Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: qM94N5uXMIsI9wu/RI89l+Uf/oOnZZva3FGR1H4dg2Y=
Subject key identifier: B4:85:FF:B8:49:92:24:F2:59:20:96:02:19:8A:90:4F:20:7F:E8:34
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019CAE6BF4FCE22F8023A22CFB6A92C46ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0332
Signing time: Mon 02 Mar 2026 12:00:36 +0000
Manifest this update: Mon 02 Mar 2026 12:00:36 +0000
Manifest next update: Tue 03 Mar 2026 12:00:36 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: 7rszzNVuwZ4Lpx+TAHjmymMR21KWSeanMnMW5/y48Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f4:fc:e2:2f:80:23:a2:2c:fb:6a:92:c4:6a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Mar 2 12:00:36 2026 GMT
Not After : Mar 3 12:00:36 2026 GMT
Subject: CN=b485ffb8499224f259209602198a904f207fe834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:1f:41:e7:b9:d7:54:a9:b2:4d:b1:51:de:
d3:36:b8:13:8e:36:15:7f:ef:28:5f:59:aa:e0:f5:
63:f0:b7:34:c0:65:ce:b1:9d:04:44:c5:75:e4:07:
69:97:e2:0c:4d:d3:d6:10:51:35:e4:eb:fa:0b:55:
77:03:c6:34:ae:81:ef:7a:06:ec:2d:67:15:81:95:
9e:eb:2b:09:32:94:70:69:4d:93:27:d7:7c:fc:0a:
e0:c3:2d:80:70:0a:dd:74:95:88:3e:d7:d8:b9:49:
41:b8:a8:c4:b7:15:d0:ea:dd:a2:65:a8:41:70:a8:
99:c4:0c:83:b9:87:7d:02:93:31:91:53:4c:2d:93:
be:22:f8:a5:36:1f:f6:f2:51:ba:67:1b:7c:7b:bd:
6d:b6:fb:7b:a5:e9:a0:3e:6d:5e:e1:85:bd:82:0f:
e9:f2:d1:01:da:80:16:95:7f:cd:35:1a:33:ed:5d:
54:66:c3:60:80:20:13:cd:77:be:c3:92:fd:f2:62:
82:58:2f:bf:ae:aa:dc:09:aa:ff:31:1d:06:8a:89:
c0:80:93:53:9d:e2:84:bc:5d:35:53:6e:0b:71:ad:
02:1f:a5:39:7c:5e:ad:36:ed:92:f5:77:e2:e0:6f:
d1:67:c7:60:ce:39:c2:17:1f:cc:be:5b:ae:14:cc:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:FF:B8:49:92:24:F2:59:20:96:02:19:8A:90:4F:20:7F:E8:34
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:4b:1d:d9:2d:d2:71:12:7a:09:55:8c:40:1d:06:4d:01:
1a:ba:2a:af:39:e1:f2:55:cf:82:12:5d:b5:45:7e:90:22:e6:
40:cc:8e:53:a2:d3:6c:70:78:67:e7:5b:a0:87:ef:1f:07:75:
3f:ca:50:c2:cd:82:8b:bb:fb:15:72:ae:a3:6b:3d:3f:77:7e:
3c:ec:c8:9b:b5:68:af:9f:05:14:a0:df:1d:8b:21:41:3d:11:
25:cd:2a:31:a2:cb:b9:2b:07:09:51:ba:9c:1f:4d:39:33:4a:
df:28:71:8c:81:35:ec:08:95:c1:0a:54:aa:72:04:aa:51:27:
1d:4f:b6:45:f3:d5:d1:ff:e3:be:dc:91:59:85:37:a7:0f:49:
73:1d:47:11:f1:af:21:3c:65:52:96:11:a2:ea:8f:05:22:c4:
20:1e:36:32:b6:c0:52:42:69:80:9f:90:25:97:5d:df:0a:02:
00:36:1e:ed:8f:0e:1e:8d:f9:86:92:0c:5a:5e:65:a4:7f:31:
60:d3:c7:d2:48:0f:aa:63:90:d2:ee:c9:5f:0f:03:41:8b:fd:
21:50:23:de:37:cd:d1:a8:2c:eb:f2:93:c2:f6:0c:48:99:11:
46:9e:91:36:65:e3:9f:16:15:2d:00:ac:4d:2b:0d:49:b7:21:
12:39:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:16 2026 by rpki-client