Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: b9VjqtNeMhQoboEniXepiyyw9B8LfyfSEQR+tTlQMcY=
Subject key identifier: 84:C5:2B:6C:74:47:2D:9F:AE:19:3A:9D:C5:57:6E:22:B8:54:A0:09
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019D25F1FDF05265888BC66D6BBDFC3E0478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0EB6
Signing time: Wed 25 Mar 2026 17:01:49 +0000
Manifest this update: Wed 25 Mar 2026 17:01:49 +0000
Manifest next update: Thu 26 Mar 2026 17:01:49 +0000
Files and hashes: 1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: 3JKCWyerFFe1fQadORd3wAdl9mI+znOHnRc6q4/6zCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fd:f0:52:65:88:8b:c6:6d:6b:bd:fc:3e:04:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Mar 25 17:01:49 2026 GMT
Not After : Mar 26 17:01:49 2026 GMT
Subject: CN=84c52b6c74472d9fae193a9dc5576e22b854a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:cf:fb:2b:18:6d:1f:86:3f:88:7b:92:de:
e0:b7:be:fc:8a:76:85:20:62:7f:f1:6d:eb:26:ee:
6a:92:f9:87:60:bd:2c:77:c4:61:20:8d:c6:de:3a:
bd:93:83:18:27:c9:6b:b0:18:1a:da:5c:3c:ed:b4:
b9:85:1a:27:c1:44:2b:33:a1:dc:4d:0f:4f:9c:f0:
0e:74:6c:f1:bc:9d:e8:a8:5c:b1:6f:28:93:7a:03:
ab:e6:07:be:47:43:dd:ba:21:f8:d8:fb:31:02:36:
7a:4f:b8:0b:bd:9d:d8:2a:00:9f:7b:ca:c6:dc:a6:
e1:e0:84:ec:34:74:08:18:e1:77:15:37:69:d6:30:
a9:e8:fa:96:d4:d4:30:cd:7f:f3:12:49:ac:9c:06:
c5:fc:88:02:af:1a:5f:f0:d0:a0:46:2a:77:db:fd:
28:b5:e7:20:24:2c:6e:00:05:3c:85:de:4b:74:d2:
30:fd:c9:d5:13:ac:ec:f3:87:7b:4f:8c:6b:67:74:
25:ea:23:60:a7:f1:47:2e:be:01:c7:0f:62:2a:c3:
04:74:85:88:c9:bd:e3:e0:44:be:62:e7:84:64:20:
4b:e6:4d:ff:f9:1d:e8:9e:ea:b7:bb:51:84:a2:cc:
71:ed:e6:4b:ae:78:db:d5:74:31:5e:c5:12:51:ca:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:2B:6C:74:47:2D:9F:AE:19:3A:9D:C5:57:6E:22:B8:54:A0:09
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:44:02:07:60:e5:66:26:c8:c8:14:9e:c0:72:84:01:7c:
d9:9a:a4:6c:7f:d9:5d:79:90:0d:4a:bd:37:9a:7b:b0:be:5f:
56:c7:61:19:6a:6c:db:4f:25:26:3c:7f:29:b7:26:b1:e9:38:
d3:d0:2d:33:e5:39:0a:a4:91:17:47:b6:48:5c:e8:f0:82:75:
aa:37:3e:77:c1:35:1f:ce:6d:0f:cb:08:fd:60:47:d1:03:c3:
74:da:f6:ab:de:98:77:4b:77:42:c0:93:b8:b2:19:b5:03:58:
f1:8e:06:2a:76:23:d4:9b:1b:f0:5f:e0:33:2f:f1:ab:65:e5:
23:69:2e:dc:f7:9e:c6:f8:46:b3:02:76:05:af:47:1b:09:6e:
80:41:f8:28:bb:76:b4:f0:bf:ec:d8:4d:0b:d8:cc:b9:18:8c:
a5:9e:0a:17:43:a3:7e:21:4a:98:26:56:8f:2d:69:73:f7:bc:
94:30:35:04:58:b4:19:a4:77:31:e8:11:b4:d1:06:2d:38:57:
82:a5:32:3d:c2:10:74:8b:f7:45:74:da:b7:97:69:ef:89:7e:
28:f4:2f:d0:14:94:9c:d0:e2:13:22:a9:ca:32:91:6a:9b:dd:
65:9f:09:3a:b4:70:b8:41:32:d1:2e:ef:f4:f3:fd:78:a9:33:
aa:42:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client