Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: xB8+hzBg1wzUtTKKEpXi4H0o68C4n3+LeR3MqWBbY2A=
Subject key identifier: 17:D0:58:73:7F:56:76:0E:6C:87:2E:F4:99:1D:C9:95:4E:29:31:8F
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019CAAC64DAE9F833C2B9A7F7A2A3CA964AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0B7B
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: kjsVYWtMUpy3eI+P/cti/UIU21kKcSLtlRJImO0tggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4d:ae:9f:83:3c:2b:9a:7f:7a:2a:3c:a9:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=17d058737f56760e6c872ef4991dc9954e29318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:d0:a5:19:b1:98:78:49:c8:5a:e8:5e:ae:
a7:2e:39:3a:85:3a:df:8d:43:f1:1f:9f:fd:6a:2f:
05:a0:ea:60:61:65:d3:fc:b9:b7:f3:ec:8e:fb:bd:
56:1e:4b:39:49:12:53:16:e5:e4:c7:d2:00:70:19:
eb:1b:75:0f:79:81:6d:e8:e9:16:23:7a:db:18:51:
6c:9f:ce:bc:31:84:28:0f:0a:52:9f:11:1b:9f:c4:
5b:70:12:e5:28:fa:19:ea:4d:83:61:c7:6f:83:2d:
cc:84:f9:4f:72:08:a0:bf:41:86:a8:f1:3c:d2:5e:
d1:6d:82:2a:f4:d1:84:28:68:60:1f:8f:2f:42:f5:
22:1f:12:1c:0c:8f:5c:fa:a4:fa:0a:7c:4e:ec:ca:
27:a5:7c:b4:95:17:76:ec:97:68:6f:f4:76:67:eb:
a7:c0:1b:9a:0d:12:ab:e1:5e:79:1b:ce:fd:4f:89:
8c:b4:c0:e3:ff:76:c3:72:c0:c1:b0:43:9c:e8:37:
ec:68:7b:98:a0:bc:26:f9:d0:bd:41:40:21:b1:ba:
22:05:e3:98:33:b0:20:80:0b:17:dd:39:c8:78:1d:
40:0e:3e:ed:39:5a:55:1e:37:5e:73:49:30:03:ee:
bc:64:82:d2:08:c7:70:c9:c2:64:78:8f:0a:63:5b:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:58:73:7F:56:76:0E:6C:87:2E:F4:99:1D:C9:95:4E:29:31:8F
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:8f:a4:ce:03:90:1e:9b:c3:32:20:b5:90:6d:68:4e:3b:
9a:2c:8e:c1:b3:bb:7f:ea:8e:91:d1:b4:cf:a2:78:e9:9f:63:
3e:34:3e:27:f5:35:13:58:90:1a:93:e1:56:90:0f:54:30:09:
0d:e5:94:6b:99:8e:07:9a:2f:c9:6b:d8:1d:15:21:ef:e8:b3:
f4:95:fb:d2:6e:f1:8c:5f:87:2a:da:b8:7c:43:97:04:cb:12:
7c:4b:52:76:88:25:40:31:9a:c6:28:a6:15:b9:bc:4a:67:fe:
96:33:d0:41:68:ef:09:8c:45:59:a9:fa:4f:46:f8:a5:29:df:
39:47:63:c4:c5:50:39:32:a5:f3:92:f3:0d:6a:cf:16:b9:35:
53:27:cd:8e:99:0f:2f:38:d9:85:45:05:40:82:07:5d:1c:44:
d4:40:76:13:ef:63:97:a1:9f:17:6e:07:0f:ef:c0:b6:8a:04:
79:55:c9:ab:b7:30:11:af:a0:38:f2:45:1e:03:58:98:01:31:
5a:f0:73:e5:3c:78:b7:37:13:db:08:8f:1f:d5:bd:74:e9:6e:
36:35:72:b0:43:ae:1d:9a:a4:ac:ed:6c:fe:01:ef:85:b8:84:
e3:ed:f3:cd:f9:37:c3:97:1e:c9:2b:cd:8b:23:4e:11:57:e6:
ca:85:26:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxk2un4M8K5p/eio8qWSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjYwMzAxMTkwMDQ4WhcNMjYwMzAyMTkwMDQ4WjAzMTEwLwYDVQQD
EygxN2QwNTg3MzdmNTY3NjBlNmM4NzJlZjQ5OTFkYzk5NTRlMjkzMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI7QpRmxmHhJyFroXq6nLjk6hTrf
jUPxH5/9ai8FoOpgYWXT/Lm38+yO+71WHks5SRJTFuXkx9IAcBnrG3UPeYFt6OkW
I3rbGFFsn868MYQoDwpSnxEbn8RbcBLlKPoZ6k2DYcdvgy3MhPlPcgigv0GGqPE8
0l7RbYIq9NGEKGhgH48vQvUiHxIcDI9c+qT6CnxO7MonpXy0lRd27Jdob/R2Z+un
wBuaDRKr4V55G879T4mMtMDj/3bDcsDBsEOc6DfsaHuYoLwm+dC9QUAhsboiBeOY
M7AggAsX3TnIeB1ADj7tOVpVHjdec0kwA+68ZILSCMdwycJkeI8KY1ukrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfQWHN/VnYObIcu9JkdyZVOKTGPMB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgD+PpM4D
kB6bwzIgtZBtaE47miyOwbO7f+qOkdG0z6J46Z9jPjQ+J/U1E1iQGpPhVpAPVDAJ
DeWUa5mOB5ovyWvYHRUh7+iz9JX70m7xjF+HKtq4fEOXBMsSfEtSdoglQDGaxiim
Fbm8Smf+ljPQQWjvCYxFWan6T0b4pSnfOUdjxMVQOTKl85LzDWrPFrk1UyfNjpkP
LzjZhUUFQIIHXRxE1EB2E+9jl6GfF24HD+/AtooEeVXJq7cwEa+gOPJFHgNYmAEx
WvBz5Tx4tzcT2wiPH9W9dOluNjVysEOuHZqkrO1s/gHvhbiE4+3zzfk3w5ceySvN
iyNOEVfmyoUmsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:51 2026 by rpki-client