Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: juRztdqHki3XyBUk1B3A/BPj+Cdo7RoPRq7z8RUjLOA=
Subject key identifier: C5:85:E4:6A:86:CC:73:3F:23:84:06:01:A4:06:A3:3E:18:AA:51:2C
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019CAB6B4E962704CD2F9A5C8514C67F7571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0A31
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: iqWwTuZooHMc5Ef/9H65nEvSsvw+jm5347gJOjMKep8=)
2: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (hash: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4e:96:27:04:cd:2f:9a:5c:85:14:c6:7f:75:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=c585e46a86cc733f23840601a406a33e18aa512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:2d:df:d2:2d:ef:b1:21:0c:63:d8:10:0f:
05:99:78:9e:a7:2f:37:98:23:c3:be:7b:46:76:b8:
a2:43:db:9f:d8:b2:39:05:2f:ce:69:61:f3:e6:76:
e8:f3:55:f6:e1:24:91:e9:e0:fe:33:ac:f4:4d:dc:
22:5f:f3:4c:3e:30:01:99:23:1c:f7:15:e8:6a:82:
9d:c1:a4:55:ec:82:4e:2b:38:29:7c:bf:a8:45:0c:
23:6d:3b:0d:fd:7b:4e:cc:d7:6c:51:23:21:3d:d5:
55:2d:ba:76:77:04:3b:1f:7b:a4:f7:0b:e7:af:f9:
78:8a:0d:95:3e:ae:84:01:b5:d2:a9:96:32:e6:c9:
52:ec:77:a3:06:df:9d:8a:77:c6:f3:fe:38:1d:cd:
5e:65:29:8f:a4:f3:f1:67:2a:34:e4:6f:38:bd:03:
70:e1:39:a9:8b:0a:b5:de:73:e5:a9:ec:ea:77:13:
52:2a:2a:14:5d:16:49:77:15:58:00:64:ea:7c:30:
73:ef:a3:f5:2e:a6:07:a9:83:2c:5e:34:48:7c:2d:
33:41:19:8f:eb:37:75:ad:2f:a0:6b:2f:d0:81:ba:
ff:74:e7:4f:a1:c5:82:ce:b0:38:c8:67:82:c7:24:
13:a5:5f:10:3b:de:51:61:7f:47:2b:49:83:11:87:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:E4:6A:86:CC:73:3F:23:84:06:01:A4:06:A3:3E:18:AA:51:2C
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:49:18:df:99:c7:f7:ed:41:b1:1b:36:8f:c7:f8:28:64:8c:
e0:74:4b:23:f1:6a:24:a2:6e:a3:fa:34:7b:0d:78:55:3a:e8:
a7:b3:c3:1b:6d:21:7c:b2:69:9d:0a:3b:3b:68:99:4d:df:c4:
17:e5:93:02:9d:53:b9:e8:de:54:9f:4e:2c:3a:fd:6a:52:a0:
29:63:16:2b:f0:db:e0:6a:23:e8:2a:f5:4e:91:7f:55:1f:16:
6a:41:71:bc:cf:f5:40:a9:eb:e7:78:e9:54:73:1e:59:34:79:
29:bb:ae:27:44:2e:49:94:2a:93:35:a5:83:bb:9e:50:95:10:
f5:0f:20:7e:40:0e:25:ea:69:06:66:5f:78:0b:f6:a2:34:4f:
ed:37:97:60:b1:2e:4e:be:6b:69:4a:b2:43:f6:da:44:95:4a:
ef:9f:52:47:a1:df:25:e3:3a:e9:12:bf:8d:86:44:3d:b6:38:
3f:c1:37:d0:ab:08:45:20:bf:b2:4c:16:fc:eb:01:7b:22:38:
3e:29:2f:f3:22:9f:8c:a6:9a:87:92:26:6d:ae:65:e1:c9:06:
6c:0d:18:ac:cf:fa:94:47:15:6c:ff:c3:39:82:66:bf:94:3c:
29:c6:c2:9a:a4:ec:d9:3b:15:71:f9:ab:97:72:ee:d9:7f:fb:
a2:48:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:09 2026 by rpki-client