Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: 6ahMZ7OEGc8SnLIUz1tiQz910+9gfeOuhRJWxI42tD0=
Subject key identifier: C8:D0:A6:A6:E7:B0:0C:5D:DC:60:5D:B0:A9:01:1A:33:ED:EE:41:FA
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019D25F1CA7E03275720E76D9AF5FFEC9717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 1547
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 614IUYG3gRvLH7wKp-4pxVgVM8s.roa (hash: dRzT8GkPgOG738tzI7AWfIU5a3zLHU58ogZFdTFRUqo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: oLH8cM54HDIvcrtKs1vSRoIH+ZxBcab/42kPYXeeFSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ca:7e:03:27:57:20:e7:6d:9a:f5:ff:ec:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=c8d0a6a6e7b00c5ddc605db0a9011a33edee41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:0b:1c:1a:24:56:7c:85:d0:5f:46:06:13:
00:d3:3d:cb:26:9b:8a:81:9f:aa:de:ee:b8:0f:8c:
fa:d2:fe:fe:61:6c:e9:70:91:fc:14:34:c2:7a:4f:
ec:2f:67:bf:6d:77:29:05:40:85:3f:cd:c3:d4:38:
b4:eb:40:1c:29:20:28:56:23:a5:79:65:09:df:ee:
36:14:fc:1e:56:d1:8c:f5:a3:b9:0a:93:32:54:ca:
fe:34:60:c7:2b:ab:37:7d:5a:42:4a:d5:b7:0a:13:
6c:39:ad:d1:e1:49:0d:85:21:49:ec:39:cf:d0:22:
48:99:55:93:ac:15:aa:c0:ca:c3:ef:d1:d8:c8:d5:
26:c3:9f:ae:26:13:ee:b0:53:08:6d:57:78:eb:26:
23:1d:7e:dd:23:a6:a7:94:7d:e6:e3:dc:cb:18:9e:
b3:e2:c3:13:98:f4:48:4e:8b:3f:16:c2:2d:7e:ad:
0c:fe:28:c0:bc:c4:fd:88:df:de:15:d2:d3:6e:02:
56:63:c0:a8:ab:21:4c:9e:9e:fb:53:01:1b:15:a4:
b3:86:4b:ea:ad:c4:6b:8a:92:0f:ba:30:21:fa:61:
cb:5a:c0:a9:b3:07:39:bc:44:72:1c:79:38:f5:0c:
a6:22:3d:e7:8f:9b:d5:0b:54:d0:e7:91:a9:ef:02:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D0:A6:A6:E7:B0:0C:5D:DC:60:5D:B0:A9:01:1A:33:ED:EE:41:FA
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:a1:fc:15:1a:8f:cb:60:ef:0a:64:e6:42:0f:8c:93:81:
f7:06:36:e5:c5:bf:3e:bc:4d:38:00:4b:8a:a2:d3:d7:92:ad:
6d:4f:a0:43:2f:53:da:82:5e:22:d5:68:3f:cd:6f:e1:f1:b5:
ec:9f:1a:b0:54:38:f4:f9:98:65:6d:81:ee:84:4d:04:83:b1:
e1:fe:c8:4d:62:a6:c5:04:d0:19:62:6b:5e:24:3b:b0:ac:7b:
3e:74:e5:ed:73:f4:6a:39:61:3b:91:e9:38:ae:7b:d2:a1:1e:
03:af:18:31:0d:ea:a7:cd:1e:90:43:77:df:f6:5e:df:13:d5:
e8:87:ef:9b:b1:64:b2:87:67:a1:98:63:e1:c0:af:68:e9:24:
e0:44:4a:1d:0b:bc:5a:dd:a9:3c:aa:4c:0a:ec:00:df:09:0b:
7a:c4:ec:64:7e:b7:7b:72:4c:6e:61:0b:73:bf:49:7e:95:cc:
74:06:aa:52:d3:d7:41:57:6c:08:80:2b:50:cf:9e:6d:4a:d3:
da:ff:c5:57:27:09:56:2f:21:72:43:1e:58:d8:7b:5b:2b:70:
2e:ec:54:d2:f3:87:4e:3f:dd:24:89:50:aa:18:09:83:65:16:
53:7b:7f:2d:a9:a2:d9:f3:68:62:9e:2c:8f:bd:4d:85:3d:af:
c0:7f:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:59 2026 by rpki-client