Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: K7TrXQX+2ThH7NNbbVu/0tk55nhybLmE4B4BS4QlEw0=
Subject key identifier: B7:05:31:4E:76:80:19:9B:AE:BF:F3:A4:69:0C:AB:C8:BB:96:71:89
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019D2771D5A410DB93381AC0EC29B15745D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 1016
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: BOEi7NrSCNnbOJagz6PacwPyCow.roa (hash: gcJkZ8tsvtRiMSl8JsUfBFpQEizMhx1qFKi60dWgXD0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: 3oWXfFAOOMzqOpN5z9bJI1Iyg0AnXc85BgXa3S6lEaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d5:a4:10:db:93:38:1a:c0:ec:29:b1:57:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=b705314e7680199baebff3a4690cabc8bb967189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:c9:da:59:ac:8d:53:b2:ab:72:b4:14:bb:
58:84:e0:a8:09:df:3b:32:08:15:e7:f6:82:88:9b:
2e:0e:d5:a1:5d:66:94:05:84:85:73:a3:d4:7c:b9:
de:8e:b3:f4:1b:c8:6b:ae:23:f8:95:18:9f:d9:b3:
f2:65:ff:1a:35:a1:8f:69:85:7a:0b:fc:2e:78:b7:
41:a2:da:eb:2c:25:ca:77:68:52:a4:9a:bf:ca:2e:
b0:fc:86:71:36:d8:27:2e:33:41:14:0e:7e:3f:78:
6e:f6:57:7c:72:65:7b:7f:44:c9:18:25:7c:39:f9:
d0:41:5b:a5:9e:c1:77:75:e5:18:da:6b:53:af:5f:
4e:23:61:0e:24:02:e8:bb:12:c4:a8:6d:14:72:66:
40:f3:f2:32:97:53:3f:21:88:29:a1:09:7c:96:b1:
fb:17:97:d8:50:ce:07:d4:da:51:74:35:39:3b:e7:
1a:d0:a8:40:f9:ff:7e:e8:5f:d9:30:c4:0a:4d:01:
1d:c2:b8:93:a3:39:34:55:04:0d:98:6f:d3:81:97:
71:95:4a:20:e1:4b:e2:f4:45:a6:6d:1a:05:d0:21:
38:9d:a2:39:54:53:41:2d:d2:8a:6f:c5:a9:d7:0b:
8b:d3:35:ab:38:b8:87:1f:cf:3a:80:09:4d:7f:d6:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:31:4E:76:80:19:9B:AE:BF:F3:A4:69:0C:AB:C8:BB:96:71:89
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:ed:2c:7b:60:82:ad:21:c8:82:ab:8c:35:b3:c6:23:7d:
71:fa:5c:68:64:4b:84:b7:83:f0:f8:6d:57:b9:b4:93:b1:8e:
9a:a8:e3:1f:d2:ea:50:55:7a:54:ed:08:d1:8a:43:c8:79:a9:
8e:15:8c:8b:e3:ac:bf:68:ac:cb:a1:9c:59:21:a7:87:be:f3:
89:6b:56:b9:a4:65:49:c6:43:91:cd:60:69:f7:a5:b9:7e:ed:
97:97:35:7c:61:d7:29:bf:64:10:04:e9:86:a0:65:63:6f:93:
1e:4e:81:4e:17:a7:8a:0e:25:4f:1d:05:c7:50:bc:4d:2e:39:
7e:8c:62:24:76:f2:e1:f8:24:a6:f5:b8:7a:d6:e1:51:05:3e:
17:e8:33:a5:e8:5f:9d:1f:38:fe:2b:1a:f3:85:cb:7a:45:31:
55:b8:1e:6c:ca:53:49:5a:e7:5b:ef:99:bc:f6:cd:d6:38:12:
ff:95:d2:a9:5c:dd:b7:99:be:3b:80:3e:f8:68:9b:08:c8:80:
e1:7f:f1:1b:3f:96:18:2e:fb:21:28:1a:8d:0f:49:32:e9:08:
73:ca:18:50:e3:44:f5:4b:3f:8d:8c:e7:19:c8:3e:b3:d7:d3:
2e:f4:8e:df:aa:48:1d:c9:03:e0:e7:3e:25:81:bf:91:c3:06:
75:f5:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:59 2026 by rpki-client