Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
File: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft (raw, json)
Hash identifier: A8r5xB8zPpB9nzJTCt1ONE+nVQ7G3AVpdmfLHWRJ+sk=
Subject key identifier: 33:11:39:D2:3D:0B:0D:81:96:E2:2A:A2:75:4A:5D:65:40:7E:05:BF
Authority key identifier: 63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
Certificate issuer: /CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655
Certificate serial: 019D3940E08ED753DB0BD84A7C21A3DAA7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
Manifest number: 0115
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl (hash: K0n/duhr46TqHuZNt9OypQTtEYWYCXhUEQg6RRCHpVg=)
2: vLHvO7nk703n1iEe79-rWj-ouAg.roa (hash: z05JBWptG6UDe/d2SgY5u2FZkYfNtJGPDBRKDKb40nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e0:8e:d7:53:db:0b:d8:4a:7c:21:a3:da:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=331139d23d0b0d8196e22aa2754a5d65407e05bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:90:9c:09:16:b5:ac:d0:79:74:62:d7:d7:
04:42:ec:1c:95:ab:47:00:c8:db:39:a7:26:5e:10:
37:01:b7:08:2b:d9:a0:70:c9:da:0b:6e:59:ec:af:
82:1f:4a:94:a6:d7:c9:d0:a5:28:b6:63:21:aa:79:
a6:bf:fe:46:72:72:a1:89:6d:e9:61:65:c1:a2:e3:
72:5d:3f:a5:46:c0:58:c3:67:d9:41:05:d9:00:dc:
12:10:db:e1:0e:ad:70:21:e2:f5:1e:8b:46:2d:69:
d6:5f:09:f6:8c:d0:2e:2d:48:9c:cd:32:0e:3a:97:
92:e5:d3:82:fe:db:d8:e8:39:1d:ef:f7:51:31:fe:
5d:b0:6e:15:e6:55:de:26:e7:80:33:d8:c4:c2:5d:
2f:58:d3:f6:de:9a:eb:58:03:85:f2:36:91:cc:f7:
40:8a:0c:45:1b:b4:fc:cf:88:82:0d:a0:47:54:10:
46:af:9a:94:d4:65:34:45:25:8e:3f:8e:85:25:90:
1a:43:61:42:b2:c8:ab:02:b6:33:f7:b9:39:5f:04:
48:fd:c9:9a:73:ba:99:e9:01:c4:da:7f:b1:8a:b2:
26:8c:cb:58:6e:a4:c6:e9:6e:24:d1:30:98:bb:47:
2f:a4:39:f7:00:95:48:21:aa:65:35:0d:7a:7a:2d:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:39:D2:3D:0B:0D:81:96:E2:2A:A2:75:4A:5D:65:40:7E:05:BF
X509v3 Authority Key Identifier:
keyid:63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:94:81:ea:51:f8:7b:51:c9:fb:7a:a6:d3:28:c9:d5:31:35:
c8:69:a8:a9:d6:ad:d8:1a:c4:d0:76:78:4e:5b:c1:fa:6d:a1:
c7:c2:0e:8a:3f:e7:7c:e4:00:4a:5e:bd:9b:49:1a:a9:ce:4d:
d9:01:26:1a:66:4d:cf:7a:34:27:d2:0c:de:03:85:ea:ff:4e:
73:e2:79:e3:60:bf:73:40:3e:ea:4c:bd:c2:d9:63:20:eb:74:
9e:90:68:4f:34:84:b0:30:2e:c2:cc:d7:60:f9:94:4d:6d:78:
9d:a7:f4:13:72:3a:92:a2:68:42:5d:79:98:12:ea:40:ed:ab:
09:31:d2:c5:f2:c5:e8:24:94:97:18:8b:4d:33:dc:1c:ed:7b:
67:c5:ff:6c:2a:94:78:6f:dc:ff:ef:ee:27:b6:89:46:a8:78:
a6:12:48:c1:68:5b:1f:6e:bc:f7:95:f5:c5:c6:8e:48:18:c6:
99:a4:a3:1e:96:38:68:6a:95:04:d6:b8:2a:a4:8c:df:b8:49:
1a:60:16:0c:56:c5:96:5e:59:25:15:1a:0a:65:f1:e8:a7:df:
b9:b5:04:67:ae:2d:40:ca:15:09:36:21:d3:08:42:c5:82:e6:
16:d5:07:e3:b7:a3:bf:f0:91:73:e6:36:28:74:c6:b8:84:4d:
ea:a2:a5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOCO11PbC9hKfCGj2qfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM1Yzg5ZWQ0YWU5YTNkNjQxYjExY2JlNmFkMGZjYmU5
MzI2NTUwHhcNMjYwMzI5MTEwMDQ2WhcNMjYwMzMwMTEwMDQ2WjAzMTEwLwYDVQQD
EygzMzExMzlkMjNkMGIwZDgxOTZlMjJhYTI3NTRhNWQ2NTQwN2UwNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq+QnAkWtazQeXRi19cEQuwclatH
AMjbOacmXhA3AbcIK9mgcMnaC25Z7K+CH0qUptfJ0KUotmMhqnmmv/5GcnKhiW3p
YWXBouNyXT+lRsBYw2fZQQXZANwSENvhDq1wIeL1HotGLWnWXwn2jNAuLUiczTIO
OpeS5dOC/tvY6Dkd7/dRMf5dsG4V5lXeJueAM9jEwl0vWNP23prrWAOF8jaRzPdA
igxFG7T8z4iCDaBHVBBGr5qU1GU0RSWOP46FJZAaQ2FCssirArYz97k5XwRI/cma
c7qZ6QHE2n+xirImjMtYbqTG6W4k0TCYu0cvpDn3AJVIIaplNQ16ei1Y/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMROdI9Cw2BluIqonVKXWVAfgW/MB8GA1UdIwQY
MBaAFGPDXIntSumj1kGxHL5q0Py+kyZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQt
YWQ5Y2ZmY2ViZjFiLzEvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQtYWQ5Y2ZmY2ViZjFi
LzEvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5SB6lH4
e1HJ+3qm0yjJ1TE1yGmoqdat2BrE0HZ4TlvB+m2hx8IOij/nfOQASl69m0kaqc5N
2QEmGmZNz3o0J9IM3gOF6v9Oc+J542C/c0A+6ky9wtljIOt0npBoTzSEsDAuwszX
YPmUTW14naf0E3I6kqJoQl15mBLqQO2rCTHSxfLF6CSUlxiLTTPcHO17Z8X/bCqU
eG/c/+/uJ7aJRqh4phJIwWhbH26895X1xcaOSBjGmaSjHpY4aGqVBNa4KqSM37hJ
GmAWDFbFll5ZJRUaCmXx6KffubUEZ64tQMoVCTYh0whCxYLmFtUH47ejv/CRc+Y2
KHTGuIRN6qKl/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:03 2026 by rpki-client