Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: GABE1bIkveUydPn0hH+jQ/NJ21HNryKQ39PrCQoKLY4=
Subject key identifier: A0:75:FA:E7:D6:A8:36:4E:6D:C5:60:59:27:E2:14:F7:2F:53:23:A2
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01A1DE71521D4602D709245C9D18FEE05315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1A23
Signing time: Sun 15 Nov 2026 09:02:10 +0000
Manifest this update: Sun 15 Nov 2026 09:02:10 +0000
Manifest next update: Mon 16 Nov 2026 09:02:10 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: X5FpBsavFVNXN5iMYJZGQ67w6YhftFwbIFrXK0vOdZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:52:1d:46:02:d7:09:24:5c:9d:18:fe:e0:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Nov 15 09:02:10 2026 GMT
Not After : Nov 16 09:02:10 2026 GMT
Subject: CN=a075fae7d6a8364e6dc5605927e214f72f5323a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:bc:e1:49:21:0f:47:48:f9:c1:ab:28:00:
0e:f0:78:13:68:6b:31:c5:45:40:5c:05:11:17:08:
74:e8:05:92:ea:03:af:e0:5a:87:48:e8:24:c7:10:
34:bf:e5:9a:3e:0b:58:7b:e9:09:08:91:87:4f:cc:
b2:a5:f7:28:c7:10:c8:e3:58:e0:de:cc:1e:60:c9:
e9:be:48:15:18:76:b0:6b:9d:06:50:45:50:30:34:
59:81:8d:25:92:18:b1:ce:12:af:6a:d8:33:a6:cb:
f6:2a:f7:4a:3a:99:9b:c4:1c:99:11:bf:e8:85:2d:
27:f9:4b:1d:39:e0:5b:17:e2:f4:53:15:1e:55:04:
da:e4:34:12:aa:9f:32:74:d2:8c:dc:bb:5c:61:a3:
d7:6d:c4:2e:25:ef:cb:80:2d:dc:9f:70:0d:f9:70:
c1:e0:2d:81:c9:ce:6a:fc:e9:e1:e2:5c:6f:4b:d1:
9f:91:11:81:0f:26:f6:b3:f2:5e:1d:e0:a6:5c:8a:
84:1b:80:26:46:a6:04:41:9b:88:d5:f9:30:ae:fd:
fa:0c:28:b8:77:5f:13:f4:cd:c0:0e:fe:4b:26:d5:
d6:63:13:7d:89:d5:0e:4f:af:19:f9:02:02:ac:72:
49:73:6d:b3:af:b2:33:98:a9:60:43:95:d8:83:04:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:FA:E7:D6:A8:36:4E:6D:C5:60:59:27:E2:14:F7:2F:53:23:A2
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:f3:32:29:95:ed:68:ea:a2:37:7f:f6:ff:31:b6:bf:46:
16:0d:6e:4e:00:77:01:f5:0c:ca:20:85:1e:8e:15:0e:19:61:
4b:9b:31:9b:33:95:49:db:bd:2f:54:59:6d:6c:7a:db:de:4f:
19:d5:e3:4e:28:5e:fa:b0:bd:f9:a9:97:87:c3:bf:6b:76:4f:
c0:a3:e7:c3:69:eb:6b:3b:d3:2e:c6:08:1e:0e:c6:0c:0e:bf:
0e:01:60:15:28:7b:31:da:8e:86:b8:25:a8:1f:13:68:22:f1:
75:10:ba:d0:50:c5:fe:1e:98:4a:ac:5d:c7:2d:0e:87:48:21:
84:b3:0f:e8:bd:43:2f:61:c7:60:a0:86:fd:dd:ef:49:5b:f0:
9b:4f:e8:e3:4f:93:ad:83:7a:8e:75:8f:a7:16:27:ef:e7:f7:
07:c0:90:fd:69:65:58:a9:bf:4a:f3:da:88:b5:30:b1:22:f1:
5e:b3:e1:06:94:06:33:43:e0:37:63:37:77:73:78:28:36:9d:
36:04:35:17:31:28:8e:cb:f7:00:29:85:53:b5:7a:ad:66:c5:
f7:dd:26:97:4c:c1:00:4b:13:f8:6f:64:cd:00:e4:58:e5:49:
f7:a2:80:45:7c:9d:d2:25:0b:3b:4e:0a:dd:c1:63:34:f3:23:
f7:0b:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:32 2026 by rpki-client