Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: UiiKfqJpYYYUHwiH4vDSM3DXYWy6cdyvb7Emv9k0KSY=
Subject key identifier: CA:DA:3E:4E:2F:D9:DB:E1:36:31:16:9B:F7:92:AA:38:82:07:6B:42
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019CE66D3FAB8D3C2D07695774015339EE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 034F
Signing time: Fri 13 Mar 2026 09:00:45 +0000
Manifest this update: Fri 13 Mar 2026 09:00:45 +0000
Manifest next update: Sat 14 Mar 2026 09:00:45 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: 92M3+qY+hABwvcQfXvejNWVl9c0al4krkzTydiTux5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:3f:ab:8d:3c:2d:07:69:57:74:01:53:39:ee:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Mar 13 09:00:45 2026 GMT
Not After : Mar 14 09:00:45 2026 GMT
Subject: CN=cada3e4e2fd9dbe13631169bf792aa3882076b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:d2:13:75:58:a6:c7:73:2f:52:05:31:f5:
34:f2:43:bf:19:75:55:66:55:bc:45:8b:14:4d:19:
c4:7e:98:df:93:11:28:a0:bb:9e:81:99:57:f6:39:
03:67:9b:9d:58:af:ad:47:49:94:96:e6:5f:aa:46:
b1:98:e8:7d:3c:35:48:f4:f2:89:14:de:1e:33:17:
fa:a2:8b:99:ae:e2:31:89:30:e2:cf:96:c4:46:f7:
20:fa:af:3c:a9:da:10:46:04:14:26:78:13:e1:0f:
e4:6c:4b:5e:5d:74:9b:d5:7a:73:4c:a1:f6:b6:32:
7d:73:7b:01:a4:72:bd:9a:9e:29:33:f0:e0:ad:1f:
43:06:ab:f8:80:94:64:69:2a:65:b4:bc:01:29:a9:
8a:4b:a0:01:57:c0:27:04:cd:06:d3:da:2a:42:ca:
e6:36:fa:97:b9:f9:e2:7d:c2:f7:ed:aa:f6:a0:3c:
e8:74:a7:5a:3d:45:b3:61:3d:dd:63:01:fa:53:3e:
60:9e:1f:6f:21:8a:cc:6f:51:62:da:01:2d:57:28:
57:24:d1:0d:d8:9a:d5:85:aa:70:00:fe:17:4b:23:
f4:6e:07:0c:b5:89:7a:4a:5c:2d:45:03:10:55:96:
38:e6:9c:8f:ec:40:64:66:42:69:eb:ea:2f:9e:8b:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:3E:4E:2F:D9:DB:E1:36:31:16:9B:F7:92:AA:38:82:07:6B:42
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:c1:d1:02:e9:dd:9e:f5:5f:40:9e:0d:8b:c7:c8:19:2a:
2b:7d:99:a8:a4:a8:33:88:0d:f0:37:5c:4f:00:bf:82:8a:ac:
da:01:17:b3:f8:96:b4:17:84:d1:16:48:bc:39:ab:15:bd:df:
d8:c9:bd:01:b6:5e:3f:52:7c:99:7d:17:96:30:41:75:44:48:
61:a9:e9:f6:3c:e8:d4:15:a8:ec:1d:26:95:97:a3:9c:f4:e7:
9c:85:4f:f4:1a:e6:dc:32:11:c8:30:45:db:66:91:ec:a5:c3:
3d:fe:9a:d0:a3:e0:de:38:d9:8b:e0:10:a1:83:0e:c9:0e:31:
5e:b6:7e:6f:3b:96:eb:62:75:b4:be:1a:99:b6:9b:33:c0:47:
97:95:07:5c:56:ef:48:17:29:a3:d1:3e:e6:e8:8b:c4:18:ab:
62:77:57:5a:2d:44:4c:97:80:6f:c5:67:53:a6:54:e6:d0:ee:
ec:90:ec:2a:71:a6:54:b6:58:10:41:8a:b8:78:15:f4:ce:cc:
fc:86:9f:80:80:28:62:5b:1d:67:31:99:a6:23:aa:19:84:93:
54:4d:7f:d0:af:68:80:1e:e6:e4:3c:be:30:aa:69:d9:6c:10:
88:cc:19:4e:42:6e:e4:11:34:c4:f5:eb:64:8f:bb:90:30:77:
e5:67:74:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbT+rjTwtB2lXdAFTOe5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm
MmVhMDEwHhcNMjYwMzEzMDkwMDQ1WhcNMjYwMzE0MDkwMDQ1WjAzMTEwLwYDVQQD
EyhjYWRhM2U0ZTJmZDlkYmUxMzYzMTE2OWJmNzkyYWEzODgyMDc2YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS3SE3VYpsdzL1IFMfU08kO/GXVV
ZlW8RYsUTRnEfpjfkxEooLuegZlX9jkDZ5udWK+tR0mUluZfqkaxmOh9PDVI9PKJ
FN4eMxf6oouZruIxiTDiz5bERvcg+q88qdoQRgQUJngT4Q/kbEteXXSb1XpzTKH2
tjJ9c3sBpHK9mp4pM/DgrR9DBqv4gJRkaSpltLwBKamKS6ABV8AnBM0G09oqQsrm
NvqXufnifcL37ar2oDzodKdaPUWzYT3dYwH6Uz5gnh9vIYrMb1Fi2gEtVyhXJNEN
2JrVhapwAP4XSyP0bgcMtYl6SlwtRQMQVZY45pyP7EBkZkJp6+ovnosivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMraPk4v2dvhNjEWm/eSqjiCB2tCMB8GA1UdIwQY
MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt
ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1
LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6jB0QLp
3Z71X0CeDYvHyBkqK32ZqKSoM4gN8DdcTwC/goqs2gEXs/iWtBeE0RZIvDmrFb3f
2Mm9AbZeP1J8mX0XljBBdURIYanp9jzo1BWo7B0mlZejnPTnnIVP9Brm3DIRyDBF
22aR7KXDPf6a0KPg3jjZi+AQoYMOyQ4xXrZ+bzuW62J1tL4ambabM8BHl5UHXFbv
SBcpo9E+5uiLxBirYndXWi1ETJeAb8VnU6ZU5tDu7JDsKnGmVLZYEEGKuHgV9M7M
/IafgIAoYlsdZzGZpiOqGYSTVE1/0K9ogB7m5Dy+MKpp2WwQiMwZTkJu5BE0xPXr
ZI+7kDB35Wd0cA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:43 2026 by rpki-client