Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: TEn3eh6Pg3Io8yP3SH1lUTVqbe/Q3naGxgn0IBY/CaE=
Subject key identifier: 95:C9:01:9B:00:7B:D6:54:A1:98:D5:79:8F:49:2B:93:29:4F:96:2D
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019D37897EC88AABEAB346ADBF293A9FDD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 06FD
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: GxNglowBB-qM4SyLCUpB8DxSym4.roa (hash: cXQ7oNvmgTnLy87CiQWasUFcfBCcYezCe1uKaHJSwpY=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: 7joPR92104OkQ+deGkdgNCmtR0yKegZcYOeF3gZSoU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7e:c8:8a:ab:ea:b3:46:ad:bf:29:3a:9f:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=95c9019b007bd654a198d5798f492b93294f962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:49:3c:13:b9:62:ef:7b:b4:7c:ef:5b:2c:
a7:e3:ef:84:a4:d7:aa:d6:2a:b6:c1:13:9a:17:45:
2f:23:35:a6:b4:7d:16:36:86:43:a2:31:30:34:be:
0d:ba:e0:70:05:0c:08:86:93:b6:de:b5:e2:95:50:
57:1f:12:59:46:30:ba:df:14:39:38:79:29:f7:2c:
9b:37:8d:15:08:0d:06:3f:f5:ea:f1:e9:0d:d9:99:
dc:78:de:48:d7:0f:45:81:a8:ed:1d:a5:c8:15:6b:
bb:99:74:f9:15:19:52:d7:f8:86:9b:1f:5a:87:19:
66:88:95:50:23:8f:2c:ef:55:51:8f:1e:d6:8d:b4:
9c:3d:96:93:a0:41:81:ba:d8:4c:c4:db:a2:3c:cb:
40:89:7e:39:1d:e7:6b:c2:70:94:ff:44:5e:e5:a7:
3c:17:fc:6c:7d:7a:b6:8f:24:ae:41:cb:b7:94:eb:
5f:30:d8:47:2f:e3:cb:c0:94:db:73:9a:55:19:61:
e7:35:fa:d5:72:9c:67:e9:6e:17:f2:ec:38:56:a8:
4f:f6:09:95:c3:46:55:dd:d4:98:36:68:98:2d:52:
71:13:1a:e3:1b:73:61:3e:65:1a:ed:83:1f:59:b8:
e7:fa:6b:32:30:73:77:42:77:d7:65:3f:00:98:a0:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:01:9B:00:7B:D6:54:A1:98:D5:79:8F:49:2B:93:29:4F:96:2D
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5e:6d:de:fd:ab:62:7a:af:2e:a8:ef:17:1b:8d:4c:47:e4:
36:0f:1a:13:a0:81:77:8a:3e:41:30:62:d7:99:16:95:f0:0e:
8b:dc:92:ad:5f:7a:16:73:05:46:93:66:ec:15:f2:d0:59:11:
be:58:8d:71:35:a8:b9:46:a3:85:79:09:e0:30:fd:be:59:77:
a0:da:6b:20:63:8f:27:d7:35:53:32:2c:91:24:e4:b8:dc:db:
c3:1d:51:83:07:34:a9:ba:f2:d2:cb:c3:f7:8f:10:91:66:aa:
ac:c6:05:fd:e9:3f:1d:b0:e1:f9:6d:8c:61:4a:45:72:60:a7:
a0:09:d8:8d:12:14:10:8f:e7:4f:74:d6:55:fc:dd:53:a7:29:
ea:52:4c:9f:88:22:c4:de:98:c5:47:e4:1e:00:43:42:94:25:
a1:0b:f8:33:eb:05:bf:30:2a:07:7a:28:8e:19:d6:ca:ad:61:
71:bc:87:40:4d:4f:5b:71:4d:41:45:6b:c9:be:47:b5:c0:17:
d3:52:22:93:07:af:9d:16:7f:bc:6a:8a:74:56:79:e6:c0:52:
b0:46:4e:4c:fe:3c:e5:4b:8b:ac:ab:fe:a5:cc:06:b8:cf:46:
e2:c9:df:96:88:77:08:47:75:b9:7b:68:0b:27:e4:8a:48:aa:
97:fe:05:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iX7Iiqvqs0atvyk6n90RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk
YjFmOWIwHhcNMjYwMzI5MDMwMDUwWhcNMjYwMzMwMDMwMDUwWjAzMTEwLwYDVQQD
Eyg5NWM5MDE5YjAwN2JkNjU0YTE5OGQ1Nzk4ZjQ5MmI5MzI5NGY5NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60tJPBO5Yu97tHzvWyyn4++EpNeq
1iq2wROaF0UvIzWmtH0WNoZDojEwNL4NuuBwBQwIhpO23rXilVBXHxJZRjC63xQ5
OHkp9yybN40VCA0GP/Xq8ekN2ZnceN5I1w9FgajtHaXIFWu7mXT5FRlS1/iGmx9a
hxlmiJVQI48s71VRjx7WjbScPZaToEGButhMxNuiPMtAiX45HedrwnCU/0Re5ac8
F/xsfXq2jySuQcu3lOtfMNhHL+PLwJTbc5pVGWHnNfrVcpxn6W4X8uw4VqhP9gmV
w0ZV3dSYNmiYLVJxExrjG3NhPmUa7YMfWbjn+msyMHN3QnfXZT8AmKDeSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXJAZsAe9ZUoZjVeY9JK5MpT5YtMB8GA1UdIwQY
MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt
YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1
LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF5t3v2r
YnqvLqjvFxuNTEfkNg8aE6CBd4o+QTBi15kWlfAOi9ySrV96FnMFRpNm7BXy0FkR
vliNcTWouUajhXkJ4DD9vll3oNprIGOPJ9c1UzIskSTkuNzbwx1Rgwc0qbry0svD
948QkWaqrMYF/ek/HbDh+W2MYUpFcmCnoAnYjRIUEI/nT3TWVfzdU6cp6lJMn4gi
xN6YxUfkHgBDQpQloQv4M+sFvzAqB3oojhnWyq1hcbyHQE1PW3FNQUVryb5HtcAX
01IikwevnRZ/vGqKdFZ55sBSsEZOTP485UuLrKv+pcwGuM9G4snfloh3CEd1uXto
Cyfkikiql/4FDw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:17 2026 by rpki-client