Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: 4VRwpu/CUROvmRY8dsS1Vo6n2PlwP7aQCIKluYFEEQA=
Subject key identifier: D5:86:4C:67:94:8F:B7:5E:A2:07:29:5F:5D:CC:96:F4:FC:23:89:4B
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019D98F4413231AFAE308347C1EACCDC7A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0AAC
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: +yIBA5OPFFiNooO3oatC4eIYK8XfcI9keKSja6PM7KI=)
2: vmbqeh6-vK4ev0adywfz4g1Rvoo.roa (hash: xqWqv6l8nmG+Jik4AMPhv/K9W2arr299/CeqLO5XHe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:41:32:31:af:ae:30:83:47:c1:ea:cc:dc:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=d5864c67948fb75ea207295f5dcc96f4fc23894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2f:b0:7a:8a:12:e6:21:9a:c8:f0:d8:97:3d:
4c:ad:4a:c5:dd:46:fc:ea:a7:1f:e0:3c:65:71:21:
83:44:33:92:fc:7f:ef:ec:18:70:f1:ad:6f:5b:26:
10:8d:c0:e3:6c:f7:df:c8:27:73:fb:82:01:2d:5c:
83:d5:ca:23:70:8c:dd:13:34:20:1d:c0:4c:87:50:
e1:e0:e1:42:9c:c7:ba:c1:7b:49:19:2d:ab:bf:7b:
80:3e:4b:d2:8e:b3:83:7b:16:42:51:13:82:0c:76:
51:4e:5c:13:33:ca:69:a9:b7:ec:77:04:1a:09:8a:
2a:04:38:7f:d2:c4:67:c0:6c:31:45:17:f8:25:fc:
65:61:4a:9f:02:b2:c7:16:ac:83:e0:fe:d1:98:db:
44:81:6c:3b:f3:04:fd:f5:df:32:d4:d3:cb:a6:4a:
84:f8:89:83:9f:40:7e:73:80:f8:75:6c:92:17:a5:
4f:a4:ba:5a:f1:cc:58:ec:6b:ae:6e:66:e9:b7:b3:
2a:dc:1e:53:6c:22:59:99:b7:a1:16:26:5a:21:ae:
99:49:10:4c:5c:0e:1f:13:a8:6c:e5:86:7c:12:a5:
d8:1a:c0:f9:00:45:30:f7:06:1c:c2:8a:a6:e4:25:
71:62:2e:fe:68:74:57:d5:dc:e4:c4:b5:2d:16:97:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:86:4C:67:94:8F:B7:5E:A2:07:29:5F:5D:CC:96:F4:FC:23:89:4B
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:56:eb:6b:89:08:4c:45:49:ba:6b:95:1c:ad:b4:b4:76:
13:46:aa:2a:69:d7:ac:f3:1c:8a:2e:bb:9c:f4:45:18:79:88:
49:89:b8:59:ab:fb:55:8d:19:fc:41:eb:1d:88:05:82:03:7e:
9f:40:62:46:bd:20:fe:6e:e7:e9:8e:97:73:bd:8f:4b:4a:ad:
27:e6:e9:8b:e5:d8:d8:03:04:7d:8b:fc:ef:b2:9f:b6:2a:2f:
ae:6d:1d:f0:6a:b5:19:32:eb:f8:e0:32:79:c1:96:85:1e:a9:
8c:f4:98:ba:9b:aa:d5:85:38:84:c3:71:ee:8e:d5:a8:da:17:
ff:b5:09:8c:e2:2b:55:42:f6:95:6f:55:36:85:98:60:0d:36:
5d:2c:90:99:6f:21:ca:e5:d1:9a:11:3b:b4:ae:b0:73:1b:32:
f5:14:94:80:f4:02:6b:3d:f4:6c:83:2d:45:f3:40:b1:b3:a3:
47:60:f2:2f:09:e3:aa:cc:8f:67:41:96:2f:13:65:dd:ba:d8:
18:62:19:1d:ac:92:7c:73:05:12:11:5b:6e:06:3c:a0:8e:87:
c5:19:01:64:3a:cf:56:d8:eb:9d:28:01:f8:77:b8:b3:e7:91:
66:10:6f:2b:72:29:6a:f9:55:59:75:10:c1:a7:0f:8b:5c:9a:
45:60:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:12 2026 by rpki-client