Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: ILkn1rnhEszoFbJeL6JGHAOO2Fi9zlI8ScnxHjmQ/NY=
Subject key identifier: B1:31:05:52:16:92:B1:68:F7:9C:61:1F:D6:DF:EA:62:C5:FA:C2:D5
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019CE66D49669403E861729E22EDF336826E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0EE9
Signing time: Fri 13 Mar 2026 09:00:47 +0000
Manifest this update: Fri 13 Mar 2026 09:00:47 +0000
Manifest next update: Sat 14 Mar 2026 09:00:47 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: b9lFdiGBWs1OyhR4ByOFBXxa3emywKPuMqyTlJ+5lwI=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:49:66:94:03:e8:61:72:9e:22:ed:f3:36:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Mar 13 09:00:47 2026 GMT
Not After : Mar 14 09:00:47 2026 GMT
Subject: CN=b13105521692b168f79c611fd6dfea62c5fac2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:8e:e5:0a:b7:e7:79:ef:f2:d6:e7:7c:14:
4d:c3:0e:d7:c9:c3:50:4b:2c:e0:45:b3:78:83:19:
38:09:2f:cc:b2:a3:71:12:93:69:dc:8f:a0:2a:8e:
f1:e2:be:2c:ef:ce:e4:1e:e1:04:6e:14:1e:e9:66:
08:ff:a2:84:82:33:c0:4a:74:36:21:ac:47:65:43:
fb:25:b1:02:7c:e3:dc:f7:2a:b7:62:ce:35:cf:8c:
86:64:c2:cb:6f:60:a5:a3:90:14:08:f1:85:29:ca:
80:26:80:8e:c5:24:fc:a5:f3:34:f1:51:84:8a:88:
b5:b9:1b:73:a5:64:8b:f1:0e:04:09:a8:44:b3:5f:
d2:a5:a9:17:84:ed:b6:90:e8:d3:0f:98:4a:ed:60:
43:eb:be:0f:1f:a6:29:e6:00:2a:29:4f:1a:51:92:
2e:52:57:02:a6:39:82:34:14:af:c1:bb:d0:1a:9c:
d9:71:0b:55:0f:c3:e5:95:d0:74:2e:a0:7c:05:83:
77:2d:00:3c:49:5d:1e:60:74:bb:61:dc:a5:5b:99:
47:41:4f:45:24:7f:89:0e:fa:c8:05:e6:ca:83:3b:
be:c6:46:8f:3f:0f:4e:19:91:df:1d:5b:3f:64:fd:
71:29:ee:d1:66:6e:61:3a:e5:fa:37:92:17:31:01:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:05:52:16:92:B1:68:F7:9C:61:1F:D6:DF:EA:62:C5:FA:C2:D5
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:51:14:5c:a1:70:92:1c:a8:33:8e:51:8b:f3:f0:ce:f7:
27:cd:0e:d6:d5:b1:10:ab:b9:2b:34:59:a7:70:d7:19:c5:62:
d1:86:0e:f0:df:7e:19:9d:d1:73:ad:bf:e9:01:f3:d9:eb:d7:
79:3f:e0:51:6e:b7:78:6d:ec:d4:32:6d:13:55:da:81:bc:06:
5b:e4:1f:47:d6:10:49:56:5f:ff:cf:96:7d:df:5f:77:93:19:
7a:2c:61:d7:ed:8c:88:27:fe:99:f9:3c:ab:cb:86:c1:3d:ec:
91:e3:c5:ae:5f:74:63:aa:2a:43:38:ab:2d:f6:83:aa:e7:70:
6e:33:b1:60:e2:10:86:9b:62:5c:cb:ca:e7:da:60:e8:d0:e0:
c3:d4:8b:99:51:67:ce:d3:b4:ed:d7:3f:f4:9d:da:1c:86:bc:
de:af:24:a4:de:f8:3b:f3:3b:f8:12:a0:ba:f4:2b:79:b4:44:
78:8e:5a:b5:ab:78:1a:c1:77:85:4a:23:d1:95:2b:d0:50:8b:
90:b0:1a:4c:b2:29:52:5c:a0:d9:b7:82:6a:ef:2d:22:f4:88:
6d:61:d9:cf:14:9e:c8:52:e1:3b:99:ec:74:56:f8:bf:a7:b4:
d4:67:4a:8c:18:c2:03:e0:b3:7f:d5:bc:07:9d:58:70:00:e6:
3a:6c:98:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbUlmlAPoYXKeIu3zNoJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm
NmQ5ODAwHhcNMjYwMzEzMDkwMDQ3WhcNMjYwMzE0MDkwMDQ3WjAzMTEwLwYDVQQD
EyhiMTMxMDU1MjE2OTJiMTY4Zjc5YzYxMWZkNmRmZWE2MmM1ZmFjMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PSO5Qq353nv8tbnfBRNww7XycNQ
SyzgRbN4gxk4CS/MsqNxEpNp3I+gKo7x4r4s787kHuEEbhQe6WYI/6KEgjPASnQ2
IaxHZUP7JbECfOPc9yq3Ys41z4yGZMLLb2Clo5AUCPGFKcqAJoCOxST8pfM08VGE
ioi1uRtzpWSL8Q4ECahEs1/SpakXhO22kOjTD5hK7WBD674PH6Yp5gAqKU8aUZIu
UlcCpjmCNBSvwbvQGpzZcQtVD8PlldB0LqB8BYN3LQA8SV0eYHS7YdylW5lHQU9F
JH+JDvrIBebKgzu+xkaPPw9OGZHfHVs/ZP1xKe7RZm5hOuX6N5IXMQGSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLExBVIWkrFo95xhH9bf6mLF+sLVMB8GA1UdIwQY
MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt
N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll
LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOudRFFyh
cJIcqDOOUYvz8M73J80O1tWxEKu5KzRZp3DXGcVi0YYO8N9+GZ3Rc62/6QHz2evX
eT/gUW63eG3s1DJtE1XagbwGW+QfR9YQSVZf/8+Wfd9fd5MZeixh1+2MiCf+mfk8
q8uGwT3skePFrl90Y6oqQzirLfaDqudwbjOxYOIQhptiXMvK59pg6NDgw9SLmVFn
ztO07dc/9J3aHIa83q8kpN74O/M7+BKguvQrebREeI5atat4GsF3hUoj0ZUr0FCL
kLAaTLIpUlyg2beCau8tIvSIbWHZzxSeyFLhO5nsdFb4v6e01GdKjBjCA+Czf9W8
B51YcADmOmyYqg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:04 2026 by rpki-client