Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: jUGJ15WADS73lD93eEyq+hZj0yE8Rn0wUfzRbqaHwhU=
Subject key identifier: 16:DB:9F:C3:B3:D9:AE:AE:42:A6:88:F9:51:4D:FA:3D:9B:85:84:82
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019CAD5937A871B049BAE41148D140C97652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0D1A
Signing time: Mon 02 Mar 2026 07:00:30 +0000
Manifest this update: Mon 02 Mar 2026 07:00:30 +0000
Manifest next update: Tue 03 Mar 2026 07:00:30 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: qrDmuedJOxtpkJEDnS+1iuQddKzAiRRmQkw4Hv2j8cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:37:a8:71:b0:49:ba:e4:11:48:d1:40:c9:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Mar 2 07:00:30 2026 GMT
Not After : Mar 3 07:00:30 2026 GMT
Subject: CN=16db9fc3b3d9aeae42a688f9514dfa3d9b858482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:f3:8b:ff:40:77:89:3f:74:ab:ad:9e:f7:
02:5a:77:4a:56:84:bb:d2:fd:84:e4:e3:79:9e:95:
83:7e:15:23:b5:54:17:c7:78:e6:3a:00:d0:d3:e6:
b3:b5:b8:52:0e:c9:74:01:c9:af:ff:a5:8c:90:b9:
c9:6f:69:1e:c1:ff:8a:e9:bb:97:2a:49:af:63:f0:
9d:d5:94:c0:24:6e:c0:d5:83:1a:ae:c6:de:90:df:
a2:dd:8c:23:da:43:1a:fd:ec:01:1b:0a:1c:da:5f:
34:56:73:f8:cf:68:fd:ca:98:2f:2b:7b:06:65:b9:
ad:70:83:62:fb:d6:f9:46:77:07:ad:0e:92:43:6d:
1d:3b:33:e8:f0:ce:17:e5:9e:5d:94:9f:12:a5:e3:
5f:ea:f2:d6:ff:b6:6f:9a:66:85:d7:b4:76:c9:98:
1c:bc:58:19:82:55:5b:5f:d7:69:1c:69:3c:5c:0a:
90:54:25:a6:cd:68:6d:7f:37:f2:ec:0c:7f:47:c7:
bd:57:da:1c:0d:8b:4b:e6:a8:41:b8:31:f2:83:45:
b6:b8:47:b8:ce:2a:f4:f0:c7:d1:ee:7c:ce:bd:6e:
a7:7c:22:b6:72:e7:4e:25:07:bd:84:33:22:b4:9b:
cb:0d:8d:58:ce:98:12:96:97:5c:75:ab:62:32:9f:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:9F:C3:B3:D9:AE:AE:42:A6:88:F9:51:4D:FA:3D:9B:85:84:82
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:5b:30:b8:a3:7f:92:d1:58:86:f6:cf:60:40:c2:7b:1a:
c5:62:9f:28:dd:4e:61:47:bc:e9:c4:f0:b0:87:b9:a5:71:c6:
66:b4:96:4d:0d:17:77:ec:e7:5c:54:e3:03:de:9a:30:22:eb:
d7:c0:03:06:0b:c4:67:c2:11:11:b1:ef:16:84:c3:78:63:9f:
9c:85:1f:94:0c:1b:89:ff:d0:62:f7:a7:7d:c1:9c:ce:ce:b8:
bd:07:6a:05:f4:04:e9:90:06:0d:25:5b:5b:57:93:aa:56:1d:
ea:34:3e:dd:a5:e4:a5:d2:b2:4e:8f:3c:55:b3:5e:c4:60:fc:
6a:b5:cd:56:07:2a:ea:57:ef:2c:c5:a3:65:83:3e:72:51:34:
12:74:26:67:38:4f:4c:d1:b0:a1:1b:01:47:dc:e1:c9:84:4d:
c4:2e:ac:b9:a7:28:16:68:9f:0d:40:22:92:34:e1:18:2b:d6:
61:99:38:03:d3:0f:e8:fd:78:bf:79:76:48:5e:f4:e9:8c:c7:
1a:0d:c6:6a:4a:8a:9a:92:f4:90:8b:a5:98:f3:8c:0f:4d:3b:
fa:a7:75:61:4a:2c:c5:48:3a:86:7b:af:fc:b6:2c:da:49:11:
0a:25:65:9b:b3:91:b0:6e:d1:70:e0:c6:e2:b6:a6:f3:79:9b:
5c:43:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:38 2026 by rpki-client