Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier: A2szPwSnGpPp7doaZXZu4R4Bka+9DoRuQntGTsB3IYM=
Subject key identifier: 50:7A:18:5F:08:52:5A:4C:FD:BA:95:B1:6B:45:6C:89:C6:6C:60:06
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 019D28842A51EEEB43ADF6D1B6505AD41B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: esDIeGXVwWC8E3h93lTgtcoLgKZ6SucRTN8syuSU29M=)
2: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (hash: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2a:51:ee:eb:43:ad:f6:d1:b6:50:5a:d4:1b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=507a185f08525a4cfdba95b16b456c89c66c6006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:60:25:3c:9d:cf:96:da:25:84:24:d4:44:
df:07:e2:dc:bf:52:78:9d:84:e4:0a:eb:ae:11:9d:
46:99:5b:3a:d8:f5:82:ed:29:13:53:92:d5:37:53:
77:ad:88:12:66:eb:b8:2e:03:be:a6:2c:b4:d1:4b:
22:25:94:a1:18:9d:ea:db:a6:7a:da:e0:28:37:01:
9b:27:6f:2c:01:a5:91:8d:19:6a:e9:d9:d5:c4:b0:
2c:82:cd:20:10:ea:8c:72:01:b8:88:a4:3f:0b:fc:
14:10:b9:8e:e5:93:23:93:f7:f5:c9:1f:25:ec:67:
2b:0d:47:ed:e4:de:89:ca:90:11:67:42:26:53:56:
6c:b3:28:cb:bd:46:10:94:66:bf:20:05:0a:be:84:
89:59:9e:03:85:63:43:ab:b2:76:59:2e:dd:66:3e:
54:a3:ce:b9:47:d1:2e:23:2c:26:21:d1:61:11:91:
29:17:7d:c3:ef:6c:ad:43:e6:bf:3a:5a:52:5a:74:
74:33:04:84:9f:c7:e8:36:0a:d4:6b:9a:a3:fd:cb:
5f:26:90:dc:59:b7:d5:e7:d1:9a:6d:ed:2c:c3:b7:
c4:11:5a:df:99:ba:52:0a:c2:e5:e7:8b:03:bc:67:
7a:0a:bf:10:78:04:dc:81:5e:d2:c2:a3:6c:4f:d7:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:18:5F:08:52:5A:4C:FD:BA:95:B1:6B:45:6C:89:C6:6C:60:06
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:77:ab:cd:9f:3f:41:13:cc:5f:1b:3e:8e:c5:f5:15:8c:
c5:e5:db:fc:ae:3a:ef:0d:0a:6a:f4:50:2a:69:6d:1e:2b:36:
25:73:66:10:1d:38:14:66:66:4c:c9:bb:1a:e5:e4:61:8f:35:
93:0e:91:29:fa:e8:cc:36:e1:b9:2e:46:dd:c6:f1:a5:58:e1:
02:98:5d:3d:82:b5:54:76:c4:1b:7b:7e:ae:59:5e:c5:5b:e4:
99:ce:e2:38:a8:e1:a6:c8:e2:ac:75:2b:b5:35:51:ba:1d:47:
e5:a7:b2:de:88:2e:5c:85:12:83:0d:d5:5c:d2:2c:a9:e5:eb:
29:45:5b:33:74:59:16:f6:85:cb:90:b3:9a:68:46:94:29:53:
68:00:3f:1e:81:40:7f:ee:46:19:8f:10:b4:8e:5b:0c:ad:e8:
44:45:49:83:ce:d1:5e:4f:de:09:81:c8:f8:34:81:ec:79:94:
28:b2:10:a7:2d:15:75:3f:87:4d:cf:28:e1:09:be:b8:64:0b:
89:e8:5a:0b:7d:ad:08:36:d6:14:1e:b8:a0:bb:20:6d:57:80:
a4:38:5e:42:aa:b2:da:67:6c:c3:6c:f2:e8:a3:1c:87:8a:03:
8c:c1:6d:be:30:99:43:db:24:a4:2b:82:28:fe:bd:a8:33:34:
57:6e:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:51 2026 by rpki-client