Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: pWEtrYtYR6crZMVYpLowy/RptYUpKI2MpbKZoujY7Bw=
Subject key identifier: 74:F7:33:60:A0:37:E6:CE:89:00:71:1D:76:A4:F6:30:36:50:9E:AE
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 019CAC7E1B91FF8AA15EC29B037F286911A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 019C
Signing time: Mon 02 Mar 2026 03:01:11 +0000
Manifest this update: Mon 02 Mar 2026 03:01:11 +0000
Manifest next update: Tue 03 Mar 2026 03:01:11 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: mU+q9zusMFeQ9jN1/XTteupwvcebDWWr++K5I2EQ3XY=)
2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1b:91:ff:8a:a1:5e:c2:9b:03:7f:28:69:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Mar 2 03:01:11 2026 GMT
Not After : Mar 3 03:01:11 2026 GMT
Subject: CN=74f73360a037e6ce8900711d76a4f63036509eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:a9:f9:35:67:b4:73:39:87:44:80:6b:1f:
2a:90:96:e4:15:a9:e3:02:83:6b:b7:9c:c9:0c:27:
6b:7e:5c:cb:4e:7a:be:48:d0:7e:8f:6b:9e:76:29:
ce:b8:bf:4c:c3:a4:87:d3:45:81:1d:37:4e:59:73:
db:cb:70:b5:c5:17:ab:3d:e4:91:79:24:ed:7a:47:
cb:28:42:74:ff:5b:74:ab:79:87:39:c1:fa:69:5e:
ba:82:af:ef:78:54:cc:7c:d2:b8:49:55:4e:28:4a:
25:d3:87:a8:a6:fb:99:9b:39:56:21:56:35:21:0e:
40:e3:85:cb:28:1b:e4:ab:19:69:98:08:09:52:cc:
ce:b3:b3:f6:b1:08:8a:29:80:c9:5c:f5:bb:41:61:
70:53:46:cb:a3:1f:3d:2a:10:44:f5:b5:e8:62:ce:
b1:c6:b9:e9:fa:88:cd:cf:4b:a2:a3:dd:62:b4:c3:
7a:41:09:b2:95:85:75:61:56:69:04:15:18:62:86:
de:a5:7c:d9:2d:7b:4c:4b:27:f1:63:36:3f:b0:df:
a1:b3:52:e9:78:19:55:1d:13:34:3a:f0:1b:42:6a:
fb:53:03:d7:ac:88:b6:0c:7e:1b:68:ba:35:d1:4b:
c1:2d:bc:f6:23:d0:58:83:84:e9:2b:9b:9b:d1:2b:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:33:60:A0:37:E6:CE:89:00:71:1D:76:A4:F6:30:36:50:9E:AE
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:2b:a8:b2:78:2c:66:76:e7:da:c5:7c:ed:a9:00:cb:8e:
a3:86:b6:4f:b3:7d:91:96:64:f8:08:67:56:1e:9b:aa:70:2f:
c6:ea:3e:a4:94:59:2d:87:fc:53:71:28:51:7e:02:81:50:8a:
25:57:88:1f:88:8e:51:7b:34:a4:5a:7f:ea:5b:35:2f:f8:37:
a2:6b:9e:91:e6:76:2a:c8:ec:bd:9c:bc:a3:c2:b4:df:16:64:
30:63:2d:b5:fe:91:a1:25:a0:8a:5d:ec:7a:ec:e8:e9:49:03:
62:af:07:f2:97:12:7a:be:bf:4c:1e:f7:c5:ec:d4:18:ae:9f:
40:89:12:b9:d9:aa:57:95:0d:1f:03:5d:04:b3:96:23:2e:ce:
9d:69:09:2c:11:08:68:c2:ac:97:d8:e5:fa:57:84:c1:67:7e:
0c:79:7e:f5:6d:d7:e1:62:05:79:7a:54:c9:d4:42:09:cd:3d:
ca:96:15:22:40:52:90:0f:1c:01:7f:ba:5a:c3:3e:ab:e4:a3:
ae:fd:69:62:0b:03:c1:14:c9:cb:1c:25:96:83:d4:c8:af:9e:
0a:d5:d7:dc:eb:fd:f2:87:96:13:f7:f1:6e:d0:13:5f:27:3d:
8f:dd:34:53:0a:f0:f0:67:e2:6f:30:82:22:af:ae:1a:a2:4a:
03:6e:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:38 2026 by rpki-client