Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: Ot2cbhdUEi6vGlYMTFy6nqOFXer05w0j7mRLBR/kHA4=
Subject key identifier: 32:F6:5B:D6:BA:59:0D:D2:69:DC:92:34:34:C0:AA:5A:DC:65:D9:B5
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019CAC47550FB163D1BBE87C15E79D8D82AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1859
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: H/O1pluZL74ZRw/ZoitwQDj5TiLExSvyh66GBWJJRx4=)
3: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:55:0f:b1:63:d1:bb:e8:7c:15:e7:9d:8d:82:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=32f65bd6ba590dd269dc923434c0aa5adc65d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:e6:f6:71:54:b0:b3:06:68:b3:6c:7a:37:
7a:82:00:90:d9:92:33:b5:92:2f:52:ff:64:41:19:
d1:a4:31:95:fe:a8:8b:22:3f:45:38:95:a8:fe:73:
87:39:4d:52:44:f5:6b:15:b5:84:0d:96:6c:f1:d8:
f6:94:2d:84:5b:69:e0:1e:cd:6b:8a:d9:be:12:a3:
35:d4:e7:72:18:09:a7:e5:a2:b4:1e:9e:f2:d2:b3:
bb:6e:62:9d:f2:25:43:71:10:9e:8c:91:26:b6:2e:
72:60:4f:2c:f9:2f:1b:eb:b8:97:94:4b:39:f6:5b:
8b:3b:d6:03:ae:f5:53:22:7e:db:8f:34:18:b8:dd:
25:96:ae:4e:87:20:09:be:26:f9:d2:ef:c1:21:f9:
09:2f:aa:cc:9b:6f:c6:ba:46:14:16:55:50:56:4b:
2d:b0:74:b9:af:9a:78:9d:97:92:b9:b7:4c:4e:ed:
ac:01:d8:23:2a:08:a7:cf:9c:52:5e:3a:1c:7f:fc:
cf:4c:fb:c4:39:28:c3:41:89:ef:ae:78:11:80:8d:
18:72:cc:71:df:7d:9a:30:45:89:bf:70:2a:df:3f:
2c:ad:90:11:94:5e:db:63:7b:5e:49:8a:7b:fc:50:
57:d9:97:f0:53:f7:3c:fc:2a:9b:6a:07:52:cf:35:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:5B:D6:BA:59:0D:D2:69:DC:92:34:34:C0:AA:5A:DC:65:D9:B5
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2b:ae:4f:5c:04:92:78:d6:03:c9:a1:11:8b:c2:7c:df:ee:
4a:bb:9c:1d:a4:8b:cf:06:fb:4e:d0:c7:32:29:bc:60:43:a2:
38:3d:1e:41:cb:37:24:37:a2:fa:46:a2:b7:63:b2:26:f2:71:
05:f6:e0:ba:5f:b7:fd:2b:77:aa:b9:bd:a2:d9:5b:46:7a:1b:
cf:30:bd:15:75:72:2f:14:94:84:8a:54:b9:c5:8a:26:ae:12:
36:68:90:26:1c:49:db:dd:7b:70:75:c2:23:5f:9d:de:91:8d:
90:ae:bb:66:a0:7d:59:e1:ef:f3:63:6c:ea:5f:73:f1:ad:a9:
52:22:45:61:bb:fc:01:52:30:2f:b1:06:5e:88:85:6a:b0:8c:
d2:53:e0:1a:0e:f9:77:f2:cf:3b:b5:6d:4a:a8:42:a0:22:e8:
70:3f:ee:b1:4f:19:23:da:95:4f:75:7a:d5:ab:4d:cc:73:a2:
80:df:08:1e:84:ab:7d:e4:24:90:f4:15:3e:d5:d5:f6:94:94:
ab:da:c8:e0:04:ff:65:1c:0e:26:e6:d1:4e:c5:b9:20:53:ff:
79:eb:83:61:bf:68:65:69:57:e1:c8:98:eb:05:b4:f4:ff:b0:
f6:ff:8e:a2:f8:26:7b:16:40:88:ec:11:4e:a7:7d:ad:41:3b:
93:42:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:10 2026 by rpki-client