Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: th5f92i7i0Mvl6QM/+NtEqA+9c00GVwLpIsA+fIdSk4=
Subject key identifier: E2:64:C6:57:10:FF:D1:B4:A3:EE:B9:CE:01:33:C6:BB:5F:01:9A:72
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 019D265ED60D6C611DF9E9BB2CFD4C546836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 15CC
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: LMW0aePUvQsZOt8hq5DaRjAcjS4.roa (hash: gkvc2HFCiL+UIBjgtjN3d9pJgU/K71FhIXqf8pPSFiM=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: k3XBtQtDV6f0MFmVmQDWLbXS0Q4iwt7rfw3ZYw8lQ0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d6:0d:6c:61:1d:f9:e9:bb:2c:fd:4c:54:68:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=e264c65710ffd1b4a3eeb9ce0133c6bb5f019a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:ea:bb:06:76:41:ff:b0:e3:68:f6:1b:e6:
2b:1e:c6:db:f3:e7:91:5f:84:d5:e9:8a:54:76:9a:
f0:ec:07:9d:6e:8a:0c:0f:ba:04:d5:8d:75:6c:34:
39:bc:ea:97:71:dc:97:89:76:3e:ff:1e:f1:eb:c9:
c2:86:2a:40:50:ff:73:51:7b:7c:d2:2c:21:c9:68:
69:e5:d5:5b:47:d9:51:4b:60:d0:9c:66:4d:28:80:
3c:c5:69:f5:ee:c8:4b:7b:43:b5:19:73:7b:2e:24:
d9:5d:fc:17:9d:cd:e4:2b:d3:04:28:5a:03:d8:51:
c1:5d:66:e3:0c:1b:c7:b1:1b:a7:5c:04:41:3f:f7:
57:e2:9a:4d:e0:f0:6a:a1:8b:69:2f:1d:38:2e:5d:
72:47:bb:cd:bf:e4:cf:3d:26:90:c6:b1:14:83:5c:
16:cd:72:f0:33:0d:ea:5d:84:06:1d:12:c5:87:e2:
44:3d:0b:8a:93:3a:6b:86:b2:18:23:35:bd:f3:3e:
6c:46:66:2b:b3:cc:2f:fe:33:4b:91:e7:46:91:02:
00:53:b2:81:6f:57:ed:33:37:45:f6:64:df:cd:52:
8b:21:88:6f:e1:6f:92:de:e1:df:ae:31:8b:00:1c:
21:f9:6e:f9:6c:df:3f:68:1b:21:14:c3:d3:89:61:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:C6:57:10:FF:D1:B4:A3:EE:B9:CE:01:33:C6:BB:5F:01:9A:72
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:d7:57:af:f6:b1:ab:70:86:27:fd:23:83:a5:44:d0:e9:
3a:1b:b6:cd:be:70:66:c1:c5:69:26:58:5a:64:f1:9b:41:42:
9f:7a:b1:28:c4:56:fb:4f:41:b1:ac:6c:71:ae:e5:0b:f3:94:
ad:0c:7a:0d:f7:09:c6:d5:f9:fc:84:5c:33:7a:e2:fb:c2:27:
ea:f6:87:db:5b:6f:12:3b:e9:9f:2e:94:1b:35:40:ee:eb:c6:
0e:cf:21:8c:b8:2b:ba:ed:58:7e:27:66:4f:03:5b:37:07:91:
2c:b2:c6:7b:f7:35:ba:b4:72:e5:ae:1e:93:c0:27:36:93:f1:
a0:97:c7:9f:6a:b9:12:86:6d:b3:ce:46:53:7b:41:2b:4f:33:
6b:d2:b0:aa:1f:ee:9f:6f:e4:3a:3e:8b:68:8a:98:81:65:14:
94:a1:09:c5:ad:c3:c2:30:d0:36:ba:7e:df:29:20:43:cb:aa:
8f:3c:3c:ba:0a:9b:72:be:c5:75:3c:a4:d5:75:25:7c:70:d9:
66:36:df:04:2f:bf:32:b1:ee:6c:e0:c2:3c:14:61:5b:66:5b:
e6:2d:96:c2:ca:96:8b:33:f4:2a:27:85:26:05:d1:81:9c:0b:
07:7e:fa:69:8a:33:24:4b:db:b5:c8:f3:f0:0a:ae:5f:34:de:
89:0b:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:08 2026 by rpki-client