Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: i6075w1yM4JQvHUA+bW9HWp8gytj0q65nrXtXk5wwO0=
Subject key identifier: 19:F3:6F:1B:58:9B:C3:78:37:56:57:61:7B:74:16:6A:C4:1A:37:76
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019D2816BE69374E3C7F68D9D3BEC34A57F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0D62
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: gISB5XKycKPv5hrE5ng7DwaTFZs.roa (hash: sJhtL2wlmJpjXzVIWne8fY+2r1IBnfbZ2BjwXpNs+R8=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: UwNQSFD6SY4QB35lrJpBIuboQlylR7Bvdlr2AWrPYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:be:69:37:4e:3c:7f:68:d9:d3:be:c3:4a:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=19f36f1b589bc378375657617b74166ac41a3776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:f7:57:35:01:44:f3:68:82:e2:d1:d1:89:
8c:ed:d9:18:6e:b8:05:d2:31:bb:25:5f:fb:fb:14:
91:b7:7d:13:67:f1:78:f3:0e:9d:78:69:7d:e1:53:
24:f0:b6:55:f2:e7:6e:1e:5f:9e:73:ca:90:4b:e0:
3a:ee:9a:2a:b3:fc:ba:72:6c:da:e6:e4:f7:80:cb:
c2:43:9f:ab:a2:86:b1:09:b7:46:9f:4f:a5:cd:99:
b4:c3:bc:77:83:f6:2e:76:91:17:4d:ed:3a:a4:e4:
9b:95:02:8d:2e:ad:68:eb:b9:e7:10:fe:17:a2:82:
70:69:dd:a2:63:37:9f:84:e9:f1:fa:6a:cf:26:ac:
ff:b3:7d:77:62:9f:49:ac:ca:d1:ec:72:b9:80:f5:
34:ee:9c:5a:e8:31:72:30:39:b0:ee:ce:ed:d9:cf:
a5:41:b0:b2:c9:da:00:dc:ef:5d:4d:a6:f5:b6:41:
df:b0:a6:1f:c2:62:b7:37:fc:bb:ff:94:e0:dc:d4:
78:01:a8:98:dc:94:fe:02:a1:26:76:6a:6d:74:f3:
87:5a:b6:41:09:3c:85:f8:0e:bc:03:8f:5f:1a:1a:
39:c3:9a:6a:94:05:94:d8:3f:ee:89:3e:a3:7b:db:
06:f5:df:9e:30:b5:91:7e:06:11:6a:1d:84:cd:0f:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:6F:1B:58:9B:C3:78:37:56:57:61:7B:74:16:6A:C4:1A:37:76
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:02:bf:61:9d:af:fd:e0:ae:27:48:b1:c9:7b:e8:06:1f:
31:80:ee:88:36:da:65:61:ad:6e:07:c5:4d:ce:57:dc:10:d2:
58:80:93:06:c1:92:00:e8:86:e6:00:10:56:42:1c:6a:24:c5:
c3:99:df:e0:8e:af:68:69:22:1e:43:e0:df:6d:1d:02:54:dd:
3a:76:53:11:71:58:96:0e:f0:15:fb:08:ec:15:0b:58:a1:86:
a8:e0:5a:37:8a:86:17:66:25:76:87:92:06:d3:40:39:d4:5e:
a5:f2:c2:c6:cf:94:3a:2f:32:8a:e2:ff:8f:59:4e:f8:a5:25:
33:6f:e0:20:79:ad:8a:d4:14:ae:9e:72:49:b4:18:92:b4:e0:
56:17:91:94:25:2a:de:14:f6:4e:a2:83:74:a2:ae:e4:0a:d7:
9c:15:5e:f1:34:ad:9e:6d:b4:90:7b:10:74:e8:2b:b5:c0:c4:
b7:8a:dc:77:14:00:ff:10:13:32:45:dc:31:d2:e7:d3:22:6c:
9a:42:d9:36:f9:d8:cc:35:25:a9:2f:8c:52:64:1f:5d:66:f5:
93:b5:4a:6a:46:d8:7c:4d:60:f6:17:ec:c9:36:eb:97:5e:03:
ac:2c:7d:ad:4a:aa:f2:f5:38:dc:5b:57:eb:cd:42:5f:c0:fc:
90:7b:d5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFr5pN048f2jZ077DSlf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0
NzAyZDEwHhcNMjYwMzI2MDMwMTEyWhcNMjYwMzI3MDMwMTEyWjAzMTEwLwYDVQQD
EygxOWYzNmYxYjU4OWJjMzc4Mzc1NjU3NjE3Yjc0MTY2YWM0MWEzNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMn3VzUBRPNoguLR0YmM7dkYbrgF
0jG7JV/7+xSRt30TZ/F48w6deGl94VMk8LZV8uduHl+ec8qQS+A67poqs/y6cmza
5uT3gMvCQ5+rooaxCbdGn0+lzZm0w7x3g/YudpEXTe06pOSblQKNLq1o67nnEP4X
ooJwad2iYzefhOnx+mrPJqz/s313Yp9JrMrR7HK5gPU07pxa6DFyMDmw7s7t2c+l
QbCyydoA3O9dTab1tkHfsKYfwmK3N/y7/5Tg3NR4AaiY3JT+AqEmdmptdPOHWrZB
CTyF+A68A49fGho5w5pqlAWU2D/uiT6je9sG9d+eMLWRfgYRah2EzQ89qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnzbxtYm8N4N1ZXYXt0FmrEGjd2MB8GA1UdIwQY
MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt
MDlkNDIzMWMxYzk5LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5
LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfgCv2Gd
r/3gridIscl76AYfMYDuiDbaZWGtbgfFTc5X3BDSWICTBsGSAOiG5gAQVkIcaiTF
w5nf4I6vaGkiHkPg320dAlTdOnZTEXFYlg7wFfsI7BULWKGGqOBaN4qGF2YldoeS
BtNAOdRepfLCxs+UOi8yiuL/j1lO+KUlM2/gIHmtitQUrp5ySbQYkrTgVheRlCUq
3hT2TqKDdKKu5ArXnBVe8TStnm20kHsQdOgrtcDEt4rcdxQA/xATMkXcMdLn0yJs
mkLZNvnYzDUlqS+MUmQfXWb1k7VKakbYfE1g9hfsyTbrl14DrCx9rUqq8vU43FtX
681CX8D8kHvVog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:55 2026 by rpki-client