Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: 0u3tSyHG3zEL5VMhsX+v/jPRgKdciSLH+SvZaYb8kPI=
Subject key identifier: 28:80:80:56:A0:4A:48:92:5C:BB:65:88:6F:E3:DB:BC:C7:8A:9A:E3
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019D390A583992C6674D32966EDBCC143EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 150A
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: 6gA1OlRN1ocGTkJB84vRgcbm7yE.roa (hash: m0QRct0nDamOcIZ5SWxkfJtavcfbw7Z34cfgKRNCHWc=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: dERfjjdqxVlL8OSK184XU9RBOcGge+1e4gysh31iHY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:58:39:92:c6:67:4d:32:96:6e:db:cc:14:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=28808056a04a48925cbb65886fe3dbbcc78a9ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:f9:97:de:90:f8:05:d5:3e:ef:68:53:98:
d1:03:5f:19:6a:75:16:e7:cc:01:e3:35:18:ca:19:
c1:55:db:4f:df:2b:13:3c:c0:1d:49:59:fd:57:a7:
53:83:90:ac:64:ba:20:d4:08:4c:be:fa:7b:5a:70:
a5:e7:18:ba:1e:54:99:c6:28:26:44:f8:fb:a6:5b:
2d:d1:dc:cf:a3:03:01:b4:4c:7c:0f:22:bb:fe:62:
71:89:b4:6a:78:da:4b:0c:e0:55:19:e8:18:a0:bc:
d7:25:94:89:72:05:e3:14:ed:8c:16:3a:31:5f:38:
6f:2c:ee:f6:0d:9c:3e:c0:9b:a6:ed:07:68:a8:22:
05:8e:cf:be:7a:1e:fe:7a:96:c6:82:0d:63:26:ab:
f5:d1:41:03:20:49:d1:e7:d4:a5:01:09:33:e4:99:
c6:e8:10:48:27:1a:97:b6:bc:07:ed:08:d5:ab:5f:
ac:fb:5f:18:b8:d9:6b:e5:1e:fa:2c:a3:96:0d:0a:
8f:b1:a9:2a:88:2b:19:0e:f0:c7:13:c9:b7:d1:3a:
7f:3f:bb:3e:14:2f:c3:fc:eb:8a:45:be:e0:f1:e8:
47:56:dd:f2:a4:92:dc:85:86:bf:e3:28:9b:39:42:
7c:63:08:72:9d:3e:ce:75:92:97:ed:31:86:82:1f:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:80:56:A0:4A:48:92:5C:BB:65:88:6F:E3:DB:BC:C7:8A:9A:E3
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:72:12:5f:da:ad:d7:2b:45:55:ba:f8:80:38:7d:39:d0:
98:3e:2d:38:97:57:26:0e:00:05:f6:fe:ea:0a:dd:3a:83:04:
41:b9:e9:33:ea:5b:66:aa:79:38:14:81:5f:ca:61:50:8d:82:
62:04:26:a3:86:0e:65:c8:bc:f8:2f:5b:d6:53:7d:f8:6b:ad:
bb:97:a5:bd:55:f7:f1:c3:62:94:8e:21:1f:a1:6c:b9:35:20:
96:b0:4e:ae:80:14:90:b1:4e:3a:0f:02:74:b8:e7:25:6b:30:
15:9d:7f:7b:ac:dc:9a:64:88:d7:b9:fc:f2:6f:72:d9:02:35:
90:dc:82:73:ef:29:96:2a:70:85:01:03:52:51:63:b1:0a:64:
10:de:4b:60:d5:76:e3:85:79:28:3a:81:18:8f:91:fd:3f:7a:
53:c3:06:c0:95:19:e9:82:23:c8:44:61:34:9f:9b:81:1f:8f:
6b:42:13:21:86:f7:7f:82:9e:66:a1:15:bf:b6:6e:9b:78:48:
f1:2e:57:86:fd:ba:8e:61:8b:6c:ac:50:fb:e7:08:79:3e:32:
08:31:31:e9:7b:75:c1:cf:78:2f:10:f2:92:fa:70:d2:a3:56:
aa:81:04:db:8d:b2:76:ec:9b:7f:aa:da:c4:a9:4a:c4:03:fc:
7a:a3:9d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Clg5ksZnTTKWbtvMFD7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGRkMTdhNzY4ZTNiNmZiZmE3YTcwMDlhNzAwN2ViZTY1
YjQ1YzgwHhcNMjYwMzI5MTAwMTEyWhcNMjYwMzMwMTAwMTEyWjAzMTEwLwYDVQQD
EygyODgwODA1NmEwNGE0ODkyNWNiYjY1ODg2ZmUzZGJiY2M3OGE5YWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHf5l96Q+AXVPu9oU5jRA18ZanUW
58wB4zUYyhnBVdtP3ysTPMAdSVn9V6dTg5CsZLog1AhMvvp7WnCl5xi6HlSZxigm
RPj7plst0dzPowMBtEx8DyK7/mJxibRqeNpLDOBVGegYoLzXJZSJcgXjFO2MFjox
XzhvLO72DZw+wJum7QdoqCIFjs++eh7+epbGgg1jJqv10UEDIEnR59SlAQkz5JnG
6BBIJxqXtrwH7QjVq1+s+18YuNlr5R76LKOWDQqPsakqiCsZDvDHE8m30Tp/P7s+
FC/D/OuKRb7g8ehHVt3ypJLchYa/4yibOUJ8YwhynT7OdZKX7TGGgh9fqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiAgFagSkiSXLtliG/j27zHiprjMB8GA1UdIwQY
MBaAFK2N0Xp2jjtvv6enAJpwB+vmW0XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUt
OWVhZGQzNTFmYzc5LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUtOWVhZGQzNTFmYzc5
LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4NyEl/a
rdcrRVW6+IA4fTnQmD4tOJdXJg4ABfb+6grdOoMEQbnpM+pbZqp5OBSBX8phUI2C
YgQmo4YOZci8+C9b1lN9+Gutu5elvVX38cNilI4hH6FsuTUglrBOroAUkLFOOg8C
dLjnJWswFZ1/e6zcmmSI17n88m9y2QI1kNyCc+8plipwhQEDUlFjsQpkEN5LYNV2
44V5KDqBGI+R/T96U8MGwJUZ6YIjyERhNJ+bgR+Pa0ITIYb3f4KeZqEVv7Zum3hI
8S5Xhv26jmGLbKxQ++cIeT4yCDEx6Xt1wc94LxDykvpw0qNWqoEE242yduybf6ra
xKlKxAP8eqOdMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:04 2026 by rpki-client