Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: okWb4TGbAtERhlEG503KTnZboKPIlZIl0CKC4XfmOzE=
Subject key identifier: EA:21:F3:A4:13:AF:1B:FE:32:9A:BD:B3:18:E6:2F:83:F5:1B:09:A9
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019D3752E0EB32007E03345324DF3BBEB7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0EBF
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: c9mCUK1kASkBJ9RnVMKgUijcVplyCbNMl2TFZS+jpRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e0:eb:32:00:7e:03:34:53:24:df:3b:be:b7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=ea21f3a413af1bfe329abdb318e62f83f51b09a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:d1:d7:47:ba:97:78:8e:b7:41:e8:6e:72:
5e:f5:a3:f0:f8:5f:98:7e:7f:e5:ec:02:cb:76:94:
d3:f4:fb:33:da:ad:0e:bc:e2:1b:c4:22:bd:75:34:
8c:d6:60:30:df:13:5e:c4:fb:80:7e:e7:91:29:a9:
fe:2e:ff:82:8d:27:e9:07:7a:81:8c:26:fc:9a:2b:
da:76:06:6a:21:16:d4:0d:03:ed:ca:1d:da:76:e3:
7f:2c:fb:6e:1a:44:b4:8a:4c:e6:7b:f7:a8:4c:83:
1d:e4:00:47:71:0f:4b:54:be:bd:1b:6a:30:78:42:
47:c4:56:a5:8e:4a:4e:79:f9:73:6d:52:d3:04:ac:
2f:66:7b:1e:c9:1a:84:b3:6a:ed:1d:7b:c9:0f:91:
61:aa:f4:9d:6c:82:a1:3c:ed:4b:c5:49:9a:76:48:
51:02:a4:98:27:d9:85:bc:b8:6f:4b:dd:2b:99:e1:
46:c2:d5:fd:34:0c:25:d5:d0:0f:3a:06:6a:87:87:
60:3f:f1:af:c3:66:44:51:ef:bd:df:57:bc:c0:bd:
cc:fc:b3:7b:37:07:28:80:46:e4:47:dc:cb:25:e4:
9c:56:10:28:8b:96:2d:d2:b7:74:9b:28:81:31:03:
37:82:47:49:e5:d8:0f:1e:ac:be:09:b2:29:cd:1a:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:F3:A4:13:AF:1B:FE:32:9A:BD:B3:18:E6:2F:83:F5:1B:09:A9
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:95:d9:57:03:03:73:ff:11:be:eb:37:f0:b4:22:4b:40:fe:
a6:6c:0c:f4:87:8b:a1:e4:ec:88:b1:0c:44:fe:9d:4c:46:fc:
10:2f:7d:4a:ee:cb:ae:2f:4b:5e:58:db:4d:91:8b:8f:82:80:
ce:67:a6:a1:ad:0f:06:f9:a6:32:8e:7c:b8:e0:cd:20:49:22:
dc:12:c3:a6:83:fc:b1:6c:97:3f:97:41:e5:c6:95:ce:4f:73:
28:00:93:9b:51:fc:4b:4b:71:af:60:c3:1b:fe:06:86:6c:91:
1e:e7:3a:08:38:28:e1:8f:21:28:2e:98:87:0b:0f:f4:b2:18:
ff:e8:e6:f4:0f:05:bb:22:5a:31:20:de:78:43:5d:0f:74:20:
53:1a:71:7f:ce:a5:f7:cf:94:dc:e2:26:b7:de:37:e6:c3:8e:
a8:ad:a8:c1:54:02:cf:fb:aa:d7:2c:44:3c:ef:64:83:d9:e5:
bf:8f:6a:e1:a4:96:ce:fe:fc:21:79:44:51:7f:9e:15:34:97:
75:f9:46:04:51:87:d9:11:77:ad:1e:b1:ca:25:90:4e:92:37:
8a:13:5e:f3:9c:f6:f3:78:71:47:9e:15:f0:a6:2b:80:7d:39:
86:42:f2:56:3e:4d:4c:fd:14:50:ec:44:79:b5:94:b6:1a:96:
8b:26:98:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UuDrMgB+AzRTJN87vrfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI2MDBiZjFjYzkyMTZhZTZmZTE2OWExZTlkNTQxOGFk
OTNhMjIwHhcNMjYwMzI5MDIwMTExWhcNMjYwMzMwMDIwMTExWjAzMTEwLwYDVQQD
EyhlYTIxZjNhNDEzYWYxYmZlMzI5YWJkYjMxOGU2MmY4M2Y1MWIwOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLHR10e6l3iOt0HobnJe9aPw+F+Y
fn/l7ALLdpTT9Psz2q0OvOIbxCK9dTSM1mAw3xNexPuAfueRKan+Lv+CjSfpB3qB
jCb8mivadgZqIRbUDQPtyh3aduN/LPtuGkS0ikzme/eoTIMd5ABHcQ9LVL69G2ow
eEJHxFaljkpOeflzbVLTBKwvZnseyRqEs2rtHXvJD5FhqvSdbIKhPO1LxUmadkhR
AqSYJ9mFvLhvS90rmeFGwtX9NAwl1dAPOgZqh4dgP/Gvw2ZEUe+931e8wL3M/LN7
NwcogEbkR9zLJeScVhAoi5Yt0rd0myiBMQM3gkdJ5dgPHqy+CbIpzRrNQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoh86QTrxv+Mpq9sxjmL4P1GwmpMB8GA1UdIwQY
MBaAFGNCYAvxzJIWrm/haaHp1UGK2ToiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYt
NzMxMjA2M2ZmYTdmLzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYtNzMxMjA2M2ZmYTdm
LzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5XZVwMD
c/8Rvus38LQiS0D+pmwM9IeLoeTsiLEMRP6dTEb8EC99Su7Lri9LXljbTZGLj4KA
zmemoa0PBvmmMo58uODNIEki3BLDpoP8sWyXP5dB5caVzk9zKACTm1H8S0txr2DD
G/4GhmyRHuc6CDgo4Y8hKC6YhwsP9LIY/+jm9A8FuyJaMSDeeENdD3QgUxpxf86l
98+U3OImt9435sOOqK2owVQCz/uq1yxEPO9kg9nlv49q4aSWzv78IXlEUX+eFTSX
dflGBFGH2RF3rR6xyiWQTpI3ihNe85z283hxR54V8KYrgH05hkLyVj5NTP0UUOxE
ebWUthqWiyaYnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client