a:bf:ad:7c:d6:54:87:06:88:f8:09:
cb:df:d9:64:09:7d:65:f6:0f:27:24:ea:57:d8:5e:
2c:bf:1a:e4:67:98:fb:c9:e6:e4:0e:3d:ee:c5:82:
5c:3c:42:02:bb:a5:a6:f1:25:e6:e9:71:47:1b:0b:
ce:d7:11:1f:90:27:25:59:b6:7b:b4:82:95:04:75:
ef:1e:2c:c7:36:ce:0f:57:09:74:6e:64:41:48:5c:
82:a1:9c:31:dc:0c:6d:1a:c9:9f:cd:dc:91:af:5e:
1e:1b:e1:78:68:20:73:be:0f:3b:93:10:85:24:f5:
38:ea:7c:85:0a:29:9e:90:b9:e2:af:e5:37:24:17:
44:38:32:00:28:5c:65:90:6a:ab:40:2d:b6:b2:ea:
32:de:a6:5d:9a:7f:56:05:e3:22:bb:5f:36:72:e7:
fd:44:86:0c:62:27:bf:12:7d:b2:f8:87:b1:34:cc:
30:69:a6:8e:bb:31:12:f4:3c:5a:1f:4d:dc:ac:53:
28:a7:99:68:56:e4:9e:aa:c5:23:61:5a:e7:4e:5a:
f5:05:0f:c1:26:ed:f0:2b:bd:9b:12:10:31:97:3e:
bb:fd:51:54:23:0c:67:1d:4b:b7:ab:5f:5a:9a:51:
cf:49:00:58:0e:81:64:4d:74:e1:9d:3e:42:0e:1c:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:7C:68:6B:C3:7E:C2:10:CF:A3:9F:7D:10:5F:4D:60:D8:8F:6F
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:76:26:10:12:fd:39:ef:b3:c8:45:e4:d5:1c:6f:eb:a9:
e3:ec:91:8a:de:92:d6:24:f7:3e:2c:ca:89:fd:d3:52:0c:fe:
bd:96:3d:20:e1:16:6f:d6:ee:78:37:b0:76:67:66:59:b3:64:
1e:a0:86:d4:d3:93:70:c2:3b:c3:9d:25:bf:33:05:5c:e7:86:
19:0d:37:48:a2:05:99:9a:ba:7e:3c:ee:b0:5d:ff:0d:aa:99:
61:84:84:e8:36:63:82:eb:79:79:b9:3f:a8:d6:e9:0a:92:a0:
7b:4a:59:f4:d4:f2:3f:c5:9a:f4:8f:a7:97:96:10:3b:85:fe:
4b:9d:5e:c9:72:f1:42:27:58:6d:5d:3c:f1:b3:5e:13:16:0c:
ee:96:b2:5c:48:2c:ef:17:c3:68:28:bb:bf:f5:86:9f:65:7d:
83:94:a5:cb:5c:a4:68:de:72:a0:e3:60:e3:14:84:28:1d:3b:
34:dc:43:3f:a7:0f:c4:72:63:a8:ae:d1:18:73:d4:a6:4a:be:
63:5a:3e:57:c1:ad:80:70:14:62:0c:3d:91:ad:7a:1a:43:87:
1c:7a:32:8a:01:1d:29:9f:d4:04:37:0f:11:6f:cf:90:ee:b5:
6f:31:77:81:c3:28:0b:fa:d9:91:80:eb:da:47:e7:b1:2f:13:
a7:f6:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:27 2026 by rpki-client