Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: 3bSf13gHDlGeJ6E1/FfDy6T5uGzsUUmCY+Tz3aYXOXY=
Subject key identifier: CC:A4:82:8E:94:BF:01:B5:EB:56:72:EE:0D:1A:33:93:9C:43:11:EF
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 019CAA8FAD64361A0EA73DCF8F456C406137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 09A4
Signing time: Sun 01 Mar 2026 18:01:08 +0000
Manifest this update: Sun 01 Mar 2026 18:01:08 +0000
Manifest next update: Mon 02 Mar 2026 18:01:08 +0000
Files and hashes: 1: A3TEDffrBq56TDY4yudR7y6rEQs.roa (hash: 7fUrynjF6TZPsO+6oL6Q+ehgvRkl4Ttr2jC89/HQi3k=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: V0boJyKQYn68eum6TybXEr+2QQdsZhEo3p8wrlGfRu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ad:64:36:1a:0e:a7:3d:cf:8f:45:6c:40:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Mar 1 18:01:08 2026 GMT
Not After : Mar 2 18:01:08 2026 GMT
Subject: CN=cca4828e94bf01b5eb5672ee0d1a33939c4311ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:21:2b:7c:c3:4f:e6:6b:8b:ad:9a:76:5f:
a6:8e:77:35:c3:0d:e0:6f:1a:d3:a0:aa:ea:93:66:
65:d3:c0:2f:52:02:66:9c:38:eb:07:7c:11:f0:f8:
fc:0e:30:5e:68:ff:82:3f:ef:df:ff:79:40:ae:90:
66:ae:7c:42:da:09:73:a6:21:b2:b1:22:ce:37:09:
71:5e:74:ca:b6:25:82:6a:26:83:fb:b2:68:45:aa:
ce:42:e8:86:bc:96:76:bb:c3:ed:90:b5:09:47:2f:
83:01:e0:19:49:03:aa:25:01:e7:73:ec:29:e6:b7:
f4:c6:db:77:a1:f5:69:a1:35:61:6e:20:0b:b7:b6:
31:d2:bf:4d:81:24:f2:5f:98:21:12:61:41:55:07:
09:49:6e:49:0a:b5:dd:40:31:f9:0c:29:86:62:7b:
b6:55:76:61:ff:41:23:2a:d2:3c:6e:b2:4a:08:0d:
ad:9e:28:9a:f8:11:c2:9c:e3:9a:c5:3b:61:d3:f1:
a7:55:3f:a1:f3:98:09:1b:e0:86:14:8a:18:1d:d6:
25:eb:60:c7:d4:33:6d:43:0e:9d:33:b7:86:6a:a2:
cc:b9:65:66:24:11:35:47:f4:bc:b5:3e:45:6b:88:
e4:02:80:f1:f4:4a:7e:0c:5b:e0:fa:e3:32:4d:db:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:82:8E:94:BF:01:B5:EB:56:72:EE:0D:1A:33:93:9C:43:11:EF
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:29:e6:70:e6:bf:d6:a7:f2:7b:6f:98:f8:4a:24:a3:63:
1d:3d:d1:22:70:d4:ac:27:bd:ab:ef:a6:50:29:58:e7:9c:ab:
d1:7d:42:56:75:0f:2c:9b:79:61:17:79:ca:b4:c8:a0:ac:2c:
55:f4:30:61:82:64:41:75:35:6e:79:b4:17:7c:7e:a3:20:f1:
aa:b1:26:e2:90:d8:13:61:e4:43:bb:a6:1b:7f:11:93:2d:b3:
42:9b:b2:2b:e3:a1:c5:29:d5:6a:2f:d3:3c:8b:e6:5b:dd:17:
7b:20:9e:66:f6:fd:08:cf:9f:e2:19:37:6b:7d:58:96:19:7e:
8c:3d:af:81:d6:c2:58:e7:42:9b:9c:45:e7:fb:50:dd:f7:82:
b0:17:6a:4a:56:78:fd:b7:78:63:c2:c7:74:53:7d:d0:60:ee:
0c:2c:1e:a3:6a:3b:20:28:00:5d:36:d8:32:04:55:21:6e:49:
af:38:ca:43:45:cd:c6:51:c9:6b:7e:c3:93:4f:66:b6:5e:b9:
b9:1f:78:e0:d9:d6:d7:a2:9d:84:21:cc:ac:40:64:ed:ef:bf:
25:a7:9e:36:0f:8f:3d:9c:6e:20:7f:c7:89:1a:b9:e9:d4:23:
ae:fb:95:6e:6d:04:45:91:99:2f:a6:ea:e2:0e:57:9f:18:35:
51:f7:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:33 2026 by rpki-client