Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: Wp8oQ2HMwlMZrBfdtbEM5SswDeYGHKAwDBam8fHc3hw=
Subject key identifier: AE:C1:BA:03:BD:9E:5B:E5:E9:43:65:87:9A:E8:1B:CA:67:B7:E8:80
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 019CAB6B4B9F99E48755FD1BC43A7F3A48FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0D39
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: 7se8g0fI+98N/P54H7IS8J03YWSRKlrtRF+FiZKU/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4b:9f:99:e4:87:55:fd:1b:c4:3a:7f:3a:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=aec1ba03bd9e5be5e94365879ae81bca67b7e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:03:a6:78:da:2e:d0:fc:14:2a:1f:fc:81:
28:96:1a:dc:2b:46:31:cb:1a:dc:72:f3:fa:53:86:
8e:77:98:26:a9:ae:59:6b:7d:24:dd:24:1d:a3:99:
34:3e:ca:22:a9:2c:9a:77:e6:d4:a4:61:26:95:68:
4e:6d:eb:6b:01:aa:2c:40:c7:92:f6:9a:06:60:40:
65:dd:c4:20:8d:80:06:b9:f4:ce:d9:43:0c:b4:4e:
8a:3f:1b:13:40:8b:63:cd:71:35:7d:c0:eb:bc:b2:
93:92:0b:5a:f2:f8:f4:19:59:a0:df:e2:ef:9d:87:
e0:46:39:20:ea:24:80:7c:fe:bf:2a:b4:16:0c:31:
a4:5d:dc:ab:2f:a0:a5:5b:aa:ab:fe:b6:01:7f:26:
06:43:cd:64:6f:3e:f5:73:44:c0:31:68:05:30:c2:
d7:47:20:fb:6e:a3:d1:6a:c4:2f:77:55:29:1d:94:
0b:b5:8c:dd:e5:70:23:95:81:d3:c7:af:3b:50:75:
c8:bc:00:28:4a:2d:9d:26:c0:9d:fc:50:2e:3d:39:
e0:49:1d:bc:9a:03:f8:e8:38:3f:b4:ec:d7:b7:4b:
28:10:84:57:ce:6a:44:bf:47:b3:28:18:cb:d2:8a:
da:71:a8:94:8a:f2:54:62:83:17:bd:09:4a:5a:46:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:BA:03:BD:9E:5B:E5:E9:43:65:87:9A:E8:1B:CA:67:B7:E8:80
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:c2:d4:20:a5:34:e7:7f:f9:c6:e2:61:5e:f1:60:40:49:
35:73:58:f9:14:15:5e:96:6e:38:b3:a0:a5:61:2e:29:11:37:
6b:20:9f:d9:df:b5:fd:0f:23:32:ad:4b:af:d6:ea:4e:58:11:
c9:8e:a6:59:c2:98:f6:fc:50:1a:8b:5b:95:3a:ac:59:95:80:
b3:04:bc:3c:c3:d4:9d:0e:48:ff:b0:b8:72:a6:60:6c:c6:bf:
6d:c5:1e:25:b2:9f:2a:4f:4e:3d:cb:af:0e:a9:da:a7:73:a9:
d8:ee:38:ed:e1:8f:90:18:1c:f2:e1:18:6f:cc:d7:fa:41:84:
b2:fe:ce:dd:0e:5a:28:a8:de:42:b6:0b:14:86:f4:2b:60:3d:
8c:76:58:c5:89:10:bf:48:39:c9:bb:3c:fb:e0:84:86:ba:4c:
44:19:48:10:54:83:c1:c1:63:21:f0:34:18:e4:b3:36:52:04:
30:1d:20:7d:52:54:e9:02:9d:3f:0d:4e:ef:ab:c2:01:9d:4b:
5e:9a:9d:e9:5a:c6:a3:96:b1:49:97:ea:64:ba:5f:c5:7c:91:
bb:07:b6:3a:06:f8:79:89:01:3e:47:86:21:39:6d:03:7a:fb:
36:8d:dd:f5:80:2b:26:fa:46:47:15:cd:13:58:fc:f6:0a:34:
cb:f3:73:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0ufmeSHVf0bxDp/Okj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx
YzFjZTUwHhcNMjYwMzAxMjIwMTAxWhcNMjYwMzAyMjIwMTAxWjAzMTEwLwYDVQQD
EyhhZWMxYmEwM2JkOWU1YmU1ZTk0MzY1ODc5YWU4MWJjYTY3YjdlODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJsDpnjaLtD8FCof/IEolhrcK0Yx
yxrccvP6U4aOd5gmqa5Za30k3SQdo5k0PsoiqSyad+bUpGEmlWhObetrAaosQMeS
9poGYEBl3cQgjYAGufTO2UMMtE6KPxsTQItjzXE1fcDrvLKTkgta8vj0GVmg3+Lv
nYfgRjkg6iSAfP6/KrQWDDGkXdyrL6ClW6qr/rYBfyYGQ81kbz71c0TAMWgFMMLX
RyD7bqPRasQvd1UpHZQLtYzd5XAjlYHTx687UHXIvAAoSi2dJsCd/FAuPTngSR28
mgP46Dg/tOzXt0soEIRXzmpEv0ezKBjL0oracaiUivJUYoMXvQlKWkbDTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7BugO9nlvl6UNlh5roG8pnt+iAMB8GA1UdIwQY
MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt
YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz
LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/7C1CCl
NOd/+cbiYV7xYEBJNXNY+RQVXpZuOLOgpWEuKRE3ayCf2d+1/Q8jMq1Lr9bqTlgR
yY6mWcKY9vxQGotblTqsWZWAswS8PMPUnQ5I/7C4cqZgbMa/bcUeJbKfKk9OPcuv
Dqnap3Op2O447eGPkBgc8uEYb8zX+kGEsv7O3Q5aKKjeQrYLFIb0K2A9jHZYxYkQ
v0g5ybs8++CEhrpMRBlIEFSDwcFjIfA0GOSzNlIEMB0gfVJU6QKdPw1O76vCAZ1L
Xpqd6VrGo5axSZfqZLpfxXyRuwe2Ogb4eYkBPkeGITltA3r7No3d9YArJvpGRxXN
E1j89go0y/NzuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:04 2026 by rpki-client