Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: nQK7OdU/5G43UCLP8v/dkinkzt3cKyp9LuRNpkksMjM=
Subject key identifier: D0:19:C6:26:7E:71:7B:91:2D:4E:E3:09:4D:16:2B:CE:8E:46:EC:51
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019D2695ED41CD1CEC5171FB21FE4A8BF925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 1587
Signing time: Wed 25 Mar 2026 20:00:52 +0000
Manifest this update: Wed 25 Mar 2026 20:00:52 +0000
Manifest next update: Thu 26 Mar 2026 20:00:52 +0000
Files and hashes: 1: oOe43u0rDz6F_hHXzn-flvvUaKU.roa (hash: w4KlXnKVNrmrMIj8p2+E6Qm85PcdsOMyZs6adtK9znE=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: 7RZuWG9wdhmImfQbnbLKm48guKYkk7ofFWpysEiyiSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ed:41:cd:1c:ec:51:71:fb:21:fe:4a:8b:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Mar 25 20:00:52 2026 GMT
Not After : Mar 26 20:00:52 2026 GMT
Subject: CN=d019c6267e717b912d4ee3094d162bce8e46ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:85:3d:73:30:12:98:d5:e0:26:b6:99:76:62:
38:d7:c2:c5:41:fe:6c:95:03:9a:fe:f2:b8:02:95:
76:fe:27:5d:1d:60:f5:50:35:18:5a:12:bc:54:a0:
69:ef:b2:7b:f4:0f:bd:c2:52:1a:9c:54:c0:9a:7a:
79:50:90:39:86:d1:48:14:4e:7a:9e:fe:67:6d:35:
45:ce:b9:91:a0:47:ba:f3:e1:38:2d:dd:8a:71:56:
d3:0a:15:c9:61:cc:f4:d8:01:57:05:70:22:39:26:
1d:f2:ba:bc:e7:17:24:e8:c9:cf:2e:ca:07:ed:a1:
a2:9b:43:e8:25:ab:d8:b8:92:76:b6:39:a2:d4:03:
27:e5:5c:bd:eb:2f:21:91:2a:01:6d:bd:25:01:15:
98:98:40:6b:04:d2:6d:ca:88:33:da:97:18:16:08:
6e:c3:ca:98:45:b1:da:b6:5a:58:d7:01:b2:14:22:
d7:57:01:f9:d6:f0:18:86:18:1a:71:d3:fe:88:a1:
77:96:65:57:ed:b4:f9:69:76:86:9a:d9:aa:2b:12:
0f:9f:c2:8c:b1:4c:f2:a8:0c:26:19:f8:28:7a:21:
9d:7d:19:21:d0:85:86:99:bf:7a:3d:07:a9:29:04:
06:cd:09:17:01:e8:3c:37:9b:4e:6f:b8:8d:7b:a8:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:C6:26:7E:71:7B:91:2D:4E:E3:09:4D:16:2B:CE:8E:46:EC:51
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:74:c6:fa:b8:9b:0f:d6:5e:02:d1:c0:9e:31:cf:fe:1a:6a:
42:ff:97:cf:dc:5f:25:b4:81:55:07:89:15:73:66:93:dc:4c:
13:73:93:dd:74:49:8b:5c:d4:ed:4c:15:0e:34:45:43:86:ad:
6a:c0:c0:f8:0b:b1:c7:0c:0d:52:56:84:5c:c3:e5:70:0f:07:
fc:bc:24:3a:64:24:3b:70:5c:e7:37:37:4b:b4:29:23:43:60:
06:ff:4b:9b:5f:90:82:90:18:6e:4d:ba:be:af:ea:87:14:27:
54:83:53:1d:67:43:76:f0:0e:09:3e:65:38:20:a9:d2:dc:d9:
21:84:d4:49:e4:a4:32:3a:f8:6f:2c:d9:e2:7e:13:93:01:5f:
8a:91:f9:36:fd:f8:67:6d:01:1b:1f:31:da:35:38:3b:49:78:
07:c1:e4:51:84:6c:c9:e5:9f:83:14:5c:4c:64:62:53:f7:3d:
de:a2:82:3a:b4:98:5d:74:af:be:e9:84:1f:e3:9e:08:c0:37:
c7:c5:bf:0a:68:c1:b9:6c:37:da:73:31:35:2f:b8:f9:47:49:
46:28:ba:06:82:1b:28:b7:21:7d:1d:f1:42:39:e4:d7:76:d5:
04:82:8a:2c:13:6b:48:9e:c0:93:5c:37:7b:2b:85:a5:a3:f5:
1b:37:6c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mle1BzRzsUXH7If5Ki/klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1
NmJmYmEwHhcNMjYwMzI1MjAwMDUyWhcNMjYwMzI2MjAwMDUyWjAzMTEwLwYDVQQD
EyhkMDE5YzYyNjdlNzE3YjkxMmQ0ZWUzMDk0ZDE2MmJjZThlNDZlYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YU9czASmNXgJraZdmI418LFQf5s
lQOa/vK4ApV2/iddHWD1UDUYWhK8VKBp77J79A+9wlIanFTAmnp5UJA5htFIFE56
nv5nbTVFzrmRoEe68+E4Ld2KcVbTChXJYcz02AFXBXAiOSYd8rq85xck6MnPLsoH
7aGim0PoJavYuJJ2tjmi1AMn5Vy96y8hkSoBbb0lARWYmEBrBNJtyogz2pcYFghu
w8qYRbHatlpY1wGyFCLXVwH51vAYhhgacdP+iKF3lmVX7bT5aXaGmtmqKxIPn8KM
sUzyqAwmGfgoeiGdfRkh0IWGmb96PQepKQQGzQkXAeg8N5tOb7iNe6hBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAZxiZ+cXuRLU7jCU0WK86ORuxRMB8GA1UdIwQY
MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt
ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz
LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXTG+rib
D9ZeAtHAnjHP/hpqQv+Xz9xfJbSBVQeJFXNmk9xME3OT3XRJi1zU7UwVDjRFQ4at
asDA+AuxxwwNUlaEXMPlcA8H/LwkOmQkO3Bc5zc3S7QpI0NgBv9Lm1+QgpAYbk26
vq/qhxQnVINTHWdDdvAOCT5lOCCp0tzZIYTUSeSkMjr4byzZ4n4TkwFfipH5Nv34
Z20BGx8x2jU4O0l4B8HkUYRsyeWfgxRcTGRiU/c93qKCOrSYXXSvvumEH+OeCMA3
x8W/CmjBuWw32nMxNS+4+UdJRii6BoIbKLchfR3xQjnk13bVBIKKLBNrSJ7Ak1w3
eyuFpaP1Gzds6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:48 2026 by rpki-client