Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: +5FECMXPfnG553M85XBv63zOKUk3kTkRiipJVWSvbHc=
Subject key identifier: EC:92:1E:CA:30:B0:20:1F:51:84:5B:FA:07:89:7A:C7:7F:C5:0A:5E
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019DA52F7637172EB41E9A0CFE08AF0711DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 132D
Signing time: Sun 19 Apr 2026 10:00:44 +0000
Manifest this update: Sun 19 Apr 2026 10:00:44 +0000
Manifest next update: Mon 20 Apr 2026 10:00:44 +0000
Files and hashes: 1: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: u60nqq7tanS8iDgxEq3bhPVAYrDCrKSM+XJoMRlHris=)
2: ZbPx8DmJFKdQIWP-bXHtV-eEAv8.roa (hash: vdIV9Jeh3rKfLujo37xtw3yrmFmf9rID9z/P7vCkaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:76:37:17:2e:b4:1e:9a:0c:fe:08:af:07:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Apr 19 10:00:44 2026 GMT
Not After : Apr 20 10:00:44 2026 GMT
Subject: CN=ec921eca30b0201f51845bfa07897ac77fc50a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:00:87:c0:c0:01:7d:5d:28:3b:66:c0:0b:
68:77:0a:d3:61:78:0a:6f:ee:ab:71:77:20:0c:9b:
0c:0b:13:8e:a8:b7:e3:b7:2d:5a:c8:e3:5f:fb:08:
2d:d9:54:3f:2b:2b:70:5f:83:ed:49:43:96:80:00:
bd:26:d1:12:10:f3:b6:ff:28:80:0b:5a:bf:1c:14:
bc:81:c4:30:33:b6:da:cd:0e:2b:83:70:fa:1f:3c:
db:58:51:1c:d3:a6:0a:04:bb:56:e8:ec:9a:82:5c:
89:04:85:23:4b:55:26:d5:b0:d6:c0:4c:46:e2:d2:
85:ca:c0:d8:a2:10:74:15:0c:8a:76:ab:18:4f:fe:
95:20:98:cc:c4:1b:90:9d:5b:a5:a5:5c:8d:e1:2a:
ca:0f:6e:94:b1:fa:33:60:c7:09:c8:47:d8:3e:29:
0a:54:73:95:8f:4b:a8:50:0e:27:e8:f5:6e:b2:d9:
45:95:ef:b0:2b:74:d2:78:7a:68:3e:94:61:7b:c7:
dc:31:ae:92:38:f9:92:5c:22:18:92:b5:a6:7e:51:
65:e7:51:99:2a:c2:b3:ab:18:61:51:19:30:af:72:
60:f1:bd:fb:4f:f5:7c:25:5b:00:05:4b:25:21:63:
7a:99:f9:75:cf:82:fe:dd:1b:a6:34:18:7f:e9:2c:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:1E:CA:30:B0:20:1F:51:84:5B:FA:07:89:7A:C7:7F:C5:0A:5E
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1c:0d:81:2b:94:bc:98:c3:fc:ea:54:c4:22:5f:8d:33:39:
0b:3c:d9:14:cf:c1:35:2c:51:4e:ef:e0:79:d4:49:85:66:20:
66:fd:73:f2:de:74:bc:cd:29:57:21:58:c6:4c:1c:f8:ae:df:
b7:af:db:03:dd:4e:68:ee:c9:bb:60:88:0a:04:79:04:47:63:
5b:8c:b6:e7:fb:3d:f4:4c:52:7f:6c:13:4c:60:6e:88:45:e3:
79:98:fe:8e:dc:e8:a0:63:53:18:1e:1f:5e:be:70:23:99:7d:
13:1d:ec:02:12:25:4a:da:61:26:21:b2:58:07:df:ef:2e:ff:
bf:8c:39:be:36:1f:97:e1:76:68:4d:fd:8c:fd:90:f1:50:a3:
96:54:b1:c8:74:1b:79:9b:59:ac:89:a6:36:c6:31:b1:18:62:
a2:36:14:b6:a7:1f:52:52:94:44:f4:ef:5e:75:d8:8c:cf:e0:
93:22:62:a5:ba:42:3c:c1:22:60:db:1d:16:b7:f0:bf:8f:cf:
24:c9:2a:4d:a9:43:d5:4c:bf:42:a3:db:09:39:08:8b:fa:d1:
41:df:0f:1d:ef:5d:f5:41:96:1d:f2:d4:23:04:2c:ce:7f:0f:
81:d2:3a:95:2b:04:b1:9a:37:c4:c4:44:cd:89:30:91:27:a3:
17:c8:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:33 2026 by rpki-client