Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: rWNRGaWHVT4JeR2QAAzrbMOi6oBY8P8Aun76S/VIxk4=
Subject key identifier: 0E:03:CB:49:F0:62:72:C6:7B:C5:76:55:FF:6B:D7:DC:2F:99:30:BA
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019CAAFD2DC1D480C7CA56D48424C3543EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 071F
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: CHLNPgThII3Xopwp98jTnEhFxvinaySS/+jieGr+kMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2d:c1:d4:80:c7:ca:56:d4:84:24:c3:54:3e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=0e03cb49f06272c67bc57655ff6bd7dc2f9930ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:a3:f0:d8:b5:13:f2:0a:14:8a:10:a3:97:
dd:92:2a:88:38:f3:31:a6:33:7b:90:d6:0b:62:e7:
50:c0:1d:28:d7:1f:a4:d9:3d:25:0b:dd:9b:79:f8:
a8:82:45:85:36:80:c3:05:56:ad:3a:82:20:24:56:
b9:28:eb:be:b7:19:95:28:4a:c4:3b:bd:d9:fb:97:
d5:cc:4e:86:6d:b2:9d:5c:d1:b5:cf:ba:dd:a7:1e:
eb:4e:b8:33:fa:b8:d2:9a:e3:9d:b1:58:9f:e9:b1:
ea:a5:1e:ca:ff:b7:5f:0b:c6:d9:27:5f:e7:60:de:
ac:8a:c1:64:58:e0:82:92:b1:b3:a2:2e:cc:97:9b:
25:ac:19:2a:00:9f:4f:62:09:bb:e5:d8:7d:75:27:
a5:98:b3:48:8a:55:4b:44:c5:e7:92:cf:0d:51:91:
f3:c9:5b:38:eb:70:84:c6:b7:95:ef:0b:51:a3:00:
95:a6:b6:30:e4:ad:63:e8:03:1c:72:18:92:a8:26:
37:c3:6a:87:84:10:13:e2:ae:e2:80:96:0d:b4:ab:
a2:99:98:b4:4a:31:f2:45:fd:65:61:de:22:aa:fd:
dd:ab:f6:37:9e:b8:46:ea:f2:85:a0:db:e6:7b:e4:
aa:ab:7a:d7:95:47:bb:5c:75:fb:17:b4:4d:f8:ec:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:CB:49:F0:62:72:C6:7B:C5:76:55:FF:6B:D7:DC:2F:99:30:BA
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:40:7a:78:5f:99:db:d3:64:c3:06:6b:22:fe:73:a2:13:ec:
40:2d:8d:7e:23:8b:84:c6:8e:0a:7a:23:b3:3c:5b:24:3a:fb:
41:e1:68:64:c8:b6:3b:70:fc:ab:45:79:38:e6:49:ce:1d:ea:
5f:63:39:e5:2e:e4:a0:6f:43:f0:3b:78:59:87:1d:56:bf:e9:
dd:87:ce:17:88:93:51:b6:e6:e0:48:0b:82:6c:21:2d:24:a7:
f9:6f:2d:3b:57:ed:b7:e3:4d:bb:05:cd:77:4b:0f:16:cb:d3:
27:a0:d3:c4:56:dc:70:c0:a5:e6:a3:b3:36:77:4c:1c:77:74:
18:76:f0:24:5e:6f:34:28:23:b2:34:53:55:ab:a9:9e:97:bb:
f3:72:c5:63:5d:af:d5:dc:34:0d:09:67:f8:95:d2:62:7e:68:
58:8e:a9:54:5a:58:ff:13:83:86:37:48:78:6b:78:6c:47:a1:
8c:42:ec:20:58:ec:b1:5e:d1:15:46:61:a4:5e:af:5d:e4:55:
af:4b:5e:58:72:f4:87:93:f2:95:bf:79:b8:71:ac:45:80:51:
51:ee:d3:9f:03:26:ed:44:7f:10:94:86:fa:58:c4:40:c0:72:
4f:4c:2b:94:e3:2f:06:73:29:bc:e9:a6:66:cb:39:21:60:8a:
a1:a0:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:54 2026 by rpki-client