Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: fN3RibgswLnDQYuycSlZGqxm6lKnkG2HWwtAWd2Bczw=
Subject key identifier: 32:06:CA:07:43:96:9F:B1:F6:7F:33:00:B7:C0:F3:72:A5:D9:B6:7A
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 019D389BF4F24ED385BB7738612340E2CAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0E20
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: TOTHyZwBb_iYhRFIFcu0_EcnCBU.roa (hash: IyBmvMwGXyKxvavxnC9QjTz8ueACKxET+moXjushzIA=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: yo4E4WCmW+IhS2mUaiOelxDw5hrgmOzRPmG057BB9Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f4:f2:4e:d3:85:bb:77:38:61:23:40:e2:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=3206ca0743969fb1f67f3300b7c0f372a5d9b67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:21:97:e5:46:cd:07:f5:52:fb:a5:51:ac:
7e:67:eb:eb:4d:63:86:a9:7a:a6:cd:b0:26:ea:60:
fb:2d:84:9d:56:50:d6:99:c0:5e:cb:ba:a5:e0:4f:
88:06:74:fd:6a:fb:40:34:d5:ae:5b:5e:95:03:0c:
e4:a1:d2:3e:1d:70:ff:5b:9d:73:e7:2e:d5:f2:6b:
31:69:31:4c:4e:b0:89:85:fb:52:72:9b:ff:81:e9:
6a:d1:df:83:03:15:b1:34:e4:d1:dd:a5:bd:82:56:
e2:d2:8a:1a:ef:6f:7a:f2:3c:f4:f8:56:fb:72:42:
68:e5:c8:6a:79:cb:10:43:c0:52:dd:30:32:45:c1:
17:3c:ff:af:eb:44:91:8d:bf:11:5d:83:66:e5:fe:
40:52:1a:39:be:79:03:78:05:4b:a4:3c:84:ea:36:
c5:7e:de:35:5f:c3:53:1b:ad:1d:ce:3c:c5:c7:78:
93:8d:21:1e:87:50:09:b6:fb:5f:7d:ec:f3:d3:23:
83:d8:c5:f9:40:e8:e0:9c:c7:da:f7:86:d9:78:94:
f9:4d:95:67:0e:d6:7d:64:96:09:df:db:7b:e3:b6:
6c:8f:60:35:de:49:70:1e:4e:b7:cc:c8:62:ed:f3:
61:d1:7b:58:1b:0b:d2:ff:f4:67:8a:d3:65:90:ad:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:CA:07:43:96:9F:B1:F6:7F:33:00:B7:C0:F3:72:A5:D9:B6:7A
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:20:de:c1:c6:24:6e:d8:b0:9c:96:c0:dd:e0:d5:1c:2a:
89:e9:84:ce:a0:83:ba:0f:5a:38:a9:ff:25:31:d4:7e:2c:59:
f1:cc:48:12:2c:57:74:2e:15:6e:2f:eb:90:58:c5:db:9a:f2:
e7:43:37:48:b6:4e:04:15:ba:d1:83:7a:0b:d4:c4:03:ac:f8:
24:77:be:6b:e0:d4:74:f2:fd:29:bd:c8:72:42:dc:be:99:33:
05:e8:b4:da:d3:cc:26:03:89:f3:a2:36:11:dd:65:00:12:85:
58:a3:2a:00:b3:71:c5:4d:6b:39:a7:d5:92:46:90:fd:99:38:
bd:56:c8:2e:1d:56:c7:69:a1:01:11:a6:ac:3f:3b:7c:5c:a6:
40:e5:bf:af:cc:15:94:ff:f9:07:49:28:5f:23:be:a3:8f:52:
57:3d:2c:35:2e:d7:49:3e:d2:b0:bf:8e:b9:d6:c0:2b:b9:29:
4e:d3:0f:e8:9b:05:77:c8:7d:64:71:cf:7f:e4:69:c1:de:3b:
a5:2a:ba:cf:77:2a:b5:7f:f0:bf:fa:4b:27:4d:2d:b7:cb:40:
6a:1e:c3:1a:43:d5:d9:69:01:4b:0f:b2:b5:ef:4c:14:dc:25:
fa:81:e5:f9:a0:5a:5e:ab:4f:72:f9:22:9d:6c:41:ac:45:39:
2d:c6:9e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/TyTtOFu3c4YSNA4sqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw
NTcyNjAwHhcNMjYwMzI5MDgwMDM4WhcNMjYwMzMwMDgwMDM4WjAzMTEwLwYDVQQD
EygzMjA2Y2EwNzQzOTY5ZmIxZjY3ZjMzMDBiN2MwZjM3MmE1ZDliNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIYhl+VGzQf1UvulUax+Z+vrTWOG
qXqmzbAm6mD7LYSdVlDWmcBey7ql4E+IBnT9avtANNWuW16VAwzkodI+HXD/W51z
5y7V8msxaTFMTrCJhftScpv/gelq0d+DAxWxNOTR3aW9glbi0ooa72968jz0+Fb7
ckJo5chqecsQQ8BS3TAyRcEXPP+v60SRjb8RXYNm5f5AUho5vnkDeAVLpDyE6jbF
ft41X8NTG60dzjzFx3iTjSEeh1AJtvtffezz0yOD2MX5QOjgnMfa94bZeJT5TZVn
DtZ9ZJYJ39t747Zsj2A13klwHk63zMhi7fNh0XtYGwvS//RnitNlkK0MwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIGygdDlp+x9n8zALfA83Kl2bZ6MB8GA1UdIwQY
MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt
ZmE2NjU0YTJhNmZlLzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl
LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuMg3sHG
JG7YsJyWwN3g1RwqiemEzqCDug9aOKn/JTHUfixZ8cxIEixXdC4Vbi/rkFjF25ry
50M3SLZOBBW60YN6C9TEA6z4JHe+a+DUdPL9Kb3IckLcvpkzBei02tPMJgOJ86I2
Ed1lABKFWKMqALNxxU1rOafVkkaQ/Zk4vVbILh1Wx2mhARGmrD87fFymQOW/r8wV
lP/5B0koXyO+o49SVz0sNS7XST7SsL+OudbAK7kpTtMP6JsFd8h9ZHHPf+Rpwd47
pSq6z3cqtX/wv/pLJ00tt8tAah7DGkPV2WkBSw+yte9MFNwl+oHl+aBaXqtPcvki
nWxBrEU5Lcaefg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:59 2026 by rpki-client