Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: NjE5CVQWBf2/jfeGSglS6oGd9BwQXLx/+xuEtgyOEUs=
Subject key identifier: 52:98:38:62:02:7F:0A:40:BF:1D:67:94:38:20:A1:16:9A:C5:65:55
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019D2A3B3FB6AC1A699BABB9DB1632414552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0BBD
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: hp7c2VldHB59dZcSL9qYl3iw3mnC8t9ut7tQbfhEfC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:3f:b6:ac:1a:69:9b:ab:b9:db:16:32:41:45:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=52983862027f0a40bf1d67943820a1169ac56555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:6b:75:04:2e:e3:f2:78:ad:5b:ff:3b:66:
08:60:d9:f6:f9:39:ef:5c:85:42:61:82:98:57:9a:
b1:6c:ad:79:02:b9:68:da:f1:3c:d7:96:9c:ba:0d:
83:c4:2a:38:4e:22:83:63:d4:8f:d0:dc:52:3e:bd:
b6:b9:7f:2a:fa:2d:26:66:54:94:eb:a6:11:4b:10:
7a:1d:a2:0e:53:b9:f7:15:6b:f5:47:2e:b8:a3:d4:
0c:db:43:74:25:e0:9e:f0:30:7b:2e:ae:49:cc:21:
8e:a5:bc:fa:44:87:b6:72:a4:6f:95:bb:29:c3:79:
93:da:a4:d0:ee:cb:00:21:dd:6e:73:bc:93:20:b6:
b2:6b:ee:e4:4e:6c:c6:f5:22:37:8e:e5:6b:c9:fd:
57:e7:f1:5a:90:37:b8:61:38:91:d3:2e:2e:0c:c3:
3d:fc:66:7b:66:6c:ab:df:1a:4e:80:45:76:72:81:
44:a1:d1:b8:b8:67:97:4a:7d:b6:84:9e:f4:e8:ee:
78:ed:7e:dd:03:8d:da:3b:60:89:25:a2:c4:ed:2c:
0f:9c:77:a7:7b:6e:92:10:f1:23:6e:81:1d:32:e3:
7f:6e:04:df:06:88:4b:59:fe:dd:b3:47:1b:c4:aa:
14:23:af:a4:1d:3e:29:e0:e0:54:48:c1:42:56:e7:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:38:62:02:7F:0A:40:BF:1D:67:94:38:20:A1:16:9A:C5:65:55
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9d:b8:a3:6c:8a:46:ec:f2:58:29:1f:3c:04:cc:f0:40:55:
94:14:f5:db:91:0d:e0:84:cb:e9:9b:4f:4a:af:7c:9b:6a:c1:
c6:c4:50:93:1c:b0:da:b6:da:12:05:eb:89:a8:2b:d0:0c:70:
de:5a:bc:a2:39:77:ef:d1:f5:c3:ea:67:ce:36:00:53:91:7e:
43:e7:a8:4a:7b:d8:de:cd:e1:53:9c:a8:37:9d:cf:c6:38:69:
02:04:b5:9c:83:19:63:b7:11:7f:d6:e0:c3:5c:db:04:ed:c4:
20:cd:d8:56:d4:bf:71:a1:d9:02:f2:42:6f:56:4e:91:fd:b5:
be:23:7c:9e:04:8c:98:f0:b0:4e:fd:dc:4b:1b:25:5c:62:71:
b5:c4:d2:6d:85:9d:05:bb:24:0c:f7:f9:fb:63:80:db:d6:65:
50:78:ad:ce:e4:7b:f6:fe:05:44:f9:4c:ae:cd:f8:eb:86:df:
79:87:47:8d:f3:b8:e0:41:81:c9:70:fa:bb:42:65:3a:86:6d:
b0:30:3c:33:b5:3c:d8:fe:f7:16:ac:05:c0:34:e3:df:6f:70:
ae:6a:ca:22:7e:e6:66:0b:aa:c8:61:63:40:b9:eb:39:5d:a3:
c6:c0:9b:b0:cc:4c:99:8a:8c:66:d0:f3:c3:4c:12:5a:6e:52:
df:c0:df:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qOz+2rBppm6u52xYyQUVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjYwMzI2MTMwMDE5WhcNMjYwMzI3MTMwMDE5WjAzMTEwLwYDVQQD
Eyg1Mjk4Mzg2MjAyN2YwYTQwYmYxZDY3OTQzODIwYTExNjlhYzU2NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml1rdQQu4/J4rVv/O2YIYNn2+Tnv
XIVCYYKYV5qxbK15Arlo2vE815acug2DxCo4TiKDY9SP0NxSPr22uX8q+i0mZlSU
66YRSxB6HaIOU7n3FWv1Ry64o9QM20N0JeCe8DB7Lq5JzCGOpbz6RIe2cqRvlbsp
w3mT2qTQ7ssAId1uc7yTILaya+7kTmzG9SI3juVryf1X5/FakDe4YTiR0y4uDMM9
/GZ7Zmyr3xpOgEV2coFEodG4uGeXSn22hJ706O547X7dA43aO2CJJaLE7SwPnHen
e26SEPEjboEdMuN/bgTfBohLWf7ds0cbxKoUI6+kHT4p4OBUSMFCVudY8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKYOGICfwpAvx1nlDggoRaaxWVVMB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ24o2yK
RuzyWCkfPATM8EBVlBT125EN4ITL6ZtPSq98m2rBxsRQkxyw2rbaEgXriagr0Axw
3lq8ojl379H1w+pnzjYAU5F+Q+eoSnvY3s3hU5yoN53PxjhpAgS1nIMZY7cRf9bg
w1zbBO3EIM3YVtS/caHZAvJCb1ZOkf21viN8ngSMmPCwTv3cSxslXGJxtcTSbYWd
BbskDPf5+2OA29ZlUHitzuR79v4FRPlMrs3464bfeYdHjfO44EGByXD6u0JlOoZt
sDA8M7U82P73FqwFwDTj329wrmrKIn7mZguqyGFjQLnrOV2jxsCbsMxMmYqMZtDz
w0wSWm5S38Dflg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:31 2026 by rpki-client