Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: P6/Btix82UkDo4zsfx9aIBTpv0iudyWsbBy/DY/dwCo=
Subject key identifier: 8D:33:56:AB:88:7C:4B:2C:48:24:5E:86:A4:B6:9F:22:05:B9:13:55
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019D371B4D6270C42AD56FCF19174CC4698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0ADE
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: ocUccxXUgcyOBtonFdgU13wVNgJ6sEAsBR/h4WICk+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4d:62:70:c4:2a:d5:6f:cf:19:17:4c:c4:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=8d3356ab887c4b2c48245e86a4b69f2205b91355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:f2:19:80:94:39:58:ee:28:ff:c9:51:fe:
6c:65:db:ee:2c:86:90:16:10:88:ad:d3:d5:39:00:
1a:85:71:f9:b5:09:99:35:93:4e:62:1c:11:7f:87:
83:56:6a:7b:57:66:8a:bd:3b:37:8e:6a:ad:45:49:
ab:09:e4:69:aa:d5:48:48:ca:a0:c2:e3:32:35:7e:
4b:d6:17:39:88:f3:46:1f:d5:70:32:b5:4c:e6:cb:
86:1f:18:cf:f4:f2:91:81:77:62:df:dc:f8:1e:6f:
f0:b3:8d:61:4f:40:af:8d:b3:65:26:d1:2e:13:e3:
50:0d:fc:59:07:b8:c5:b7:1d:87:fc:bc:69:b3:ef:
33:cd:3f:44:7e:37:53:ef:2e:74:f5:99:8d:bd:0d:
63:2a:cd:29:c7:2c:05:20:c0:7b:c4:7a:6e:5e:1b:
58:d2:26:e4:da:a8:d0:58:5a:1c:f3:90:8b:7f:3e:
9c:e4:ff:41:47:d0:33:0e:7c:e8:1d:13:3e:27:e1:
5e:79:13:9d:0b:bd:f8:08:7f:aa:22:ab:a2:64:56:
36:33:ce:6d:0d:40:cd:4a:82:92:ee:cb:ab:6f:32:
7b:b2:aa:29:4c:2d:a6:06:05:68:2d:69:31:96:d7:
ff:b9:ff:e2:00:9a:ed:56:f9:5c:5e:e2:4f:db:6e:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:56:AB:88:7C:4B:2C:48:24:5E:86:A4:B6:9F:22:05:B9:13:55
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:d5:3b:2d:c7:28:bb:bd:0a:ac:3e:11:e7:f1:40:9e:b1:
da:ae:f1:ca:c0:67:46:1b:ee:b7:d6:96:6a:2d:53:b5:ce:50:
67:76:19:9c:f8:6d:c8:c7:39:9c:a4:83:f8:c0:87:6e:b5:04:
50:e1:f8:5b:87:c5:b0:df:62:50:59:b5:2b:4f:2e:04:68:1d:
90:8e:63:21:2e:21:3c:eb:13:49:ed:4c:58:1c:b4:6b:1f:b7:
c6:1a:a4:b8:a1:ae:dd:0a:86:33:c6:ce:bb:67:5f:b7:e2:85:
65:9e:8e:e2:3c:21:f3:2c:3a:a6:66:39:da:04:53:34:ba:56:
b0:2b:6e:02:ab:7e:39:62:02:00:cd:23:03:15:15:97:0f:15:
96:4d:5b:60:2d:88:08:54:b9:7c:92:4e:fa:c7:3f:5d:5c:15:
a5:1e:b6:e0:06:63:b3:c0:01:82:cf:bf:37:43:b0:9f:24:86:
3d:13:98:dc:02:dc:51:73:52:b8:b4:31:98:95:f4:07:44:48:
25:93:12:d8:8c:2e:93:26:1c:ba:d7:6b:14:0b:b5:8d:52:94:
fc:74:25:8e:7c:00:32:1b:9e:42:13:88:82:de:54:40:64:e8:
89:ce:f7:50:9e:1b:bf:56:b6:68:a1:90:b0:f2:cd:fa:29:c2:
af:aa:b2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G01icMQq1W/PGRdMxGmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3
MTQ4NzAwHhcNMjYwMzI5MDEwMDI5WhcNMjYwMzMwMDEwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDMzNTZhYjg4N2M0YjJjNDgyNDVlODZhNGI2OWYyMjA1YjkxMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C3yGYCUOVjuKP/JUf5sZdvuLIaQ
FhCIrdPVOQAahXH5tQmZNZNOYhwRf4eDVmp7V2aKvTs3jmqtRUmrCeRpqtVISMqg
wuMyNX5L1hc5iPNGH9VwMrVM5suGHxjP9PKRgXdi39z4Hm/ws41hT0CvjbNlJtEu
E+NQDfxZB7jFtx2H/Lxps+8zzT9EfjdT7y509ZmNvQ1jKs0pxywFIMB7xHpuXhtY
0ibk2qjQWFoc85CLfz6c5P9BR9AzDnzoHRM+J+FeeROdC734CH+qIquiZFY2M85t
DUDNSoKS7surbzJ7sqopTC2mBgVoLWkxltf/uf/iAJrtVvlcXuJP224ZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0zVquIfEssSCRehqS2nyIFuRNVMB8GA1UdIwQY
MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt
YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl
LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfW/VOy3H
KLu9Cqw+EefxQJ6x2q7xysBnRhvut9aWai1Ttc5QZ3YZnPhtyMc5nKSD+MCHbrUE
UOH4W4fFsN9iUFm1K08uBGgdkI5jIS4hPOsTSe1MWBy0ax+3xhqkuKGu3QqGM8bO
u2dft+KFZZ6O4jwh8yw6pmY52gRTNLpWsCtuAqt+OWICAM0jAxUVlw8Vlk1bYC2I
CFS5fJJO+sc/XVwVpR624AZjs8ABgs+/N0OwnySGPROY3ALcUXNSuLQxmJX0B0RI
JZMS2IwukyYcutdrFAu1jVKU/HQljnwAMhueQhOIgt5UQGToic73UJ4bv1a2aKGQ
sPLN+inCr6qyFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:37 2026 by rpki-client