Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: nut0J4wV3HPG1WBfMBZKR7foQjTIZwzG4WFfqYRsIyU=
Subject key identifier: BE:9B:72:43:1A:9E:34:7C:EF:79:35:8D:CE:46:0E:20:B9:2C:A6:F0
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019DA59D364582E808A6B0C67686E7FE95BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 03B2
Signing time: Sun 19 Apr 2026 12:00:36 +0000
Manifest this update: Sun 19 Apr 2026 12:00:36 +0000
Manifest next update: Mon 20 Apr 2026 12:00:36 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: PtI/suzgSghHq4rWtPZ8XHA7Ndmgpt3A0ulb4M4jr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:36:45:82:e8:08:a6:b0:c6:76:86:e7:fe:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Apr 19 12:00:36 2026 GMT
Not After : Apr 20 12:00:36 2026 GMT
Subject: CN=be9b72431a9e347cef79358dce460e20b92ca6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:dc:eb:3f:89:bb:bc:aa:96:a0:a3:59:3c:
64:5c:02:78:76:98:8c:b8:c7:db:d2:60:85:1a:62:
73:03:95:5d:93:46:ef:2f:2e:b0:93:49:4d:fa:e1:
65:04:4f:c2:c3:53:13:0b:2f:d0:67:d8:60:c8:d8:
33:65:da:45:31:2d:52:c3:0b:8e:0e:1c:10:c9:75:
33:84:b9:62:d9:c6:99:17:6e:2f:4a:89:3f:f0:d4:
c6:8c:44:18:4a:02:88:3b:bc:a9:6d:3b:f2:ef:a2:
eb:07:ab:77:0f:96:1d:11:ca:58:7d:25:08:75:0b:
84:b8:43:b7:a6:50:4d:33:f5:2b:97:8c:3e:0b:76:
7e:51:94:12:4b:4a:93:e5:54:2b:44:b8:a1:85:53:
d0:aa:5b:bd:ef:1b:b0:53:e9:1b:7f:4a:52:e3:77:
1c:87:68:60:bd:9a:33:74:96:b7:d0:6f:82:d4:f4:
7a:4f:a8:52:4a:77:dd:7b:cc:44:48:b1:39:7a:1c:
47:31:ca:3d:ee:82:a2:ae:8c:dc:89:61:e1:aa:4b:
15:67:06:72:84:0b:ae:c1:16:42:50:53:43:68:c3:
17:ed:06:8f:25:03:e4:2f:a4:d5:b9:b3:14:5f:67:
b7:f8:90:3d:15:9a:b5:b3:43:f8:08:ef:a5:c2:94:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:72:43:1A:9E:34:7C:EF:79:35:8D:CE:46:0E:20:B9:2C:A6:F0
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:d9:7e:80:74:81:bb:34:4b:3b:c0:e2:1d:74:b0:80:77:
11:91:33:8c:35:cd:eb:41:86:7b:7d:10:a3:88:9d:d7:94:d7:
23:2a:33:fa:da:76:0e:76:1f:1d:76:32:27:69:ef:85:cd:ea:
80:9e:f1:c0:fa:af:60:29:a2:3a:6d:ef:e6:f1:8a:e4:2c:07:
52:78:ec:c2:ce:9f:01:e1:23:bb:b9:37:7a:d6:74:c7:b0:68:
e6:3f:9c:a3:20:01:6f:82:36:47:28:f2:94:79:d0:3e:c0:5c:
bd:bb:02:b3:7d:02:37:20:48:b6:5e:12:4d:b0:70:0b:3c:44:
d5:7c:0e:96:14:f5:00:63:d8:3d:c5:f6:26:7c:f9:08:da:a1:
11:f9:f5:cb:a7:22:48:d4:2d:13:ef:50:df:8e:46:4d:cb:ae:
94:34:7b:1d:dd:75:b2:87:f2:35:81:b6:59:03:ad:2c:ae:97:
b3:fb:5b:ad:77:cd:6d:8c:36:57:33:a8:8f:23:16:47:50:de:
3b:0a:c0:e8:74:86:75:b1:16:7e:de:03:cc:4f:62:a9:ad:8c:
65:02:06:92:02:84:c2:ed:87:75:ce:17:d4:7c:11:de:e9:ce:
da:83:58:ae:a0:c2:63:93:ad:77:61:0e:99:72:54:a6:eb:09:
aa:13:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:51:46 2026 by rpki-client