Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: gy/8NZ5AvlvODhen73qkKM//lZpOtzwvJ2UkKQW+3Sc=
Subject key identifier: D6:0D:30:68:27:0D:9D:2C:BC:73:C9:BA:6D:2B:B1:47:D4:68:36:65
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019CAEA3008518EC48EF26D0F36B8B8216EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0E49
Signing time: Mon 02 Mar 2026 13:00:43 +0000
Manifest this update: Mon 02 Mar 2026 13:00:43 +0000
Manifest next update: Tue 03 Mar 2026 13:00:43 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: aGsrItz9iJ9iVSXtIcj8TsvV/QcX3pxux4PFcd9wGWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:00:85:18:ec:48:ef:26:d0:f3:6b:8b:82:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Mar 2 13:00:43 2026 GMT
Not After : Mar 3 13:00:43 2026 GMT
Subject: CN=d60d3068270d9d2cbc73c9ba6d2bb147d4683665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:c7:82:28:32:2f:7c:7d:88:2b:8a:1d:e2:
f7:cc:61:63:79:39:ae:a1:e1:ec:e5:24:5e:d8:54:
13:1d:f9:13:6b:67:f1:5e:ac:22:1c:a7:58:f6:c0:
00:2c:56:ad:05:b7:cf:9b:c0:6d:7f:8d:33:40:0b:
a6:41:bd:53:5f:ff:a2:ab:d7:f3:9a:16:93:9e:56:
87:e9:91:54:ae:94:b0:79:99:3b:95:71:cc:64:89:
88:80:7b:d7:79:a3:6d:55:36:83:67:bb:8d:8d:d4:
3c:d1:8e:87:63:1d:11:cb:f1:02:65:1f:47:9d:30:
41:f1:e8:bd:3a:52:6c:9e:c1:4f:d2:84:f2:cf:cf:
b3:16:21:73:8d:4a:00:d1:fe:d6:8c:e6:ae:d8:02:
ba:83:57:7a:ba:92:24:5b:0a:49:8e:4d:5d:bc:b0:
0a:c1:5a:6b:6f:bd:90:ca:0b:c9:2d:bb:c8:8c:bd:
86:a4:3a:8c:79:c4:82:32:ff:3e:98:e3:c8:27:f5:
36:ef:8e:c9:cf:00:cd:88:b0:49:d3:67:c8:8c:3e:
37:3c:66:8c:22:4b:bc:2a:6e:56:33:0f:9b:db:b4:
c9:ec:f6:b3:01:09:86:28:92:e5:9c:f3:7b:ae:1e:
c0:9f:cf:2f:77:ea:01:c3:ea:08:ff:d8:2b:6d:54:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:30:68:27:0D:9D:2C:BC:73:C9:BA:6D:2B:B1:47:D4:68:36:65
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:d1:d7:88:8e:16:20:8e:55:8a:bd:e6:d7:65:6a:83:10:
22:59:ae:34:00:4b:34:7d:28:ab:66:7a:a5:9b:a5:0f:eb:a4:
33:ea:95:e0:a4:40:31:b0:8b:66:8d:30:c4:69:7b:02:0f:d1:
5e:f7:b2:21:2e:c0:51:65:a8:7f:b1:4f:26:96:1f:dc:5b:5f:
e1:b6:24:ef:27:7c:52:f7:12:66:d2:1c:3f:3c:ba:2a:a9:64:
d3:e0:b6:5c:89:5e:38:de:c4:39:ed:e2:f7:36:8d:13:28:55:
b5:7a:85:06:30:91:0a:07:97:ca:77:57:92:6e:b8:42:0b:74:
73:70:b0:8b:56:b3:ce:e5:a1:aa:ec:b7:d6:c1:03:3a:74:fa:
d7:ae:4c:2d:c4:58:99:0f:65:7d:6e:5f:b0:23:9b:d1:ce:17:
74:df:c5:62:52:13:cf:49:f4:2e:f5:bf:19:47:b9:0c:71:9d:
9b:81:5f:20:8b:37:24:b9:e6:28:a3:eb:ef:b2:95:b5:e9:6b:
45:73:06:d0:69:7d:45:57:bd:31:b4:5e:fd:b0:9a:76:25:ec:
e7:84:c0:49:19:20:7d:93:f5:4f:6b:de:49:aa:25:8c:5b:55:
a9:d9:4f:8a:6a:0a:a4:73:35:f4:8b:f1:b7:20:49:92:77:43:
8f:92:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:45 2026 by rpki-client