Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: oaOEtnTV1K/oUzvlcNSXYkbnB92Lmofrke/zOEKVz/c=
Subject key identifier: 37:27:A2:B5:61:52:87:E4:A6:30:09:13:8A:29:DD:42:C3:C3:8A:C3
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019CACB4A5CD130D8C2DA8A63D3256ABBD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 14DC
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: z2snwPnCGGePckNfLB8kY/xmmVsMhuOiP6WlCWP8hf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a5:cd:13:0d:8c:2d:a8:a6:3d:32:56:ab:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=3727a2b5615287e4a63009138a29dd42c3c38ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:89:55:b7:e0:95:86:64:ae:a6:8d:b2:81:
0d:bd:23:e8:9b:49:b3:8b:ad:59:08:8e:ab:3a:48:
bc:71:2d:0e:58:50:e0:a9:f9:6b:ee:46:74:e1:a7:
13:f0:97:05:16:71:4b:09:00:7c:04:d3:38:a0:35:
03:52:45:4c:d9:2f:74:b6:de:0d:1b:c0:6d:fa:7d:
08:1c:88:cf:5a:13:2e:53:55:a8:f5:17:73:07:fe:
a6:6d:b5:e9:a9:8f:dd:ad:c0:47:d9:df:6c:59:ee:
d0:26:29:4d:a0:98:4c:48:06:dd:02:7d:35:62:0e:
72:12:c9:b1:fc:ec:6c:89:af:c9:b5:11:fe:0d:43:
87:6c:da:9f:09:a7:26:17:54:d6:d1:48:9c:c5:82:
eb:c6:8e:22:44:07:6b:bd:15:19:d5:45:55:b5:ec:
28:74:97:ad:d6:98:63:bb:65:85:92:92:db:31:2a:
26:1a:80:54:d7:cb:d1:5e:19:16:16:3e:77:4c:84:
15:b1:99:ca:0f:79:73:b5:9a:77:2f:a0:d7:d0:a4:
ce:72:67:54:61:ec:45:e1:00:80:f5:c7:b1:ee:0d:
85:fa:dd:0e:55:25:85:80:c9:3b:2a:63:73:1a:1f:
43:e4:20:da:7a:cc:56:39:da:d7:56:e4:fe:32:5c:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:27:A2:B5:61:52:87:E4:A6:30:09:13:8A:29:DD:42:C3:C3:8A:C3
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:91:ad:76:d7:e1:ef:b9:97:47:7d:07:5d:11:92:a7:4a:
65:95:3c:d9:40:13:a3:27:05:00:49:9e:85:0e:5e:5d:c8:9f:
27:a1:53:69:92:46:38:e1:a8:6a:2a:df:0b:07:31:4d:a0:e1:
39:fc:31:0a:72:64:1e:f7:c8:c9:55:e3:b0:a3:09:64:06:e8:
d7:32:3d:a0:01:0f:51:c8:95:49:61:7e:43:65:38:85:00:e2:
30:fd:f4:19:f2:a5:a0:75:bd:ba:56:12:cc:4a:d8:6f:1f:a8:
94:9d:6a:45:cc:02:6b:42:71:81:98:96:e8:06:35:c8:97:82:
3b:0c:f3:d2:08:a1:c2:15:de:75:97:44:a3:88:fd:d3:75:51:
40:69:b8:1f:17:48:1c:d2:fe:b3:a8:73:34:b6:e2:f5:34:d1:
31:1a:06:a1:75:16:47:ee:ee:4d:4b:33:4b:e1:19:7b:36:a3:
89:04:5a:05:7c:87:1f:f3:b0:b1:54:12:eb:76:67:59:19:df:
ad:75:ac:9c:71:ee:88:3c:43:a4:cc:77:8d:4c:b5:c7:72:98:
99:83:74:05:a5:c5:6c:77:da:96:0a:1f:de:4e:2a:46:5a:f7:
43:06:95:19:b0:20:75:ca:38:65:41:d8:4b:b2:0f:0d:a9:68:
1e:58:81:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystKXNEw2MLaimPTJWq72UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjYwMzAyMDQwMDQ1WhcNMjYwMzAzMDQwMDQ1WjAzMTEwLwYDVQQD
EygzNzI3YTJiNTYxNTI4N2U0YTYzMDA5MTM4YTI5ZGQ0MmMzYzM4YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EaJVbfglYZkrqaNsoENvSPom0mz
i61ZCI6rOki8cS0OWFDgqflr7kZ04acT8JcFFnFLCQB8BNM4oDUDUkVM2S90tt4N
G8Bt+n0IHIjPWhMuU1Wo9RdzB/6mbbXpqY/drcBH2d9sWe7QJilNoJhMSAbdAn01
Yg5yEsmx/Oxsia/JtRH+DUOHbNqfCacmF1TW0UicxYLrxo4iRAdrvRUZ1UVVtewo
dJet1phju2WFkpLbMSomGoBU18vRXhkWFj53TIQVsZnKD3lztZp3L6DX0KTOcmdU
YexF4QCA9cex7g2F+t0OVSWFgMk7KmNzGh9D5CDaesxWOdrXVuT+MlyknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcnorVhUofkpjAJE4op3ULDw4rDMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu2RrXbX
4e+5l0d9B10RkqdKZZU82UAToycFAEmehQ5eXcifJ6FTaZJGOOGoairfCwcxTaDh
OfwxCnJkHvfIyVXjsKMJZAbo1zI9oAEPUciVSWF+Q2U4hQDiMP30GfKloHW9ulYS
zErYbx+olJ1qRcwCa0JxgZiW6AY1yJeCOwzz0gihwhXedZdEo4j903VRQGm4HxdI
HNL+s6hzNLbi9TTRMRoGoXUWR+7uTUszS+EZezajiQRaBXyHH/OwsVQS63ZnWRnf
rXWsnHHuiDxDpMx3jUy1x3KYmYN0BaXFbHfalgof3k4qRlr3QwaVGbAgdco4ZUHY
S7IPDaloHliBzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:09 2026 by rpki-client