Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: crztaFxv3MGWkw+CNHZm2pVunQu8uahb5BB0mi2LM2I=
Subject key identifier: 49:F9:07:07:E7:06:BB:1E:09:FB:DD:AC:D8:E3:B4:1D:56:EC:78:E5
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01A0CE23F0980AC50C8B1D8F476B93457B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1996
Signing time: Wed 23 Sep 2026 12:00:56 +0000
Manifest this update: Wed 23 Sep 2026 12:00:56 +0000
Manifest next update: Thu 24 Sep 2026 12:00:56 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: 7cf0YeRiWuc401AfpnOV986Kl1M492PirxC95DjdTtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:f0:98:0a:c5:0c:8b:1d:8f:47:6b:93:45:7b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Sep 23 12:00:56 2026 GMT
Not After : Sep 24 12:00:56 2026 GMT
Subject: CN=49f90707e706bb1e09fbddacd8e3b41d56ec78e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:1b:62:bd:44:31:5e:bd:c4:4c:7c:d7:93:
85:aa:6f:f3:8c:bc:0d:d0:e5:30:d8:a0:4d:ec:62:
d0:01:44:84:bd:0e:6f:15:34:5f:4d:ae:94:d8:12:
26:62:63:f4:d3:eb:e0:94:58:90:1c:39:c5:d3:8f:
86:33:ef:38:97:d2:ea:29:a1:f6:f1:cb:1a:0c:9e:
64:96:2a:50:91:f4:97:3e:be:10:6f:4b:ae:4a:62:
65:f0:59:1f:90:a0:4f:bd:c5:37:37:93:25:7b:4f:
ef:f7:41:6b:fb:89:cb:81:52:58:95:cd:b4:ac:b5:
85:24:ea:94:53:54:f4:e0:6f:1d:d2:c6:7a:4d:e2:
36:52:17:b2:ff:f4:53:22:f9:85:b1:2a:93:1d:5d:
55:81:12:a5:39:52:00:ff:09:0d:8f:2a:6b:0a:49:
4d:4a:9c:4f:9a:89:8e:6c:a3:e3:5b:0e:62:f6:1a:
ee:9d:4f:ed:15:f2:54:73:9a:5a:b7:3d:ae:78:d9:
4a:4a:8a:31:e0:d8:8d:93:3d:69:6e:fa:db:e6:43:
c1:1f:b4:9a:10:9b:0a:db:ae:b8:72:79:f2:82:01:
10:08:b3:38:dd:ad:88:68:17:6f:e3:ae:36:13:47:
dc:82:3f:1d:9b:98:70:7a:6a:08:03:93:d3:e8:43:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:07:07:E7:06:BB:1E:09:FB:DD:AC:D8:E3:B4:1D:56:EC:78:E5
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:91:79:63:8e:c5:08:33:28:81:e0:fc:2c:1e:ab:d5:93:
f7:09:f1:02:8d:c0:88:1a:2d:f7:1b:e2:a5:5b:0a:62:7f:bc:
6f:e5:96:28:4d:6c:c8:be:05:5b:7a:ef:41:d4:12:41:8b:e7:
bf:84:c1:4a:1f:57:d8:60:f1:f4:23:43:54:43:48:2d:dd:f5:
f0:de:07:bf:4c:43:47:e6:49:ef:f0:df:f0:2e:1c:0d:20:88:
2e:44:f9:f8:25:59:a4:fd:c2:0f:74:f8:2e:80:04:fb:7e:70:
47:7a:83:5a:45:59:45:59:19:77:63:9c:a9:a6:77:0a:d7:42:
9d:07:9a:f3:bd:1a:ae:80:54:a7:ec:11:04:ae:cf:f7:b0:10:
66:cb:cc:cc:bf:69:87:17:f5:f6:b4:b0:6e:4e:71:a3:1e:60:
2f:ba:3d:4b:e0:56:c4:b1:4e:14:e1:47:80:85:ca:28:5d:da:
fc:0c:1b:00:e2:dc:0e:27:f2:20:1b:79:ed:bf:d3:a9:c1:68:
97:6f:0f:56:51:c4:a7:80:c3:db:d0:bf:ec:4e:a1:5d:ea:01:
d9:f0:2f:dd:0b:78:06:ab:22:93:f0:37:80:14:01:77:6d:2f:
f2:3b:77:55:8c:76:0b:c7:45:76:10:88:91:4a:dd:2e:af:62:
1c:7a:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:23:41 2026 by rpki-client