Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: 02zBIrxuK3ve5OfOsWZzil3FCHL44DZqFykSYsCXZgE=
Subject key identifier: 1D:73:36:13:4B:ED:6C:F5:AC:37:65:EC:89:5C:8A:90:04:F3:99:0A
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019D39777928AFD7165966C738D564CD5ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 0859
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: XOEA0pNQcPHsV7WH3cR5SmhCttY9SAjU6Lp+EZQfJHk=)
2: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (hash: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:79:28:af:d7:16:59:66:c7:38:d5:64:cd:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=1d7336134bed6cf5ac3765ec895c8a9004f3990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:bc:f7:3f:8c:f1:4b:43:6d:84:72:83:23:
eb:36:f1:5b:1b:15:db:a5:3e:0c:77:e1:f9:b7:54:
7f:6c:5d:35:1c:19:0e:1c:30:50:0f:e7:7a:ee:5a:
59:7f:86:99:18:cd:e5:4d:67:c1:56:26:09:14:84:
1d:df:4d:f7:c3:5a:9a:9b:0c:2c:e4:f3:c6:fd:cf:
2b:5e:b2:f2:7e:1a:30:aa:e5:54:e1:26:28:89:22:
e2:a7:ba:02:e8:4a:0d:18:00:5f:45:d4:a0:43:7d:
e3:c5:de:66:22:54:7a:c1:67:6a:8f:ea:2d:66:3b:
fe:c9:05:23:8b:ae:83:f1:f7:19:bf:d7:fe:2e:d7:
bf:ee:f3:bc:02:ae:d6:c9:a2:ad:65:d2:f1:07:c3:
ea:55:87:f7:37:84:b0:10:22:93:e7:f3:39:e8:1f:
3b:75:c6:9a:e7:89:6b:fc:5b:a3:51:43:fc:8c:6b:
3e:2b:e9:11:c4:fe:ac:49:b3:56:37:4d:f9:8c:d3:
ad:d2:04:b4:9d:0d:a9:d1:71:32:55:a1:a4:c3:f1:
98:fd:73:eb:b3:b9:20:3d:84:bd:b1:6c:5f:cb:2d:
be:fa:cf:2a:92:f9:8d:e0:55:24:f7:6c:cf:df:1d:
8b:c9:40:2e:14:c9:a9:5d:1c:c5:54:55:04:03:01:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:36:13:4B:ED:6C:F5:AC:37:65:EC:89:5C:8A:90:04:F3:99:0A
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f5:76:40:ed:6e:69:17:8f:7c:25:67:16:86:83:d9:dc:f6:
9c:7d:5a:27:5d:67:e9:b8:d0:ed:e0:52:fb:7b:7f:5c:98:31:
e4:41:eb:1d:b5:46:c6:e1:d3:5b:15:47:d0:11:30:28:51:b5:
44:ce:93:52:46:f8:03:7a:c6:a9:b7:3b:a5:66:c8:06:69:e3:
20:ad:60:48:42:dd:8a:1c:ba:ad:6c:b2:b7:9c:54:66:93:00:
a1:6a:62:fa:2d:9b:36:ed:e3:3b:43:d7:86:67:fb:b3:6c:1e:
82:31:9b:c6:8c:de:c4:58:54:69:f4:70:78:54:32:ec:9f:07:
c2:75:f0:90:ba:a6:9f:5f:cf:23:c0:6f:d5:7d:a0:6f:34:d5:
b1:22:b8:31:e9:f8:8d:41:01:dd:10:e3:39:1b:02:f3:ef:ff:
b1:4d:7b:cd:b1:1b:b5:92:72:5c:12:a0:e4:b3:17:f0:b3:62:
23:3e:67:a6:a3:1f:3a:b5:20:7c:1a:27:9e:72:e1:93:18:da:
ae:df:3b:fd:f6:1e:19:d8:c0:49:76:a9:bf:78:5e:c0:00:9d:
cf:03:a1:01:bf:bc:71:0f:83:ad:38:8e:35:dc:fb:4d:65:de:
cc:b6:3e:d4:7f:f0:59:6d:74:95:24:a1:dd:c9:92:3a:8e:05:
4d:fd:66:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d3kor9cWWWbHONVkzV7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll
NmFjMzIwHhcNMjYwMzI5MTIwMDI0WhcNMjYwMzMwMTIwMDI0WjAzMTEwLwYDVQQD
EygxZDczMzYxMzRiZWQ2Y2Y1YWMzNzY1ZWM4OTVjOGE5MDA0ZjM5OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5W89z+M8UtDbYRygyPrNvFbGxXb
pT4Md+H5t1R/bF01HBkOHDBQD+d67lpZf4aZGM3lTWfBViYJFIQd3033w1qamwws
5PPG/c8rXrLyfhowquVU4SYoiSLip7oC6EoNGABfRdSgQ33jxd5mIlR6wWdqj+ot
Zjv+yQUji66D8fcZv9f+Lte/7vO8Aq7WyaKtZdLxB8PqVYf3N4SwECKT5/M56B87
dcaa54lr/FujUUP8jGs+K+kRxP6sSbNWN035jNOt0gS0nQ2p0XEyVaGkw/GY/XPr
s7kgPYS9sWxfyy2++s8qkvmN4FUk92zP3x2LyUAuFMmpXRzFVFUEAwGVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1zNhNL7Wz1rDdl7IlcipAE85kKMB8GA1UdIwQY
MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt
ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5
LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvV2QO1u
aRePfCVnFoaD2dz2nH1aJ11n6bjQ7eBS+3t/XJgx5EHrHbVGxuHTWxVH0BEwKFG1
RM6TUkb4A3rGqbc7pWbIBmnjIK1gSELdihy6rWyyt5xUZpMAoWpi+i2bNu3jO0PX
hmf7s2wegjGbxozexFhUafRweFQy7J8HwnXwkLqmn1/PI8Bv1X2gbzTVsSK4Men4
jUEB3RDjORsC8+//sU17zbEbtZJyXBKg5LMX8LNiIz5npqMfOrUgfBonnnLhkxja
rt87/fYeGdjASXapv3hewACdzwOhAb+8cQ+DrTiONdz7TWXezLY+1H/wWW10lSSh
3cmSOo4FTf1mLA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:10 2026 by rpki-client