Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: ngySPQQz+n/lhBuMEzvwUJGYP/xQgKxCFBpXZJIKmb0=
Subject key identifier: E7:0C:35:F1:C6:F7:52:58:E1:25:AB:A7:4C:FD:8C:EB:A2:DD:C7:09
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019D9AE316556909A6C54ACBFB5240D7C7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0D95
Signing time: Fri 17 Apr 2026 10:01:06 +0000
Manifest this update: Fri 17 Apr 2026 10:01:06 +0000
Manifest next update: Sat 18 Apr 2026 10:01:06 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: W78+7ZN5/1cP6+IGUEpmSJcixQ4KoZx6kjkzixZYv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:16:55:69:09:a6:c5:4a:cb:fb:52:40:d7:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Apr 17 10:01:06 2026 GMT
Not After : Apr 18 10:01:06 2026 GMT
Subject: CN=e70c35f1c6f75258e125aba74cfd8ceba2ddc709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:80:d1:16:2d:84:af:dd:e2:bd:da:ec:03:
31:c4:6a:26:45:ac:cf:ca:83:5d:c7:c3:d6:22:51:
4c:63:1f:ad:e2:6d:00:9f:cd:8b:45:cb:60:34:2e:
50:01:f7:4b:0b:b1:68:47:99:96:98:6a:d7:85:4a:
02:2f:af:ba:70:8a:41:63:7b:0a:3e:04:33:76:fd:
67:fc:0e:2b:f5:31:1c:ec:25:ad:74:33:81:9e:a8:
87:fa:24:31:67:76:17:8f:86:2d:37:d1:5f:28:a1:
ec:86:89:55:99:44:c0:81:24:d5:51:2c:38:1d:1f:
b2:e0:dc:ad:4f:2d:ff:98:9d:28:e0:d5:27:a1:77:
8b:61:5e:cd:45:38:29:43:60:bb:43:d1:0e:a8:db:
98:7b:99:2c:86:96:52:22:3b:16:80:48:ba:b2:2c:
31:26:f4:34:bd:8b:c0:20:f7:6d:54:3d:b7:10:8c:
0a:6e:f2:cf:38:d8:3c:5f:54:01:db:c5:d6:4d:1d:
cc:9e:cf:5a:43:c8:1a:21:81:70:79:e1:09:5c:9b:
f5:26:f8:7f:b1:2b:b1:07:fc:80:f9:4e:11:d7:f4:
33:56:f1:59:a7:e6:8a:3f:b9:82:fa:59:50:d6:bb:
84:d3:08:b5:f7:cd:6d:2d:e6:9d:c4:0f:4d:80:35:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:35:F1:C6:F7:52:58:E1:25:AB:A7:4C:FD:8C:EB:A2:DD:C7:09
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:56:fb:db:e2:76:5d:3d:00:b6:e3:a5:46:51:8a:41:37:
4f:54:f3:61:84:16:5a:b4:0a:0a:a9:ed:95:7a:6b:69:4f:40:
42:4b:8f:ea:26:d8:18:57:6b:c9:67:63:ae:30:79:39:ea:28:
2e:ba:e8:38:ec:d8:08:01:da:da:91:04:72:18:ad:41:8e:9f:
bf:b4:bd:cf:a9:c1:04:28:f2:03:aa:f8:3c:91:84:a5:1a:26:
da:cb:b7:03:5e:3a:fa:38:45:77:f7:2f:6b:05:d3:ef:05:46:
62:77:c3:a6:ae:af:43:5d:6e:29:e8:52:20:f1:87:2e:d4:b8:
ef:30:17:86:c0:54:a1:61:b1:1b:b6:02:a1:d0:54:fb:f3:21:
f4:bb:4d:57:2b:7c:22:98:25:6f:db:5b:01:9a:26:4d:3c:6d:
a2:5f:68:88:da:07:fa:f0:7d:d3:c6:5d:21:69:f7:4b:d8:76:
05:99:1d:f6:cc:72:ad:51:7a:b1:b3:39:10:3c:a9:fb:2c:b0:
dd:3b:fe:14:58:d7:8d:e5:95:bd:a9:06:bd:8e:6d:46:e2:70:
bf:04:68:4e:02:94:59:3a:a5:89:11:73:b9:8f:18:75:db:3b:
94:ff:c9:e8:6c:bb:d2:f1:c0:88:7d:ce:53:6c:f7:2f:7c:cd:
af:dc:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:17 2026 by rpki-client