Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: ZjJI1kcwwtrHwrDF5SAwpuA/ABCGwlx2PFC2Zv/UjdQ=
Subject key identifier: A0:F4:30:68:30:F5:F9:88:21:B0:A1:AF:6D:CE:15:69:0B:33:DD:B0
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019D262825A92B706EC20C9AA00D2F9BB44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0F0A
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: GZBsulVSwhKN8hEdWvLpGmF4KBzI//FyzCHIpomzL4w=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:25:a9:2b:70:6e:c2:0c:9a:a0:0d:2f:9b:b4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=a0f4306830f5f98821b0a1af6dce15690b33ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:de:58:5f:29:ea:5f:e6:1d:3f:96:01:8d:
c8:f9:12:bf:53:77:d0:41:cb:40:df:38:95:32:f6:
c1:88:59:26:43:1b:cd:f8:ee:8f:6f:b4:9d:bf:dd:
60:3f:19:9f:cb:8c:4b:c3:a3:99:ab:c7:80:ba:ac:
79:d6:e1:0a:05:12:11:7b:ee:3f:1e:6f:d2:0d:c6:
1d:2e:56:76:f3:06:fd:4c:2f:e1:73:25:a4:3c:3d:
34:a2:5a:8a:78:79:37:73:68:9e:86:67:d7:2c:d3:
49:bc:ef:1a:3a:9c:28:e3:6e:9a:a7:95:43:a4:38:
4b:db:bb:62:bf:45:23:a6:c4:16:d4:7b:cb:73:8d:
7f:a0:d7:44:9a:c3:2b:e7:a5:07:2a:1f:ac:e1:73:
24:86:3b:d0:11:eb:66:d1:15:95:87:69:eb:30:7b:
e4:d3:15:c4:4b:fa:53:40:1a:ea:78:07:a2:19:16:
c5:f9:eb:ec:e9:e3:41:bd:4a:ad:01:4e:a5:3c:f9:
21:84:9d:fa:03:75:47:d0:62:34:6c:33:7d:4e:b0:
41:de:92:75:ff:19:46:ea:92:3d:97:b9:a0:1d:6f:
3d:47:00:56:e2:ae:c2:79:fe:e1:56:fe:d6:05:66:
5d:83:78:00:ee:75:a2:d8:b8:32:0b:3d:26:53:08:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F4:30:68:30:F5:F9:88:21:B0:A1:AF:6D:CE:15:69:0B:33:DD:B0
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e0:7e:7b:dc:75:a8:4f:3d:31:4e:17:4f:bc:e0:41:f7:05:
f3:1b:b3:6e:92:63:bb:61:f1:69:96:39:9b:a5:24:5f:55:6b:
18:c9:d5:3e:39:10:49:aa:9b:95:12:03:cc:4b:f9:85:80:86:
dd:03:b6:a9:65:5b:53:5c:e0:54:88:38:5b:4d:f0:fb:9e:6c:
62:df:1d:6a:8d:3b:29:cf:a6:a4:b8:6c:44:1e:a5:87:29:11:
5e:ad:12:06:a9:93:09:48:18:1e:b5:14:8a:e0:7f:92:d5:6f:
1e:44:c3:e9:0d:0d:64:e8:f5:5f:f6:01:2b:29:34:7b:c5:87:
b1:9e:e2:1f:15:23:ad:74:92:b7:0f:e7:b1:34:85:d2:d4:85:
ba:49:b8:03:62:52:ad:b0:87:40:1d:88:0e:09:0e:a9:9d:74:
2c:3f:f0:f3:c2:85:36:44:7b:94:17:04:21:12:5e:33:d0:f7:
dc:ce:41:c7:81:1e:11:5e:66:c0:68:cb:48:8d:28:eb:bd:cc:
63:fa:0f:cf:0b:77:23:9b:93:a9:fe:69:78:d9:ae:e7:d4:f1:
6e:dc:45:41:8f:0a:66:67:7a:ea:a7:8a:9a:7f:33:eb:f6:cf:
8d:b3:dc:1e:96:e6:34:8b:c4:a2:a7:62:f6:74:67:29:9a:df:
66:91:9c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKCWpK3BuwgyaoA0vm7RLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjYwMzI1MTgwMDU4WhcNMjYwMzI2MTgwMDU4WjAzMTEwLwYDVQQD
EyhhMGY0MzA2ODMwZjVmOTg4MjFiMGExYWY2ZGNlMTU2OTBiMzNkZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gHeWF8p6l/mHT+WAY3I+RK/U3fQ
QctA3ziVMvbBiFkmQxvN+O6Pb7Sdv91gPxmfy4xLw6OZq8eAuqx51uEKBRIRe+4/
Hm/SDcYdLlZ28wb9TC/hcyWkPD00olqKeHk3c2iehmfXLNNJvO8aOpwo426ap5VD
pDhL27tiv0UjpsQW1HvLc41/oNdEmsMr56UHKh+s4XMkhjvQEetm0RWVh2nrMHvk
0xXES/pTQBrqeAeiGRbF+evs6eNBvUqtAU6lPPkhhJ36A3VH0GI0bDN9TrBB3pJ1
/xlG6pI9l7mgHW89RwBW4q7Cef7hVv7WBWZdg3gA7nWi2LgyCz0mUwjaqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD0MGgw9fmIIbChr23OFWkLM92wMB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeB+e9x1
qE89MU4XT7zgQfcF8xuzbpJju2HxaZY5m6UkX1VrGMnVPjkQSaqblRIDzEv5hYCG
3QO2qWVbU1zgVIg4W03w+55sYt8dao07Kc+mpLhsRB6lhykRXq0SBqmTCUgYHrUU
iuB/ktVvHkTD6Q0NZOj1X/YBKyk0e8WHsZ7iHxUjrXSStw/nsTSF0tSFukm4A2JS
rbCHQB2IDgkOqZ10LD/w88KFNkR7lBcEIRJeM9D33M5Bx4EeEV5mwGjLSI0o673M
Y/oPzwt3I5uTqf5peNmu59TxbtxFQY8KZmd66qeKmn8z6/bPjbPcHpbmNIvEoqdi
9nRnKZrfZpGcvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:24 2026 by rpki-client