Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: fje73s7EBXsoGwh9fVorfgWn6b9USF0B+/x25nuN5l4=
Subject key identifier: 6D:2D:4D:FF:7B:50:E7:57:30:76:42:2E:6B:04:52:54:23:63:70:F0
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019D2961871A7205F2AB3F8C0B6262208A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0A97
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: HhXnag0EViqmtc5Rt85eUP+RzVPNnNy31CdPxA5cCko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:87:1a:72:05:f2:ab:3f:8c:0b:62:62:20:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=6d2d4dff7b50e7573076422e6b045254236370f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:5b:47:7a:77:93:9a:32:02:4b:f9:c1:38:
ec:ea:23:9a:b8:18:48:2e:f3:70:8e:6d:5e:83:59:
55:e1:6a:3c:1c:4d:b3:f1:6b:ee:d8:c5:b7:f3:27:
a8:da:39:52:54:55:c4:bb:fb:22:a8:31:91:90:7f:
b1:61:ef:88:ce:96:f9:53:7f:9e:70:17:97:43:53:
03:35:20:cd:15:42:1b:d1:e8:a0:d4:e5:47:ba:2e:
3d:95:9a:51:30:c2:42:e7:6f:33:84:0c:3c:5e:45:
f0:ce:39:42:1e:ad:0e:78:70:05:c4:3f:2c:ae:8b:
a9:35:60:f6:af:e2:82:4d:b2:e2:41:08:dd:6b:86:
ca:cb:da:62:68:a9:f2:94:cd:56:65:8c:87:7a:b7:
26:31:e9:a5:9d:3d:94:0b:91:67:54:24:27:50:e9:
04:35:68:99:a8:0a:84:33:34:25:00:0a:87:5d:d6:
31:5f:6b:24:a4:69:3e:2b:9a:39:3f:63:e6:f5:c0:
20:f9:81:6f:17:40:12:cb:70:42:d2:d9:08:b3:ce:
7a:9a:84:0b:ba:b5:05:e4:16:1f:df:50:88:0c:1a:
8f:06:c8:e4:0d:b6:a6:10:23:f7:00:5b:09:20:c1:
6a:52:bd:75:4f:52:41:d0:32:38:58:31:ae:ee:d0:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2D:4D:FF:7B:50:E7:57:30:76:42:2E:6B:04:52:54:23:63:70:F0
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:69:18:ec:f1:22:6c:d6:68:55:ce:d5:90:ed:60:b6:a9:
9d:9e:8e:c1:85:a5:99:32:ba:ec:83:fd:37:29:b0:e1:81:79:
43:91:74:fc:e5:18:2c:eb:03:7e:26:eb:c8:62:ce:56:d2:7f:
41:41:fe:1b:89:e4:eb:0e:91:8b:bb:cf:0e:cc:f9:5f:02:9e:
12:fc:d7:de:52:38:89:b2:cd:9d:52:91:60:f3:3b:5c:f6:1c:
34:2c:5b:f3:05:47:e6:49:e4:45:60:83:85:10:f1:49:97:69:
be:4c:6a:fd:af:8b:e6:60:3c:e3:e7:8f:bb:31:3f:22:72:74:
58:07:8a:6b:30:4a:7f:f2:bf:b1:3a:c1:c8:69:6a:26:08:fe:
54:94:35:d3:cd:7e:57:67:99:90:f9:c8:12:cf:38:8e:20:a3:
50:70:27:9e:90:43:c7:24:89:4b:e8:ed:08:32:a1:6e:5d:f9:
23:0c:75:30:5f:cc:82:d1:9e:09:b5:e6:12:4e:36:d4:57:cb:
7c:dd:b0:22:a2:de:e1:ab:92:40:04:0c:35:de:e6:5e:26:67:
48:22:a5:26:d9:84:6e:59:5e:63:c9:61:d1:8e:55:6b:ee:57:
7e:36:b3:c6:ae:17:bc:9d:cf:fd:e5:a2:75:81:a8:b0:d4:c3:
46:b2:74:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYYcacgXyqz+MC2JiIIoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh
MjBiMjMwHhcNMjYwMzI2MDkwMjMwWhcNMjYwMzI3MDkwMjMwWjAzMTEwLwYDVQQD
Eyg2ZDJkNGRmZjdiNTBlNzU3MzA3NjQyMmU2YjA0NTI1NDIzNjM3MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvixbR3p3k5oyAkv5wTjs6iOauBhI
LvNwjm1eg1lV4Wo8HE2z8Wvu2MW38yeo2jlSVFXEu/siqDGRkH+xYe+Izpb5U3+e
cBeXQ1MDNSDNFUIb0eig1OVHui49lZpRMMJC528zhAw8XkXwzjlCHq0OeHAFxD8s
roupNWD2r+KCTbLiQQjda4bKy9piaKnylM1WZYyHercmMemlnT2UC5FnVCQnUOkE
NWiZqAqEMzQlAAqHXdYxX2skpGk+K5o5P2Pm9cAg+YFvF0ASy3BC0tkIs856moQL
urUF5BYf31CIDBqPBsjkDbamECP3AFsJIMFqUr11T1JB0DI4WDGu7tAijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0tTf97UOdXMHZCLmsEUlQjY3DwMB8GA1UdIwQY
MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt
NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi
LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ9pGOzx
ImzWaFXO1ZDtYLapnZ6OwYWlmTK67IP9Nymw4YF5Q5F0/OUYLOsDfibryGLOVtJ/
QUH+G4nk6w6Ri7vPDsz5XwKeEvzX3lI4ibLNnVKRYPM7XPYcNCxb8wVH5knkRWCD
hRDxSZdpvkxq/a+L5mA84+ePuzE/InJ0WAeKazBKf/K/sTrByGlqJgj+VJQ1081+
V2eZkPnIEs84jiCjUHAnnpBDxySJS+jtCDKhbl35Iwx1MF/MgtGeCbXmEk421FfL
fN2wIqLe4auSQAQMNd7mXiZnSCKlJtmEblleY8lh0Y5Va+5Xfjazxq4XvJ3P/eWi
dYGosNTDRrJ0kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:13 2026 by rpki-client