Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: ORQzG+Ux9WrfCk5HRBn7rMTOYBC+zes4wP2Wz769cJo=
Subject key identifier: D4:13:2F:B8:D7:5A:E6:04:CE:E5:3D:A9:EF:79:99:FA:06:1A:B7:E1
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 019D27A8F406B3A044DC05A2B8E6AAC488D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 1253
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: tnlT3WguTIaBPQyXQdyvdPZTqq0.roa (hash: OdNtfnb+ps4t4Tb3faIsE6ujGrvLv+3p6hrL7wNeeB4=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: H6uExMTEbZXl6XVHJoHxSmADFqkvyjB1+vxr4jm2eTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f4:06:b3:a0:44:dc:05:a2:b8:e6:aa:c4:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=d4132fb8d75ae604cee53da9ef7999fa061ab7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:e4:7f:d7:73:3b:08:8e:44:7c:3f:ff:8a:
44:19:59:9f:9d:d7:47:a8:18:1d:5e:d3:07:04:46:
3e:3a:ad:84:95:d3:fc:5a:2c:12:9c:46:6b:48:2d:
f5:b3:a7:d1:e1:31:b8:49:42:f7:e1:d9:57:f4:48:
13:de:5d:30:82:b4:b9:1c:ba:00:07:cf:a2:6e:1c:
52:06:33:fc:0d:81:d8:1b:02:5b:13:14:c8:4e:f7:
6a:97:08:57:87:12:85:41:30:45:83:cc:df:ec:95:
26:9c:03:0d:26:d8:b8:89:10:b9:f6:a1:10:3b:19:
fd:68:23:17:a2:a7:7a:7c:36:7a:00:b4:2d:de:a7:
6c:f1:fc:55:eb:33:6f:01:eb:ae:71:ef:95:7c:78:
e5:22:8b:98:b9:1c:b2:bc:66:b8:b9:6e:db:c6:d9:
a9:d5:53:ac:87:60:b4:38:4e:b2:92:67:14:36:a9:
d2:89:ab:0f:e3:bd:5c:24:4a:27:21:2a:62:a4:67:
c9:93:2c:7b:38:82:ce:1b:22:0f:b2:12:11:76:ed:
17:ca:3b:cf:0c:7d:fd:7e:36:d4:e8:3c:1b:df:1e:
04:48:39:c8:3d:81:e6:00:cd:06:a9:c7:e8:19:73:
8b:99:cd:67:0e:1d:3e:49:47:0a:39:59:48:a4:db:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:2F:B8:D7:5A:E6:04:CE:E5:3D:A9:EF:79:99:FA:06:1A:B7:E1
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:85:b3:5c:97:24:97:68:b0:0d:2b:bb:bd:61:a4:e8:91:85:
e0:48:6c:cc:3c:4f:8b:6b:91:87:b0:8f:7e:d9:00:ef:31:b8:
d7:63:d2:7b:2d:cd:51:44:24:13:eb:72:0d:14:bf:ad:65:69:
0e:82:5c:0d:6b:4a:28:53:f5:65:94:b4:a0:d4:e4:fd:88:c9:
b6:f7:70:3f:63:0b:6e:07:8d:d5:73:90:c3:5b:d7:8d:5f:d8:
0d:8e:e9:09:a5:a7:24:c4:0f:8b:fc:f2:fa:2e:08:0b:d1:8f:
97:98:3f:ab:64:e4:02:6e:30:35:24:2c:75:53:98:cb:62:eb:
17:e9:fb:e5:fd:ed:b4:20:b8:5b:b9:cc:44:58:1b:ee:7e:07:
e6:7f:8d:60:07:a2:72:8c:37:0b:da:b3:f4:69:37:38:4c:5a:
5e:6b:14:55:ab:d5:b0:37:bc:b7:f7:9c:73:a9:32:fb:6f:3a:
76:e5:11:6c:6d:9a:23:f7:21:52:56:29:d9:8f:20:13:5e:90:
e3:ad:d0:69:f1:23:ba:c4:23:31:4f:be:f3:94:74:9e:a2:6b:
6f:04:12:d1:92:63:6e:30:e4:bc:bd:04:61:2d:e6:2e:3e:f5:
d9:ed:07:f2:12:83:56:54:9b:3d:5a:06:4b:c9:73:f9:cb:2f:
36:30:5d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPQGs6BE3AWiuOaqxIjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc1N2U5MTNhYWNlNDM0ZTZkZDZkNmQ1MGE3ZWRmNzJj
ZTg4OGMwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
EyhkNDEzMmZiOGQ3NWFlNjA0Y2VlNTNkYTllZjc5OTlmYTA2MWFiN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNHkf9dzOwiORHw//4pEGVmfnddH
qBgdXtMHBEY+Oq2EldP8WiwSnEZrSC31s6fR4TG4SUL34dlX9EgT3l0wgrS5HLoA
B8+ibhxSBjP8DYHYGwJbExTITvdqlwhXhxKFQTBFg8zf7JUmnAMNJti4iRC59qEQ
Oxn9aCMXoqd6fDZ6ALQt3qds8fxV6zNvAeuuce+VfHjlIouYuRyyvGa4uW7bxtmp
1VOsh2C0OE6ykmcUNqnSiasP471cJEonISpipGfJkyx7OILOGyIPshIRdu0XyjvP
DH39fjbU6Dwb3x4ESDnIPYHmAM0GqcfoGXOLmc1nDh0+SUcKOVlIpNvwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQTL7jXWuYEzuU9qe95mfoGGrfhMB8GA1UdIwQY
MBaAFMvXV+kTqs5DTm3W1tUKft9yzoiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYt
OWNmZGYzYzJiMzQ4LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYtOWNmZGYzYzJiMzQ4
LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIWzXJck
l2iwDSu7vWGk6JGF4EhszDxPi2uRh7CPftkA7zG412PSey3NUUQkE+tyDRS/rWVp
DoJcDWtKKFP1ZZS0oNTk/YjJtvdwP2MLbgeN1XOQw1vXjV/YDY7pCaWnJMQPi/zy
+i4IC9GPl5g/q2TkAm4wNSQsdVOYy2LrF+n75f3ttCC4W7nMRFgb7n4H5n+NYAei
cow3C9qz9Gk3OExaXmsUVavVsDe8t/ecc6ky+286duURbG2aI/chUlYp2Y8gE16Q
463QafEjusQjMU++85R0nqJrbwQS0ZJjbjDkvL0EYS3mLj712e0H8hKDVlSbPVoG
S8lz+csvNjBdUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:32 2026 by rpki-client