Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: P7+IFetkABP/mU1YE1YDbsRJ/n5MjGp9L6JOX3X/XhY=
Subject key identifier: AB:A1:F2:90:2E:67:3F:EC:AA:CB:2C:E5:0B:4E:98:0D:C3:CE:09:98
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019D2AE0363B8827297FE135EBF1C4BC7AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0D5B
Signing time: Thu 26 Mar 2026 16:00:30 +0000
Manifest this update: Thu 26 Mar 2026 16:00:30 +0000
Manifest next update: Fri 27 Mar 2026 16:00:30 +0000
Files and hashes: 1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: MmNlaKCCDjHxsbhuHvIGgI6wZ3m7eFjJ3ZgoOY4560M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:36:3b:88:27:29:7f:e1:35:eb:f1:c4:bc:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Mar 26 16:00:30 2026 GMT
Not After : Mar 27 16:00:30 2026 GMT
Subject: CN=aba1f2902e673fecaacb2ce50b4e980dc3ce0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:2d:9e:c5:60:3e:f0:36:89:85:53:a4:d2:
cc:8a:e1:4e:3e:1b:b2:96:ab:61:b8:57:1d:68:26:
40:1a:2c:20:94:3e:a8:d6:51:cb:79:9b:ff:12:22:
7c:21:42:37:03:5f:2f:ea:e2:7c:3c:55:ea:fe:cf:
33:d4:58:44:9c:ed:6e:93:8c:65:05:75:97:89:86:
bf:eb:9f:5a:10:1a:38:96:14:28:ae:2d:91:a7:a7:
c4:53:d0:cf:35:7f:ee:07:64:ee:8a:b2:3b:f3:7a:
e5:7d:84:50:fe:a5:87:72:be:82:c1:03:2d:ed:e5:
53:22:39:a3:df:bc:44:16:cf:9f:a0:0c:ac:43:ad:
4a:16:a3:81:59:04:e3:b0:3b:31:f9:8a:21:c8:b4:
24:2b:99:1d:95:d5:3c:91:49:83:6f:d0:aa:c2:59:
6d:97:b3:ff:72:c9:6b:2d:9f:1e:fb:0e:bc:9e:70:
93:71:17:7f:bd:13:fe:db:3c:dc:de:15:c1:bc:7a:
36:db:72:34:93:c4:4b:1a:54:84:00:82:5b:d5:fa:
1d:cf:32:36:b5:85:87:1d:c8:ff:80:f6:b3:c9:62:
40:ce:56:e7:3a:3b:b9:15:1d:fd:24:9d:a4:dd:cf:
fc:71:4e:a0:32:69:b9:59:55:6b:27:d3:4b:fd:8f:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A1:F2:90:2E:67:3F:EC:AA:CB:2C:E5:0B:4E:98:0D:C3:CE:09:98
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:09:09:4f:11:17:54:ba:09:07:d3:e5:6f:31:ce:e4:90:
ff:e7:05:02:7a:fd:fe:b6:e3:3e:bd:09:4c:10:2a:4a:30:37:
43:74:ab:47:45:52:ba:f5:3c:3c:41:38:36:bf:43:29:53:13:
3a:f5:a8:fc:62:bf:32:0e:c9:50:de:d7:b7:8e:67:99:cb:93:
9e:e5:ca:41:cb:21:a3:57:83:97:79:20:b8:94:b9:01:d3:08:
9c:2a:de:ea:2e:b5:cf:4a:66:fa:65:f2:e4:90:ed:30:f8:0e:
95:2f:86:83:51:83:e2:8d:9c:07:df:dc:23:e2:cf:8e:9d:d8:
26:64:f0:a9:7c:a8:e9:d1:78:89:94:5a:c3:b5:28:3e:da:df:
e2:4e:04:ec:0b:ef:7a:95:36:d2:d0:b8:0a:eb:b7:3a:24:41:
8b:c1:89:db:b9:78:5b:a2:34:d4:e9:2a:36:5f:05:99:3b:74:
cd:7c:9c:8f:29:46:2b:b6:be:66:84:7f:32:90:c6:42:32:5b:
8e:49:48:69:50:80:8e:77:96:77:2f:38:3c:cc:5e:56:a5:be:
b8:1c:b7:9e:34:5e:f5:31:b8:e8:7c:18:02:a7:a3:22:10:8b:
b6:1c:9b:62:36:8f:2a:86:b2:51:3b:e4:c9:7a:0c:22:b5:d2:
3a:46:1b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4DY7iCcpf+E16/HEvHroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjYwMzI2MTYwMDMwWhcNMjYwMzI3MTYwMDMwWjAzMTEwLwYDVQQD
EyhhYmExZjI5MDJlNjczZmVjYWFjYjJjZTUwYjRlOTgwZGMzY2UwOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJstnsVgPvA2iYVTpNLMiuFOPhuy
lqthuFcdaCZAGiwglD6o1lHLeZv/EiJ8IUI3A18v6uJ8PFXq/s8z1FhEnO1uk4xl
BXWXiYa/659aEBo4lhQori2Rp6fEU9DPNX/uB2TuirI783rlfYRQ/qWHcr6CwQMt
7eVTIjmj37xEFs+foAysQ61KFqOBWQTjsDsx+YohyLQkK5kdldU8kUmDb9Cqwllt
l7P/cslrLZ8e+w68nnCTcRd/vRP+2zzc3hXBvHo223I0k8RLGlSEAIJb1fodzzI2
tYWHHcj/gPazyWJAzlbnOju5FR39JJ2k3c/8cU6gMmm5WVVrJ9NL/Y+lQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuh8pAuZz/sqsss5QtOmA3DzgmYMB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2UJCU8R
F1S6CQfT5W8xzuSQ/+cFAnr9/rbjPr0JTBAqSjA3Q3SrR0VSuvU8PEE4Nr9DKVMT
OvWo/GK/Mg7JUN7Xt45nmcuTnuXKQcsho1eDl3kguJS5AdMInCre6i61z0pm+mXy
5JDtMPgOlS+Gg1GD4o2cB9/cI+LPjp3YJmTwqXyo6dF4iZRaw7UoPtrf4k4E7Avv
epU20tC4Cuu3OiRBi8GJ27l4W6I01OkqNl8FmTt0zXycjylGK7a+ZoR/MpDGQjJb
jklIaVCAjneWdy84PMxeVqW+uBy3njRe9TG46HwYAqejIhCLthybYjaPKoayUTvk
yXoMIrXSOkYbDA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:32 2026 by rpki-client