Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: z+e0gZ/0tEiepmQHA8BGMKGdAbzxWqfaBMFcFstONrY=
Subject key identifier: D0:A0:6C:5A:CB:EA:74:1C:0C:A4:52:1D:C0:67:74:65:13:A9:26:16
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019CA9EB998347BF81F0ABB30711174F8215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1771
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: ESMiBmY243VkpOEUNlMGAtH8CkgZBt+/ftibxr2jtsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:99:83:47:bf:81:f0:ab:b3:07:11:17:4f:82:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=d0a06c5acbea741c0ca4521dc067746513a92616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:2a:18:2b:5a:af:be:5c:ba:5a:24:79:4b:
50:1c:3f:1c:36:93:e4:09:57:7d:3c:fb:b0:64:3f:
28:ec:2d:b0:71:38:09:90:7a:63:bd:1b:cf:96:60:
14:c0:ec:25:bb:87:c4:c2:60:b9:76:3a:9a:ba:7b:
1a:98:14:29:ef:28:42:a6:99:7b:7b:dd:13:ee:2c:
48:9d:d5:04:7a:0a:e0:30:06:c9:b2:81:6f:fb:96:
1a:18:e1:40:a3:a8:07:17:a0:ad:b9:10:d5:a5:42:
a6:f5:41:2c:56:5e:82:99:e5:0f:02:ef:6c:b3:80:
db:bc:05:d0:04:8a:f6:f8:8f:e8:60:e4:20:2c:ca:
18:da:dc:ae:9e:63:fd:86:05:d2:8b:9e:56:12:e4:
61:49:d8:0d:3a:ac:e4:35:90:84:f3:52:71:4f:dc:
b3:1e:45:57:84:37:95:9a:18:c6:0f:2b:8a:da:83:
62:0c:b2:fe:d3:67:a5:e1:a9:1c:21:85:c1:d1:0c:
54:9e:b9:c5:d3:e9:a7:cb:1c:a2:29:a9:1b:b7:20:
c8:ea:d6:6e:fb:82:f5:ba:50:cb:01:9c:82:13:41:
64:8b:f0:3e:ef:f4:3b:ea:af:f0:3a:7c:fe:34:ff:
3d:d4:fe:b5:15:a8:bb:97:ee:18:52:75:ac:4d:ff:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A0:6C:5A:CB:EA:74:1C:0C:A4:52:1D:C0:67:74:65:13:A9:26:16
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4c:04:a3:d9:f6:40:d5:5d:74:8f:8e:df:6e:be:0c:c4:36:
4d:82:8b:eb:eb:52:f2:86:96:d7:a5:4b:85:1f:98:5b:c8:06:
11:69:db:75:13:c9:85:4f:45:d6:1b:69:f2:70:ae:ab:ae:11:
ed:bc:dd:17:f9:ba:04:e9:bd:1c:08:2e:ff:fe:ed:d2:00:97:
d8:90:91:d5:11:06:14:e6:7d:25:c3:d0:5f:37:86:89:11:b4:
43:81:db:d4:bc:f8:e6:89:89:b4:1a:46:98:5b:31:47:32:b0:
57:9e:89:e2:49:95:9b:6a:21:8e:86:df:42:de:28:8f:b6:18:
f4:d8:cb:72:cf:27:f8:5f:1b:91:60:fa:f3:7f:7f:7c:5b:20:
b2:44:3e:1f:9a:07:62:42:16:0b:7a:5a:bd:33:81:d9:0b:fd:
41:83:1e:ae:7e:da:d0:6e:5e:95:f0:60:d1:c3:18:51:bf:64:
48:5d:09:cc:3e:0d:ab:e0:38:e9:c6:df:68:88:79:8f:43:f0:
66:59:fe:42:3b:0f:d4:32:5d:b8:1c:8c:4b:dd:e2:7f:14:b1:
6c:72:0d:60:d2:8a:0a:55:da:73:94:be:f8:e8:3b:f8:80:d0:
a3:62:b0:1a:c4:25:4e:f2:df:58:9e:38:83:91:67:a7:fc:d8:
af:a9:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:51 2026 by rpki-client