Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: fZ+vJhrky0VBc/1Kk/g5KA9XU/8WyojgznRYfYLkGdw=
Subject key identifier: E8:3F:5D:D4:A8:E4:57:FF:AD:B1:AC:B2:96:2A:03:9A:EF:77:7D:41
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019DD019B68F73969FE25FF0C935E14D109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 03C8
Signing time: Mon 27 Apr 2026 18:00:39 +0000
Manifest this update: Mon 27 Apr 2026 18:00:39 +0000
Manifest next update: Tue 28 Apr 2026 18:00:39 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: EDWkDQf8L2MYENVgm9tuNA/P9kC2IiEPnqDsFaPBlYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:b6:8f:73:96:9f:e2:5f:f0:c9:35:e1:4d:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Apr 27 18:00:39 2026 GMT
Not After : Apr 28 18:00:39 2026 GMT
Subject: CN=e83f5dd4a8e457ffadb1acb2962a039aef777d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:b1:c3:64:13:07:e8:da:f0:2d:a4:e3:5c:
c9:06:07:67:e4:90:e3:97:31:06:74:8c:12:fd:99:
a7:a8:2a:4d:55:ac:50:c2:7c:60:40:a8:3c:11:08:
80:33:a7:a2:4e:6a:d0:a3:55:30:55:c8:65:e5:a3:
f2:23:4a:74:07:a0:b6:4f:39:b8:ad:b3:9c:93:91:
43:83:f9:81:6c:3f:a0:14:08:04:e1:bd:df:c9:98:
e6:d0:0b:e7:73:a6:47:e7:6c:d4:ed:03:26:fc:83:
a6:fd:d2:e7:ce:90:2c:8b:17:88:2d:14:b8:b4:52:
86:c9:29:77:1c:9e:75:c0:2c:8e:5a:40:66:b7:c3:
8a:14:81:0f:9d:07:a7:8e:f8:77:16:80:75:c4:fe:
50:01:b4:fa:49:ba:39:a9:1c:db:13:f7:0c:7f:1e:
38:91:99:00:ba:3d:11:6f:7d:f1:f9:8e:ee:3b:f5:
33:4d:b7:40:d6:d0:bf:a4:7b:1b:9a:11:bf:db:f2:
d7:86:5e:00:46:6c:14:1b:74:98:bc:a1:96:39:3c:
fe:b0:e2:7b:af:f0:d6:b9:2f:6b:33:9d:0d:6f:dc:
8b:92:11:8a:29:49:97:50:6a:2e:5a:42:72:09:3e:
9b:f6:56:aa:de:f7:0d:6e:4f:46:40:13:16:39:40:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:5D:D4:A8:E4:57:FF:AD:B1:AC:B2:96:2A:03:9A:EF:77:7D:41
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:8f:91:c2:5d:63:63:71:38:49:0e:39:f1:fd:83:b6:0d:
78:fe:c8:79:df:78:9b:b2:da:be:31:4f:f5:7a:d6:40:10:70:
39:31:f8:ba:56:46:64:ad:93:3f:af:8d:eb:f3:1b:a2:0d:6d:
39:2e:19:fc:ce:29:da:32:7d:6b:2f:d1:cb:41:b1:0e:91:69:
84:90:b1:6d:90:5d:e6:2a:c4:05:74:3c:82:14:e0:ce:56:e9:
70:8d:55:39:bd:8c:24:4a:89:19:41:8e:da:87:91:b0:a8:bc:
be:96:7b:2a:07:be:da:fb:ac:e6:cd:66:c6:1f:69:93:6c:a4:
5e:82:97:4e:35:4d:5e:e1:82:74:3b:b8:d8:29:05:31:ed:c2:
c2:9d:51:13:7b:bf:30:fb:38:ef:2a:aa:29:57:96:63:a8:e2:
87:08:bb:31:a0:00:50:31:7b:95:b5:33:04:95:67:2c:a1:83:
1f:6e:bd:1a:9e:43:64:77:fd:17:51:d2:b4:74:5f:6a:f9:1c:
f7:51:36:58:ff:a4:6e:e7:b7:ce:bc:c1:14:24:69:a2:ae:5d:
ad:13:0a:c0:fe:66:cc:17:e5:49:aa:2c:cf:16:c3:cb:48:5e:
8c:e6:e3:19:e3:3f:e3:7f:cf:d5:fb:9d:c5:24:0e:15:80:57:
02:37:b2:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGbaPc5af4l/wyTXhTRCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm
MmVhMDEwHhcNMjYwNDI3MTgwMDM5WhcNMjYwNDI4MTgwMDM5WjAzMTEwLwYDVQQD
EyhlODNmNWRkNGE4ZTQ1N2ZmYWRiMWFjYjI5NjJhMDM5YWVmNzc3ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gCxw2QTB+ja8C2k41zJBgdn5JDj
lzEGdIwS/ZmnqCpNVaxQwnxgQKg8EQiAM6eiTmrQo1UwVchl5aPyI0p0B6C2Tzm4
rbOck5FDg/mBbD+gFAgE4b3fyZjm0Avnc6ZH52zU7QMm/IOm/dLnzpAsixeILRS4
tFKGySl3HJ51wCyOWkBmt8OKFIEPnQenjvh3FoB1xP5QAbT6Sbo5qRzbE/cMfx44
kZkAuj0Rb33x+Y7uO/UzTbdA1tC/pHsbmhG/2/LXhl4ARmwUG3SYvKGWOTz+sOJ7
r/DWuS9rM50Nb9yLkhGKKUmXUGouWkJyCT6b9laq3vcNbk9GQBMWOUB/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg/XdSo5Ff/rbGsspYqA5rvd31BMB8GA1UdIwQY
MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt
ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1
LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWWPkcJd
Y2NxOEkOOfH9g7YNeP7Ied94m7LavjFP9XrWQBBwOTH4ulZGZK2TP6+N6/Mbog1t
OS4Z/M4p2jJ9ay/Ry0GxDpFphJCxbZBd5irEBXQ8ghTgzlbpcI1VOb2MJEqJGUGO
2oeRsKi8vpZ7Kge+2vus5s1mxh9pk2ykXoKXTjVNXuGCdDu42CkFMe3Cwp1RE3u/
MPs47yqqKVeWY6jihwi7MaAAUDF7lbUzBJVnLKGDH269Gp5DZHf9F1HStHRfavkc
91E2WP+kbue3zrzBFCRpoq5drRMKwP5mzBflSaoszxbDy0hejObjGeM/43/P1fud
xSQOFYBXAjeysQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:40 2026 by rpki-client