Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: /4KipCXgQGdmCc1H42e5MJ28o3ycf/x2sZNXNhvX3Ms=
Subject key identifier: B5:E3:6E:32:52:9B:F9:35:E5:1E:D6:5C:D4:50:1C:5C:72:B7:69:23
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019D27721EF4CA4BA7D466336E25A8AEF6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: MH4I9xav4LfVDq-8qLH2rQsIB04.roa (hash: 4P+chNkfen2A5zyoEceMZTNyTkw02ot82WeO0g5JC48=)
2: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: Qy6s0EKo1JIs92SquYAv8Mgcz9bH/9Et5mHPFFq8YsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1e:f4:ca:4b:a7:d4:66:33:6e:25:a8:ae:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=b5e36e32529bf935e51ed65cd4501c5c72b76923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:f1:19:03:bd:13:e5:42:11:e4:07:ed:b2:
8b:26:37:94:2a:ed:d8:3f:f4:0f:57:dd:03:ca:7a:
ae:dc:b3:76:b7:45:65:78:4b:01:a8:b4:ba:c3:02:
18:bf:91:3c:51:72:dc:3f:d3:7a:d2:f4:90:2c:14:
a9:a9:79:45:6b:f0:c5:3d:cf:1c:8c:d2:b8:56:c7:
52:ee:b3:10:bf:8f:c4:11:e7:9f:af:30:b9:19:05:
81:2f:22:c3:37:30:a9:c6:49:f2:e8:ff:d2:92:73:
14:11:ab:fb:f5:ca:03:8c:6a:0e:df:e5:6b:36:dc:
67:b6:b0:73:c5:7e:48:97:67:40:f5:a1:ac:5e:f5:
3d:fd:b6:3e:5e:d1:96:cc:46:12:13:4b:36:45:5e:
c1:38:44:3e:02:88:ce:3c:5a:41:82:23:6b:7c:9c:
8b:4d:57:96:bd:f3:c6:1f:9d:f5:1c:69:c5:26:cb:
00:2e:c8:4c:cb:84:b5:3c:45:20:e7:ec:0c:b6:e2:
b3:66:38:6c:9a:65:f6:aa:9a:17:02:67:44:ac:ba:
bf:20:c2:ff:c8:c9:74:f4:49:4c:92:78:2c:97:56:
9b:9e:36:2e:a1:0d:30:8a:1b:da:0b:f4:1d:9e:d9:
cb:c7:41:8a:6c:9a:e0:59:b9:c0:76:7f:cb:9a:d4:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:6E:32:52:9B:F9:35:E5:1E:D6:5C:D4:50:1C:5C:72:B7:69:23
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:c9:85:8b:0b:ee:e6:c4:71:c4:81:ec:70:5b:f8:4a:c2:
63:84:b8:c2:57:d2:2e:d6:6b:09:cc:70:9b:c9:d2:b7:8f:a5:
2d:b0:5e:0c:f2:73:2e:ac:c5:9c:56:4e:ad:50:39:8c:ee:6e:
7f:03:42:ad:16:ce:59:62:17:79:c6:0a:f2:e7:3d:a4:6c:88:
fc:0e:36:d5:cb:9b:5d:c6:70:35:89:1c:eb:0e:41:ef:f2:fb:
8c:54:08:39:fc:37:a9:9b:6a:d9:d7:c5:e7:47:35:0b:9c:50:
51:5c:42:3e:9f:68:81:02:ca:6f:6c:5a:ab:3d:0b:fc:a1:57:
54:78:02:b3:cb:8d:67:b7:08:43:99:e9:15:40:db:fc:e5:0f:
ab:d7:f9:fc:43:c8:31:b4:72:4a:53:7b:c1:4e:78:f4:37:6e:
98:9c:64:97:ed:77:2e:e3:b8:1a:79:ff:90:e3:be:3d:3d:0f:
03:c0:55:d4:a8:fd:ae:8f:d3:b8:1a:18:b9:26:16:c7:19:80:
db:8f:6d:8a:34:90:f4:ad:42:dc:67:34:1f:af:88:34:e9:c7:
2c:43:3a:9d:d8:68:d8:ae:90:74:01:cb:fa:26:85:c4:da:fb:
2a:cc:19:a2:05:bd:4f:7e:bb:34:41:b1:19:6f:bd:58:4c:0e:
d2:de:3a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nch70ykun1GYzbiWorvbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0
NDI2NmIwHhcNMjYwMzI2MDAwMTIzWhcNMjYwMzI3MDAwMTIzWjAzMTEwLwYDVQQD
EyhiNWUzNmUzMjUyOWJmOTM1ZTUxZWQ2NWNkNDUwMWM1YzcyYjc2OTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bxGQO9E+VCEeQH7bKLJjeUKu3Y
P/QPV90Dynqu3LN2t0VleEsBqLS6wwIYv5E8UXLcP9N60vSQLBSpqXlFa/DFPc8c
jNK4VsdS7rMQv4/EEeefrzC5GQWBLyLDNzCpxkny6P/SknMUEav79coDjGoO3+Vr
NtxntrBzxX5Il2dA9aGsXvU9/bY+XtGWzEYSE0s2RV7BOEQ+AojOPFpBgiNrfJyL
TVeWvfPGH531HGnFJssALshMy4S1PEUg5+wMtuKzZjhsmmX2qpoXAmdErLq/IML/
yMl09ElMkngsl1abnjYuoQ0wihvaC/QdntnLx0GKbJrgWbnAdn/LmtTcuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXjbjJSm/k15R7WXNRQHFxyt2kjMB8GA1UdIwQY
MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt
ZGNhMGZkNTA5ZmI2LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2
LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNTJhYsL
7ubEccSB7HBb+ErCY4S4wlfSLtZrCcxwm8nSt4+lLbBeDPJzLqzFnFZOrVA5jO5u
fwNCrRbOWWIXecYK8uc9pGyI/A421cubXcZwNYkc6w5B7/L7jFQIOfw3qZtq2dfF
50c1C5xQUVxCPp9ogQLKb2xaqz0L/KFXVHgCs8uNZ7cIQ5npFUDb/OUPq9f5/EPI
MbRySlN7wU549DdumJxkl+13LuO4Gnn/kOO+PT0PA8BV1Kj9ro/TuBoYuSYWxxmA
249tijSQ9K1C3Gc0H6+INOnHLEM6ndho2K6QdAHL+iaFxNr7KswZogW9T367NEGx
GW+9WEwO0t46TQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:10 2026 by rpki-client