Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: S3eSTjh/+dRLaviJ7DhMU6SKseF7xUvg6yDU3afAJ5Q=
Subject key identifier: 16:CC:85:E7:A2:3D:05:47:9B:A1:4B:E0:36:21:CF:7A:68:EB:02:86
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 019D28BB89848A170F943FB2A873EB963CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 0B05
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: LBuMJhT9HI_N-o97AGqRNMobN2k.roa (hash: J1YinkBVmpDcd/nfyc1eO3Q9IO60Z11LEvtRdzK2OZo=)
2: kd0M99nX3mEAE8mM8gT2op45MsU.roa (hash: qbE/jcnwxy0lIpkGkzTB/U3L+6e4tnUzWLrv92qEK9A=)
3: wTlbzeF26X067XNQG4ixA_F7gss.roa (hash: mmrxsWqMHEhPszYdixQQAOjmiWohzdeiT/VZLFaDvkA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: d2lgcOB+t+ZZzW9pMEaOyZ5dJSyHbwuocoYiwQ9LCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:89:84:8a:17:0f:94:3f:b2:a8:73:eb:96:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=16cc85e7a23d05479ba14be03621cf7a68eb0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:48:ab:b9:aa:9a:4e:7e:5d:6c:49:5b:f7:
c6:c5:c5:12:a5:f3:9c:ac:5c:d8:b3:d3:37:1f:5f:
ca:5c:62:34:5f:f0:e6:02:d1:8d:5e:2d:dd:f1:5a:
12:ee:17:1a:91:7f:bd:98:e9:d4:47:45:d4:0f:42:
fc:7d:ab:08:cc:f3:2f:92:3c:dd:17:6e:10:89:e5:
da:d3:e4:8b:5f:26:1c:d7:d4:1c:a4:54:8a:31:1b:
31:95:a9:c1:c4:69:83:64:23:a3:39:8a:30:28:04:
10:50:39:06:e1:06:70:d8:7f:df:6c:d4:39:8f:70:
ec:ac:b1:49:88:04:2a:04:b5:27:0d:4a:fa:d4:d7:
6d:a5:fc:0c:2e:e4:fe:3c:73:fd:d4:99:08:4b:e2:
2b:25:55:b0:39:10:af:fe:e3:34:25:88:c0:8f:aa:
52:59:a7:b0:9d:df:55:3e:e3:18:70:82:42:bc:aa:
a5:72:17:61:47:bb:45:12:3a:57:cf:af:21:5c:5d:
2e:12:2b:ee:c1:32:fd:d0:16:5d:80:be:e1:64:61:
dc:4e:0e:56:f4:ac:74:0f:c3:ec:77:72:77:af:80:
1f:c7:26:23:b1:74:5f:8c:d1:e9:aa:7e:9e:e1:e2:
23:5e:07:e4:96:e2:d7:4e:04:2a:44:78:52:ad:65:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:85:E7:A2:3D:05:47:9B:A1:4B:E0:36:21:CF:7A:68:EB:02:86
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fb:d8:bd:72:25:3e:ee:c8:7b:ba:8d:94:20:56:62:24:23:
d7:4e:db:7b:9c:3f:68:ce:4d:c7:e6:0d:2f:5f:17:e4:72:5c:
35:13:63:63:64:4a:45:66:f0:88:da:1d:25:c4:f2:85:e9:28:
60:5a:55:9b:c1:43:53:7e:b2:bc:fd:cd:62:64:cb:77:70:b3:
1b:c9:d7:07:18:b7:dd:f9:4d:d1:a8:68:0d:cc:11:02:cf:6b:
e1:9d:3b:db:46:3e:c5:3f:23:03:95:42:26:b2:e1:1d:8f:6c:
64:ce:e2:de:b0:95:33:75:8c:03:15:77:ad:29:8d:f0:48:7f:
49:d1:e7:6a:c8:42:93:80:cc:57:66:fa:c5:ed:e5:43:e2:24:
8a:46:1a:70:ba:c4:ed:b7:86:6c:d3:ea:2d:32:6a:b4:42:65:
3a:ee:a4:ed:c6:ac:cb:e0:10:42:bb:9a:d2:7c:8f:e3:59:f1:
9c:ed:3f:c0:71:01:00:ea:8b:62:2e:d2:3c:ba:87:a3:ec:8c:
e2:89:c1:bf:dc:72:bf:5f:d8:52:c8:15:ae:35:58:e5:93:90:
89:c6:73:cc:65:b0:a2:36:9a:a1:2e:a4:4d:ed:29:73:70:c0:
66:07:23:06:99:e9:b9:30:b2:c6:11:ba:28:57:b5:7e:29:eb:
6e:73:6d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4mEihcPlD+yqHPrljy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjYwMzI2MDYwMTEyWhcNMjYwMzI3MDYwMTEyWjAzMTEwLwYDVQQD
EygxNmNjODVlN2EyM2QwNTQ3OWJhMTRiZTAzNjIxY2Y3YTY4ZWIwMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCNIq7mqmk5+XWxJW/fGxcUSpfOc
rFzYs9M3H1/KXGI0X/DmAtGNXi3d8VoS7hcakX+9mOnUR0XUD0L8fasIzPMvkjzd
F24QieXa0+SLXyYc19QcpFSKMRsxlanBxGmDZCOjOYowKAQQUDkG4QZw2H/fbNQ5
j3DsrLFJiAQqBLUnDUr61NdtpfwMLuT+PHP91JkIS+IrJVWwORCv/uM0JYjAj6pS
Waewnd9VPuMYcIJCvKqlchdhR7tFEjpXz68hXF0uEivuwTL90BZdgL7hZGHcTg5W
9Kx0D8Psd3J3r4AfxyYjsXRfjNHpqn6e4eIjXgfkluLXTgQqRHhSrWW+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbMheeiPQVHm6FL4DYhz3po6wKGMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufvYvXIl
Pu7Ie7qNlCBWYiQj107be5w/aM5Nx+YNL18X5HJcNRNjY2RKRWbwiNodJcTyheko
YFpVm8FDU36yvP3NYmTLd3CzG8nXBxi33flN0ahoDcwRAs9r4Z0720Y+xT8jA5VC
JrLhHY9sZM7i3rCVM3WMAxV3rSmN8Eh/SdHnashCk4DMV2b6xe3lQ+IkikYacLrE
7beGbNPqLTJqtEJlOu6k7casy+AQQrua0nyP41nxnO0/wHEBAOqLYi7SPLqHo+yM
4onBv9xyv1/YUsgVrjVY5ZOQicZzzGWwojaaoS6kTe0pc3DAZgcjBpnpuTCyxhG6
KFe1finrbnNt4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:01 2026 by rpki-client