Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: Ruuqa7mVwNNAs0eyqPhXlG2q+q4NkqWsqdVp5Hzt+xc=
Subject key identifier: DC:4D:59:D4:DF:2F:89:4E:53:4A:B3:CB:89:A3:1F:33:E6:0C:79:B0
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019CAC7E64020141585A30010C7254159EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 0810
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: CjLJ+S4KyOGY69fBJ/Ix7U1Fm+3RQtCLMP2ljA8JKNw=)
2: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (hash: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:64:02:01:41:58:5a:30:01:0c:72:54:15:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=dc4d59d4df2f894e534ab3cb89a31f33e60c79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:b2:a0:92:22:77:ba:a1:9c:af:c3:e5:40:
17:e1:49:11:01:3e:7d:15:7e:6b:72:17:31:8e:2c:
35:35:49:2e:d3:c9:08:03:68:92:4e:47:85:f9:cb:
10:0e:da:c4:7e:e3:a3:bf:97:b1:e3:95:26:a8:72:
5b:f9:9d:96:99:1f:f4:a3:5d:40:b2:38:a2:8d:06:
8b:a9:f8:3e:f1:75:ed:29:ee:df:2e:95:3a:84:c5:
2c:0b:02:97:cb:83:11:e6:f9:be:d9:c1:3a:c8:28:
11:38:a0:28:06:9d:05:8f:b2:ca:4e:26:0c:d7:c3:
9a:ec:41:5d:09:00:1e:c7:b3:13:2a:fd:42:f6:70:
c9:c5:9f:a3:93:22:0d:a6:6c:48:1d:09:7b:64:45:
b7:06:e4:b1:22:90:af:1d:2d:26:c6:f5:51:34:d2:
6b:76:80:16:ea:a9:07:79:69:e3:a7:ce:03:57:40:
e9:0e:d6:2a:dc:61:53:40:84:21:f6:40:d7:ba:0a:
c1:a6:d3:a4:8a:d7:91:4a:18:af:44:ab:8c:cc:d9:
2a:1d:7c:73:d4:d5:09:c2:f5:00:97:0e:6c:5f:74:
c8:e5:05:36:a2:3d:1d:18:b8:36:33:43:e8:9f:88:
0f:d7:44:5c:31:bf:4e:86:50:bc:07:e8:ce:9c:80:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:59:D4:DF:2F:89:4E:53:4A:B3:CB:89:A3:1F:33:E6:0C:79:B0
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6c:d1:78:84:a6:73:1e:91:ec:f4:63:2a:51:2f:d3:6a:06:
20:6e:8f:1d:76:a6:18:21:a2:4f:86:fd:9e:f9:6d:28:7a:11:
f4:1e:7e:83:82:7c:a5:26:04:43:36:7b:2c:e4:89:21:e3:25:
4c:1c:59:fb:dc:0b:af:44:b0:97:29:8c:6d:c2:50:95:cf:f4:
b7:46:e7:c3:a3:67:4e:6a:1d:f6:cc:8d:f2:35:97:6d:e2:4f:
43:d4:c5:08:d5:d9:60:ca:55:c7:08:ac:58:31:e9:4a:38:d2:
a9:69:d5:e6:ea:15:83:97:2e:77:bf:62:f8:63:4b:60:98:07:
fe:f9:5d:8e:6a:84:9a:89:6e:3a:6b:17:d0:67:f7:df:45:06:
22:3b:e2:fe:cf:7c:1d:4b:1e:0f:40:5e:22:97:cd:ff:48:82:
b9:3b:87:2d:31:fd:2b:46:7b:66:ee:a6:bb:2d:3d:9a:f3:91:
4a:3e:3e:a7:e4:31:b0:2c:18:bc:97:1f:72:e9:2f:28:7f:86:
d4:c2:00:5d:5c:cb:16:97:0e:fa:17:0a:02:f9:2f:82:b3:0b:
f4:57:ee:85:b0:f5:43:77:52:d6:f8:b3:f2:87:56:0b:e5:bb:
81:a6:ef:11:79:06:07:64:08:44:d7:fc:8b:97:76:04:45:7d:
e5:d0:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:05 2026 by rpki-client