Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier: OXKbADuGE/F6D0g/FpxvMr0FJypTG/JBfp9ZNqw1S2I=
Subject key identifier: 30:B7:A6:9E:54:7D:4E:42:57:53:B7:FE:2B:5E:93:A3:67:61:86:DE
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial: 019D3977A04EE4596C1F4FFF59DF612CF8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number: 014A
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
2: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: 05D6bYSluDB3Lf6uR7+C9aRjdLLkplL8vHI8SetCQIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a0:4e:e4:59:6c:1f:4f:ff:59:df:61:2c:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=30b7a69e547d4e425753b7fe2b5e93a3676186de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:a4:89:f5:72:50:a8:07:b1:d0:38:b8:6d:
a6:d0:e6:09:f6:82:c1:aa:89:13:c8:01:f9:9e:83:
1b:e6:13:8c:7b:8f:d1:8b:55:a2:bf:ee:98:f1:e7:
a8:0b:8d:c4:d0:06:4b:35:53:cb:4a:d8:47:15:05:
a8:89:69:ca:a6:fe:da:3e:2b:a4:28:9e:26:81:4b:
81:2a:93:a3:d7:4d:62:ce:aa:3c:f0:17:86:6b:93:
af:03:36:bb:5e:53:79:62:24:41:f5:a5:7b:08:3c:
af:46:db:a1:55:51:7c:1f:86:5e:f2:a8:67:9f:97:
cb:79:7a:f4:67:10:e8:fc:d0:e6:6f:97:66:56:2b:
be:ea:7b:1f:6e:a9:a1:cc:9d:f4:e4:c9:f1:c6:58:
42:15:40:3a:41:2b:6b:47:29:9b:9e:91:f5:c8:81:
2b:38:ea:a0:83:57:db:99:58:e0:a0:7e:14:45:d4:
61:c8:4f:61:b4:72:9c:57:60:ea:7e:16:17:e9:17:
dd:4e:da:7d:2d:d9:f6:80:13:d6:3a:f8:71:0d:97:
4c:55:a6:8d:ac:2e:9c:e6:f8:06:79:3a:01:83:ed:
5c:94:be:f5:ea:57:aa:fc:cf:a8:25:fc:8f:05:91:
d1:a5:93:4d:5f:92:31:c4:2b:41:db:35:cd:95:2a:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B7:A6:9E:54:7D:4E:42:57:53:B7:FE:2B:5E:93:A3:67:61:86:DE
X509v3 Authority Key Identifier:
keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:e1:12:1c:91:2e:7b:9a:cc:cd:3e:ad:09:ff:13:22:82:
d6:e4:e1:41:bf:b6:fb:dc:f7:4f:e5:c4:60:c3:45:c2:9c:9d:
7a:dd:da:49:d3:1f:b5:61:b2:3d:8f:a9:38:f1:db:5c:5b:08:
c9:e6:4f:8d:6e:41:65:40:5e:5f:a6:ee:53:6e:4c:da:22:3a:
72:3e:07:ed:e6:41:50:4d:94:ce:65:60:83:fd:7e:c1:f7:57:
36:e6:0d:9a:99:0d:4d:51:a7:10:ef:a6:eb:50:8c:64:3a:b7:
5d:02:4e:97:db:d3:14:2b:8b:e9:b0:76:e3:ff:b9:66:af:87:
50:b0:26:6b:97:5d:22:e1:80:19:f4:eb:e6:06:3f:fb:d8:b0:
d3:d2:bd:02:e7:60:41:d3:01:61:1e:98:9c:77:8a:0e:25:4c:
32:d9:e5:69:14:dd:77:aa:14:47:bb:6e:3c:c1:95:6f:de:9f:
66:37:96:70:43:9c:42:69:e6:21:85:89:2a:ed:e3:07:f7:ad:
5d:36:dc:1a:bc:01:ca:32:dc:80:e7:ee:55:3f:93:62:57:e4:
a5:f0:55:3d:0b:92:50:78:3f:55:a8:71:c5:1a:e3:36:b0:ab:
de:95:9c:b9:30:55:e6:1d:3d:65:10:c6:79:14:cb:f2:7e:93:
bf:56:bd:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6BO5FlsH0//Wd9hLPjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh
MzIyYTkwHhcNMjYwMzI5MTIwMDM0WhcNMjYwMzMwMTIwMDM0WjAzMTEwLwYDVQQD
EygzMGI3YTY5ZTU0N2Q0ZTQyNTc1M2I3ZmUyYjVlOTNhMzY3NjE4NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WekifVyUKgHsdA4uG2m0OYJ9oLB
qokTyAH5noMb5hOMe4/Ri1Wiv+6Y8eeoC43E0AZLNVPLSthHFQWoiWnKpv7aPiuk
KJ4mgUuBKpOj101izqo88BeGa5OvAza7XlN5YiRB9aV7CDyvRtuhVVF8H4Ze8qhn
n5fLeXr0ZxDo/NDmb5dmViu+6nsfbqmhzJ305MnxxlhCFUA6QStrRymbnpH1yIEr
OOqgg1fbmVjgoH4URdRhyE9htHKcV2DqfhYX6RfdTtp9Ldn2gBPWOvhxDZdMVaaN
rC6c5vgGeToBg+1clL716leq/M+oJfyPBZHRpZNNX5IxxCtB2zXNlSrBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDC3pp5UfU5CV1O3/itek6NnYYbeMB8GA1UdIwQY
MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt
MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw
LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACO7hEhyR
LnuazM0+rQn/EyKC1uThQb+2+9z3T+XEYMNFwpydet3aSdMftWGyPY+pOPHbXFsI
yeZPjW5BZUBeX6buU25M2iI6cj4H7eZBUE2UzmVgg/1+wfdXNuYNmpkNTVGnEO+m
61CMZDq3XQJOl9vTFCuL6bB24/+5Zq+HULAma5ddIuGAGfTr5gY/+9iw09K9Audg
QdMBYR6YnHeKDiVMMtnlaRTdd6oUR7tuPMGVb96fZjeWcEOcQmnmIYWJKu3jB/et
XTbcGrwByjLcgOfuVT+TYlfkpfBVPQuSUHg/VahxxRrjNrCr3pWcuTBV5h09ZRDG
eRTL8n6Tv1a95g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:53 2026 by rpki-client