Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 1AsaiygK2NmCXkRJ4NWdIIFYb6gCDLINit73z7FKCdk=
Subject key identifier: D3:3E:FC:BB:EB:A0:77:06:32:74:23:5F:DB:11:5E:E9:D0:B0:22:5A
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019D2A04AD00C903A08EFAF9E1ED52A58313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: d9+/JUqKVZvLPMPja6wqol4TaMA/BfRej+e97O2zCuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ad:00:c9:03:a0:8e:fa:f9:e1:ed:52:a5:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=d33efcbbeba077063274235fdb115ee9d0b0225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:8d:48:f7:53:0f:44:89:2a:c0:95:83:74:
f2:26:af:2a:02:44:50:ae:7f:b7:0b:d3:af:b0:de:
c6:5c:5e:45:16:ba:83:98:5b:a7:b2:69:6a:9e:0f:
6f:09:0e:e6:7c:54:a0:52:72:54:fe:66:7b:8c:c4:
49:4e:0c:46:a3:b6:cc:ab:5a:f8:bc:cb:f7:72:73:
51:05:7e:3f:ab:7b:34:0b:59:b1:2c:02:92:35:d8:
32:12:f0:73:a5:09:9f:2a:41:bf:b2:1f:19:56:fa:
6b:e1:62:f5:20:31:86:16:b9:23:ab:34:e8:07:30:
70:7e:02:b7:a1:89:b9:f2:3b:d7:cf:41:4a:b2:99:
8a:9b:4f:52:37:ec:eb:a9:65:1e:fc:5f:14:dc:e5:
b3:55:18:b9:7b:a4:58:a8:18:f1:0a:e0:aa:a9:93:
c6:b2:91:a0:8c:07:7a:e2:2a:c8:db:ca:9b:2c:a0:
2e:f5:c1:f5:02:1c:e9:e3:66:de:75:4b:ab:1a:d5:
b2:e7:60:50:e6:6b:0f:7d:f2:58:83:b5:f7:06:a7:
30:8c:70:57:76:0e:02:ce:18:07:34:d8:2f:5d:32:
09:f4:b1:31:5d:df:a0:95:90:19:56:29:ec:69:e1:
ee:14:f5:a8:49:81:d5:c3:8f:16:3c:3e:de:f0:8a:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:FC:BB:EB:A0:77:06:32:74:23:5F:DB:11:5E:E9:D0:B0:22:5A
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:d8:93:8e:ce:e7:0b:b3:77:3f:7d:0f:f9:a6:60:35:a0:
b1:51:99:49:b0:15:51:67:57:c6:0b:6b:2f:ce:c8:7c:d3:93:
9e:09:22:b6:5c:60:49:5e:cf:8b:c1:a5:67:e7:1b:f6:3e:c3:
34:53:48:c7:d8:fd:65:d2:4c:3c:31:af:0d:9b:a6:91:55:a2:
53:8d:78:08:ad:72:aa:df:f3:e0:fd:b4:3a:65:cf:2a:1c:e2:
6a:17:3a:46:ec:67:0b:e6:4d:29:47:93:f3:23:79:d8:ba:e7:
32:6d:23:f5:8a:11:e7:78:2b:4b:02:59:2e:5b:fb:52:62:de:
ff:ea:73:59:ce:33:83:9a:ae:a5:5d:2a:0a:3c:43:50:71:b6:
c6:92:a5:09:a2:ad:61:bc:17:43:d7:af:fc:69:1b:77:bc:a9:
13:de:7d:c9:f3:ec:93:ea:dd:44:16:bb:46:50:02:79:2a:53:
bc:c5:f3:90:a0:a4:75:0b:80:66:29:a8:6a:ff:e4:28:22:36:
25:c3:d9:55:17:14:91:c0:34:bc:09:43:5e:fa:23:99:46:ed:
6a:58:40:eb:58:84:a7:6d:f7:29:c7:7d:49:d3:37:71:a0:b8:
9f:94:15:7c:b7:eb:1a:89:d2:3d:36:13:dc:e6:10:10:7e:2f:
df:5c:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:51 2026 by rpki-client