Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: Oak51vvd9Cx78uyZX2DMmPMjNR7sfg1wOAFIBxeuSKE=
Subject key identifier: 57:41:5D:64:58:BB:7F:BC:BF:7E:B1:59:69:A3:28:31:38:FD:71:58
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019D39407B247D4310B65544D9A6D4B948FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: GlWizv2ImorDlJ5qdqf22l6axV0.roa (hash: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: h5G7S0i5Rc5r1MmhQi3siw38Yc7LRJ+9UZxMWl1uxHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7b:24:7d:43:10:b6:55:44:d9:a6:d4:b9:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=57415d6458bb7fbcbf7eb15969a3283138fd7158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:49:c2:3f:63:11:71:98:55:24:35:a6:78:
b1:d2:04:fb:ea:3b:bd:4c:44:a7:15:7b:e8:a0:be:
cd:d2:db:69:be:fd:f5:ed:14:22:f9:82:aa:22:f2:
b6:13:bb:47:76:33:e6:17:0b:c7:6a:55:10:3c:75:
3b:ed:b7:bd:20:43:1c:af:70:fa:39:cd:04:77:57:
ba:32:f5:9b:49:bf:23:03:2d:7f:29:6e:1b:ff:08:
a5:bc:b8:d0:76:72:ef:05:e8:a9:de:b0:74:33:66:
58:17:49:fe:11:bd:09:c2:a3:9d:b7:86:5a:15:4f:
b9:a9:eb:08:79:8c:aa:84:b6:8d:be:1d:d4:af:8b:
5d:4d:36:4f:61:bd:98:5f:f2:78:18:79:aa:06:1b:
93:c3:3b:f3:41:fa:46:16:4d:3f:9d:65:f9:40:46:
43:38:1a:26:bf:3c:ad:ed:4b:65:fd:ab:9f:57:61:
51:41:3b:b2:2e:e0:9d:60:2f:ae:a8:0e:05:18:70:
08:89:3a:25:f0:1c:2e:ca:ff:ff:92:15:47:e9:90:
f1:ad:dd:8b:42:f1:21:fd:f6:c0:2e:b5:1d:12:87:
49:53:cc:21:f2:90:4f:b5:e1:1a:d3:59:f4:2d:df:
b7:62:87:1e:2f:e2:54:32:57:56:2d:db:8f:11:1b:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:5D:64:58:BB:7F:BC:BF:7E:B1:59:69:A3:28:31:38:FD:71:58
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:f3:e2:a6:e5:00:5e:3c:94:a8:04:04:3b:b6:0b:71:da:
ca:48:17:c0:4f:25:b6:80:bc:9a:92:18:e9:50:3a:50:36:dd:
2b:6d:bd:bb:d5:b0:dc:b9:16:a1:cf:36:4d:29:24:4e:1c:d1:
0a:82:10:74:c3:7d:09:2d:a9:91:71:7f:8b:23:e8:ae:cd:a1:
3e:f0:79:87:42:d9:0d:a9:0c:4b:e8:66:3c:c2:9c:87:e1:fd:
a7:65:a7:e1:0a:a8:94:27:25:30:c2:fe:40:d9:8e:3c:0a:c6:
a9:24:f0:d1:87:bd:9c:72:bc:de:b7:5a:b2:70:81:43:9a:66:
9f:21:11:77:3a:87:be:56:44:b6:0c:61:3a:f0:51:77:f8:40:
cd:22:9c:e7:cd:63:ee:d1:8f:29:2e:79:6f:15:60:5e:e4:1a:
fd:0f:47:35:c5:fa:aa:d6:df:e4:a8:59:fc:74:3b:22:9e:9b:
4d:18:41:4a:08:3d:90:e7:9b:0c:c5:4f:17:a8:bc:3a:60:dd:
ae:0c:0f:de:2a:fd:05:2a:1e:fc:cd:8e:cc:00:d3:b7:29:ca:
ae:8e:05:ec:21:af:1c:66:b3:8c:0a:77:4a:b3:ae:fe:6b:f6:
df:c6:54:d0:9d:e7:f0:a3:49:b6:25:04:54:13:c6:6b:fa:ad:
04:8b:98:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHskfUMQtlVE2abUuUj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw
YmVhMzEwHhcNMjYwMzI5MTEwMDIwWhcNMjYwMzMwMTEwMDIwWjAzMTEwLwYDVQQD
Eyg1NzQxNWQ2NDU4YmI3ZmJjYmY3ZWIxNTk2OWEzMjgzMTM4ZmQ3MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNxJwj9jEXGYVSQ1pnix0gT76ju9
TESnFXvooL7N0ttpvv317RQi+YKqIvK2E7tHdjPmFwvHalUQPHU77be9IEMcr3D6
Oc0Ed1e6MvWbSb8jAy1/KW4b/wilvLjQdnLvBeip3rB0M2ZYF0n+Eb0JwqOdt4Za
FU+5qesIeYyqhLaNvh3Ur4tdTTZPYb2YX/J4GHmqBhuTwzvzQfpGFk0/nWX5QEZD
OBomvzyt7Utl/aufV2FRQTuyLuCdYC+uqA4FGHAIiTol8Bwuyv//khVH6ZDxrd2L
QvEh/fbALrUdEodJU8wh8pBPteEa01n0Ld+3YoceL+JUMldWLduPERum0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdBXWRYu3+8v36xWWmjKDE4/XFYMB8GA1UdIwQY
MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt
OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk
LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw/z4qbl
AF48lKgEBDu2C3HaykgXwE8ltoC8mpIY6VA6UDbdK229u9Ww3LkWoc82TSkkThzR
CoIQdMN9CS2pkXF/iyPors2hPvB5h0LZDakMS+hmPMKch+H9p2Wn4QqolCclMML+
QNmOPArGqSTw0Ye9nHK83rdasnCBQ5pmnyERdzqHvlZEtgxhOvBRd/hAzSKc581j
7tGPKS55bxVgXuQa/Q9HNcX6qtbf5KhZ/HQ7Ip6bTRhBSgg9kOebDMVPF6i8OmDd
rgwP3ir9BSoe/M2OzADTtynKro4F7CGvHGazjAp3SrOu/mv238ZU0J3n8KNJtiUE
VBPGa/qtBIuYLA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:11 2026 by rpki-client