Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: bPisKwYEro3GqkJt2B9yJmCo2tE76qbTXgSiQC1NNWg=
Subject key identifier: 3F:7A:41:1A:94:F4:23:F6:15:6E:56:D1:7E:9D:70:E5:4F:E4:20:B7
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019D2816F9559E8F47BF3384DBE48E0999A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 0371
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: fgKW1GvGo5gJPk74bp1WEmlFx+BxHgdT4FVb2YOTDBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f9:55:9e:8f:47:bf:33:84:db:e4:8e:09:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=3f7a411a94f423f6156e56d17e9d70e54fe420b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:59:fb:db:fb:45:27:f8:69:89:8c:bd:83:
b8:16:4c:7e:71:0f:72:8d:6e:b0:77:13:ef:16:fb:
77:b1:7c:b1:be:c4:b3:4d:f7:9a:8f:7e:38:3c:68:
76:ce:e2:21:9c:a9:5e:c0:1f:fb:13:6f:d5:77:36:
40:98:f7:1a:84:ac:b5:a6:c0:25:1a:c6:49:39:0c:
5f:fc:ba:a9:10:27:7b:38:05:49:af:42:c6:f8:1d:
d9:81:3b:d0:95:d5:27:84:14:41:dc:d6:b9:8d:f5:
16:e7:6c:d6:e1:9e:a6:76:77:72:5e:79:d8:26:39:
a3:c3:f5:2d:3a:05:e3:e2:8b:48:05:8f:fa:be:68:
ad:8f:2d:9c:7b:66:9e:f7:24:c3:a1:54:0a:09:0b:
d1:42:55:4d:b6:e7:28:aa:10:8f:f8:41:a7:44:16:
fe:9b:40:13:59:40:c4:84:d6:b0:ce:5e:46:0a:3f:
a8:0b:6f:c7:19:d0:fe:37:d8:fd:26:db:2f:e4:49:
0e:55:cd:55:47:24:48:6d:0c:13:cd:f2:c7:df:08:
ab:66:d3:f1:fb:8b:6e:8f:59:b8:c4:a4:01:fd:10:
65:dd:5c:75:3e:6b:c9:2f:99:7a:a7:e9:b3:e7:df:
db:94:6d:a8:7c:f5:c6:fb:b9:98:90:04:2b:20:a8:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:41:1A:94:F4:23:F6:15:6E:56:D1:7E:9D:70:E5:4F:E4:20:B7
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:60:59:77:9a:85:3f:f4:5f:4e:37:d7:12:8a:e6:69:f9:d9:
05:2a:df:9e:ed:82:6f:9e:ef:0f:4e:71:ad:af:00:81:79:b5:
18:e7:27:f6:97:79:0f:a8:c9:5f:f5:36:72:00:20:bf:a6:a8:
45:5f:a0:b3:05:f9:b3:a6:fe:82:1d:37:41:ed:19:bc:1d:cf:
3a:11:04:72:72:5e:3b:98:3c:40:a1:f7:d9:37:1b:1d:fb:36:
f5:f7:4b:f7:66:17:d4:e5:87:bd:5e:7c:34:79:e0:61:a0:2d:
15:bd:31:e4:ce:ef:0c:d5:c3:36:94:4b:ff:6f:a4:f9:47:fa:
57:36:b2:fa:02:04:65:44:9f:c4:b5:e0:2b:3a:0b:4d:91:f7:
59:d3:31:f3:c0:20:a3:56:16:6a:f3:fc:bf:5e:38:0e:b1:4c:
7b:58:62:04:69:33:62:96:c2:e1:5c:fa:e9:20:39:33:f1:bb:
03:fe:be:c1:9d:a8:42:44:ff:f7:8f:29:16:a2:49:bc:0d:05:
8b:d3:21:de:89:a1:cc:50:98:45:20:3c:00:76:62:ba:c5:c8:
23:48:99:7c:ec:ee:36:45:a4:c6:a0:98:08:2e:3f:7c:10:6c:
3e:b6:09:93:3b:61:fe:c3:27:44:fa:26:36:c3:f4:54:7f:63:
58:13:df:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvlVno9HvzOE2+SOCZmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm
MmVhMDEwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
EygzZjdhNDExYTk0ZjQyM2Y2MTU2ZTU2ZDE3ZTlkNzBlNTRmZTQyMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMJZ+9v7RSf4aYmMvYO4Fkx+cQ9y
jW6wdxPvFvt3sXyxvsSzTfeaj344PGh2zuIhnKlewB/7E2/VdzZAmPcahKy1psAl
GsZJOQxf/LqpECd7OAVJr0LG+B3ZgTvQldUnhBRB3Na5jfUW52zW4Z6mdndyXnnY
Jjmjw/UtOgXj4otIBY/6vmitjy2ce2ae9yTDoVQKCQvRQlVNtucoqhCP+EGnRBb+
m0ATWUDEhNawzl5GCj+oC2/HGdD+N9j9Jtsv5EkOVc1VRyRIbQwTzfLH3wirZtPx
+4tuj1m4xKQB/RBl3Vx1PmvJL5l6p+mz59/blG2ofPXG+7mYkAQrIKjXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD96QRqU9CP2FW5W0X6dcOVP5CC3MB8GA1UdIwQY
MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt
ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1
LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmBZd5qF
P/RfTjfXEormafnZBSrfnu2Cb57vD05xra8AgXm1GOcn9pd5D6jJX/U2cgAgv6ao
RV+gswX5s6b+gh03Qe0ZvB3POhEEcnJeO5g8QKH32TcbHfs29fdL92YX1OWHvV58
NHngYaAtFb0x5M7vDNXDNpRL/2+k+Uf6Vzay+gIEZUSfxLXgKzoLTZH3WdMx88Ag
o1YWavP8v144DrFMe1hiBGkzYpbC4Vz66SA5M/G7A/6+wZ2oQkT/948pFqJJvA0F
i9Mh3omhzFCYRSA8AHZiusXII0iZfOzuNkWkxqCYCC4/fBBsPrYJkzth/sMnRPom
NsP0VH9jWBPfsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:55 2026 by rpki-client