Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: q+Lr/PFrqhr8Jonq2GjbweSSU6UBRxugs1rH1THxwCI=
Subject key identifier: B9:85:A0:30:41:BE:31:BE:98:5C:FA:78:E0:DC:A5:E3:32:32:7C:D1
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 019D2816FB4DEC3B5A0A79F2BFFDED7DB595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 01DC
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: v6SSTvfx1f4iRYJbrrXe2p3I/P2wEmKqxORSUz+YUzg=)
2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fb:4d:ec:3b:5a:0a:79:f2:bf:fd:ed:7d:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=b985a03041be31be985cfa78e0dca5e332327cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:c2:76:f3:fd:9d:a2:91:32:2e:b7:e4:f1:
69:9f:2f:dc:99:b2:5e:bf:1a:98:a6:5a:72:b9:8e:
78:49:8d:48:a9:3e:db:eb:29:e0:26:c8:ff:97:d6:
94:0f:0e:52:66:35:7d:e3:61:8e:b6:50:94:52:de:
85:f2:a2:38:c2:0b:d7:b0:55:d9:b3:0d:ab:58:9b:
e9:c7:de:cb:90:77:60:8c:0b:83:13:96:8b:79:fa:
83:cf:9b:38:74:42:0c:82:67:0f:c1:f9:e8:12:cb:
92:06:79:34:92:39:98:a1:78:90:5b:48:b1:bc:a1:
51:e8:6c:5d:f4:30:4c:7a:ee:4c:58:06:2e:8f:48:
d4:96:68:59:ce:ad:c7:3b:7d:72:28:e3:ee:96:c1:
0f:3b:f7:dd:ce:ce:f1:f4:21:41:bd:80:67:28:8b:
1b:12:f7:2a:25:aa:04:f7:23:a7:ed:81:cb:cb:cd:
45:17:3f:f0:df:8d:b8:84:a6:dd:7b:e3:3f:f8:cb:
60:64:dc:f7:44:79:e7:27:7e:43:d1:04:fc:13:63:
c5:4e:9d:17:aa:d6:e5:ea:51:6e:42:c3:79:7a:ad:
1d:ef:b7:44:73:98:05:d4:15:f1:43:d8:84:94:0a:
49:87:fc:ae:e1:7a:86:b4:d2:9f:22:d0:0d:38:34:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:A0:30:41:BE:31:BE:98:5C:FA:78:E0:DC:A5:E3:32:32:7C:D1
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:54:a0:30:7f:86:b3:48:13:44:0f:7e:6c:b5:b7:80:a4:c5:
ca:34:63:ca:36:ad:ce:a7:3d:62:d5:12:70:93:bf:ab:20:12:
12:fb:91:10:d8:a9:bd:61:db:74:51:2b:54:aa:c2:05:d9:a8:
68:33:4d:2f:8a:22:41:ab:7c:44:19:0e:fb:71:a5:18:e9:a4:
f2:b3:6a:94:1b:1e:10:10:47:91:12:4b:3e:a0:89:28:e2:50:
7c:1d:c1:72:c5:79:9e:67:3c:65:9b:2a:7c:a2:87:af:5a:37:
e9:f5:82:f0:5b:b8:18:5d:b7:ae:d2:f6:3a:09:72:11:af:6f:
f7:ce:18:cd:6d:99:b8:52:97:d0:18:48:b0:f4:8d:7e:50:fe:
f9:4e:cf:39:9a:63:26:bd:ca:97:cb:0c:88:21:85:a3:01:e5:
e7:76:ef:34:b8:a3:4a:21:64:b4:f4:16:ee:91:47:d4:c6:04:
72:d1:dc:75:fd:c2:31:d8:8e:49:59:c7:a7:6f:af:4b:1d:8c:
7f:40:7f:ff:31:60:53:7b:99:97:c7:07:c3:06:e6:d5:89:cc:
3f:b2:17:22:46:53:50:ff:6c:3a:23:60:11:6c:94:01:83:35:
3f:d4:43:cd:59:db:a2:b7:29:d1:4c:7c:0d:aa:75:7c:e9:89:
47:7a:0d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvtN7DtaCnnyv/3tfbWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh
NGYxZjcwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
EyhiOTg1YTAzMDQxYmUzMWJlOTg1Y2ZhNzhlMGRjYTVlMzMyMzI3Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60HCdvP9naKRMi635PFpny/cmbJe
vxqYplpyuY54SY1IqT7b6yngJsj/l9aUDw5SZjV942GOtlCUUt6F8qI4wgvXsFXZ
sw2rWJvpx97LkHdgjAuDE5aLefqDz5s4dEIMgmcPwfnoEsuSBnk0kjmYoXiQW0ix
vKFR6Gxd9DBMeu5MWAYuj0jUlmhZzq3HO31yKOPulsEPO/fdzs7x9CFBvYBnKIsb
EvcqJaoE9yOn7YHLy81FFz/w3424hKbde+M/+MtgZNz3RHnnJ35D0QT8E2PFTp0X
qtbl6lFuQsN5eq0d77dEc5gF1BXxQ9iElApJh/yu4XqGtNKfItANODR+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmFoDBBvjG+mFz6eODcpeMyMnzRMB8GA1UdIwQY
MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt
ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl
LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1SgMH+G
s0gTRA9+bLW3gKTFyjRjyjatzqc9YtUScJO/qyASEvuRENipvWHbdFErVKrCBdmo
aDNNL4oiQat8RBkO+3GlGOmk8rNqlBseEBBHkRJLPqCJKOJQfB3BcsV5nmc8ZZsq
fKKHr1o36fWC8Fu4GF23rtL2OglyEa9v984YzW2ZuFKX0BhIsPSNflD++U7POZpj
Jr3Kl8sMiCGFowHl53bvNLijSiFktPQW7pFH1MYEctHcdf3CMdiOSVnHp2+vSx2M
f0B//zFgU3uZl8cHwwbm1YnMP7IXIkZTUP9sOiNgEWyUAYM1P9RDzVnborcp0Ux8
Dap1fOmJR3oNow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:11 2026 by rpki-client