Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: QCR5oMrEhzhIP/QIlrppdhpb+kOlZ3geFuodKnLHl/o=
Subject key identifier: 7B:07:A1:26:60:88:05:64:34:96:3C:D4:5D:9D:DE:BE:BA:01:54:AF
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019D2584147CC93CFFE2B37ABF32873D19D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0DAF
Signing time: Wed 25 Mar 2026 15:01:46 +0000
Manifest this update: Wed 25 Mar 2026 15:01:46 +0000
Manifest next update: Thu 26 Mar 2026 15:01:46 +0000
Files and hashes: 1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: 7ooPFvg87wtDpxDkBtuvuVUu+/aOVeMjtzWyGU5rqro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:14:7c:c9:3c:ff:e2:b3:7a:bf:32:87:3d:19:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Mar 25 15:01:46 2026 GMT
Not After : Mar 26 15:01:46 2026 GMT
Subject: CN=7b07a1266088056434963cd45d9ddebeba0154af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:68:0c:91:8b:5b:6f:0c:62:c1:c4:b5:f2:
32:df:03:73:9a:34:d0:a3:c3:d6:bd:96:14:b3:83:
f0:a3:21:7b:e6:df:7e:da:e4:93:9d:ef:e2:41:d2:
59:28:8e:49:63:1c:53:07:01:10:d1:f7:1a:47:00:
6e:5a:05:bc:0a:5f:9f:1f:f3:4d:a9:2d:63:e4:2f:
a9:3d:03:11:1b:f9:9e:13:63:1c:31:6d:1f:9c:6e:
c0:f0:6a:d8:1d:e5:59:8f:20:b2:28:3d:cb:9b:8a:
7c:b1:a6:00:05:92:dc:03:06:56:e1:7d:cd:21:f5:
2c:18:72:02:cc:96:e9:ba:29:a6:38:43:7a:30:25:
d0:c7:b0:21:04:34:ea:99:74:29:c9:f6:3c:fc:a8:
f2:8e:34:22:ba:ab:4e:c1:1c:d9:26:4a:59:fc:7a:
ae:47:62:07:e2:69:36:de:ae:a5:b8:4e:5d:cd:af:
0f:f8:35:98:ac:34:68:1f:7b:7c:6b:76:e9:6a:70:
26:57:bd:a5:74:98:ae:e4:dd:35:06:0a:60:c4:99:
1d:33:d8:7e:a8:89:53:e9:d7:30:b6:df:2b:a1:84:
f6:68:bd:5e:cf:de:f3:d7:fb:a1:ba:a8:b4:85:c8:
00:35:2b:10:ef:64:04:02:55:bc:4b:59:58:ac:0b:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:07:A1:26:60:88:05:64:34:96:3C:D4:5D:9D:DE:BE:BA:01:54:AF
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:95:f7:46:0a:45:2f:39:b9:3c:e8:15:b0:94:52:e9:7b:
29:15:ca:5a:2e:b9:40:43:d9:6d:a2:f4:34:ee:b5:e2:99:8f:
36:70:b5:e4:ad:74:89:c6:62:b5:d4:13:7f:95:96:e7:b2:84:
f1:34:71:65:b5:09:b0:ac:bb:c3:cd:de:27:03:31:55:82:dc:
6b:ae:f1:50:20:f5:57:d4:9e:86:7a:84:bf:4e:4d:51:44:62:
1d:29:d3:7a:f6:85:a8:07:de:d8:87:79:14:26:cb:ef:87:4a:
ef:3a:3e:87:66:48:cc:86:54:26:9d:6d:60:57:db:35:3d:8f:
cb:39:14:63:dd:74:a9:1a:aa:40:b4:4f:72:5d:de:78:f1:29:
4a:3b:20:f8:03:08:8a:aa:26:9e:1c:8b:a8:17:58:cc:c7:8e:
09:6c:33:25:45:f6:17:7c:5e:ba:4e:98:60:d2:f5:3a:54:06:
05:78:9d:62:91:c2:33:1e:1a:07:4f:1c:27:a6:b9:73:9e:e6:
74:71:44:b2:7d:a1:d7:07:d4:17:fa:8e:0c:a4:e6:b9:2f:94:
17:1f:8f:c8:4f:a9:8a:7c:12:f1:f5:c5:24:d5:e8:f2:44:ed:
b0:83:e2:98:cd:01:98:49:54:9c:7e:5f:34:9c:6b:96:f5:60:
5d:d0:33:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhBR8yTz/4rN6vzKHPRnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3
NDYzOTcwHhcNMjYwMzI1MTUwMTQ2WhcNMjYwMzI2MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg3YjA3YTEyNjYwODgwNTY0MzQ5NjNjZDQ1ZDlkZGViZWJhMDE1NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulpoDJGLW28MYsHEtfIy3wNzmjTQ
o8PWvZYUs4PwoyF75t9+2uSTne/iQdJZKI5JYxxTBwEQ0fcaRwBuWgW8Cl+fH/NN
qS1j5C+pPQMRG/meE2McMW0fnG7A8GrYHeVZjyCyKD3Lm4p8saYABZLcAwZW4X3N
IfUsGHICzJbpuimmOEN6MCXQx7AhBDTqmXQpyfY8/KjyjjQiuqtOwRzZJkpZ/Hqu
R2IH4mk23q6luE5dza8P+DWYrDRoH3t8a3bpanAmV72ldJiu5N01BgpgxJkdM9h+
qIlT6dcwtt8roYT2aL1ez97z1/uhuqi0hcgANSsQ72QEAlW8S1lYrAuIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsHoSZgiAVkNJY81F2d3r66AVSvMB8GA1UdIwQY
MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt
ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh
LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScWV90YK
RS85uTzoFbCUUul7KRXKWi65QEPZbaL0NO614pmPNnC15K10icZitdQTf5WW57KE
8TRxZbUJsKy7w83eJwMxVYLca67xUCD1V9SehnqEv05NUURiHSnTevaFqAfe2Id5
FCbL74dK7zo+h2ZIzIZUJp1tYFfbNT2PyzkUY910qRqqQLRPcl3eePEpSjsg+AMI
iqomnhyLqBdYzMeOCWwzJUX2F3xeuk6YYNL1OlQGBXidYpHCMx4aB08cJ6a5c57m
dHFEsn2h1wfUF/qODKTmuS+UFx+PyE+pinwS8fXFJNXo8kTtsIPimM0BmElUnH5f
NJxrlvVgXdAzPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:02 2026 by rpki-client