Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: L2ZAgt8Eq8GPhy3/QVWrwYDxwCKw9VHjQrSz6Wmt69E=
Subject key identifier: 39:0B:F9:5E:32:F9:8F:9C:35:0E:16:F2:FB:70:16:2B:D3:1E:52:3E
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019CADFE621361DC04FB5F34EF095F0197C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 03FB
Signing time: Mon 02 Mar 2026 10:00:55 +0000
Manifest this update: Mon 02 Mar 2026 10:00:55 +0000
Manifest next update: Tue 03 Mar 2026 10:00:55 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: 5f2pCwU+wPuFpJkTq9EtOx/CgoE+tMOF4eAhFQBSU1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:62:13:61:dc:04:fb:5f:34:ef:09:5f:01:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Mar 2 10:00:55 2026 GMT
Not After : Mar 3 10:00:55 2026 GMT
Subject: CN=390bf95e32f98f9c350e16f2fb70162bd31e523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:3e:47:ee:b2:7f:46:c0:4e:86:f7:45:39:
d2:88:77:95:2f:de:01:2a:09:dc:1c:84:b9:10:7b:
b9:f3:8c:98:1e:b6:a5:bf:bf:38:d0:5d:5a:fd:1e:
42:f2:eb:81:91:61:7d:b9:40:b5:e7:e5:7e:47:48:
3b:be:b1:18:f9:fa:b5:4c:e0:ba:fd:21:8e:33:9f:
a8:dc:0d:fd:00:73:19:73:d1:e3:7e:5a:00:ff:3a:
18:52:02:d0:86:fa:b8:53:bb:56:58:c0:39:8d:6e:
d8:cb:01:7a:ea:04:e7:ed:07:3d:30:c7:f7:ce:27:
e9:2e:2c:e3:87:bc:59:7a:dd:59:28:c5:7a:98:cb:
d8:ab:d7:4b:45:63:ab:2c:6c:1b:f8:01:db:6e:42:
37:65:13:53:b8:aa:5e:f3:cb:2d:ac:13:a4:17:49:
79:94:89:0a:af:07:54:a6:7c:ef:17:4c:aa:a9:3d:
5a:a9:8d:9d:1e:57:06:27:48:d1:97:e6:41:3a:ea:
db:93:10:62:87:a4:95:8c:4f:2c:1d:81:f1:08:52:
7d:04:7d:f0:b2:e8:74:3d:34:5c:57:01:5e:2d:ee:
96:83:cf:51:0a:29:ab:cc:55:88:f6:b8:12:92:d8:
be:d9:d8:06:36:37:43:76:92:5c:b2:5e:01:d9:d2:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:F9:5E:32:F9:8F:9C:35:0E:16:F2:FB:70:16:2B:D3:1E:52:3E
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:11:7a:f6:e1:91:f1:c7:d4:82:c6:6f:5b:2b:7f:42:01:00:
12:3b:f0:0f:5b:f0:d6:97:ea:6a:0f:a8:25:a4:2d:7d:92:84:
fa:7e:fe:55:d3:97:90:7b:4a:5e:4b:80:2c:51:0a:2a:99:f0:
a6:52:89:11:2d:0b:ab:81:17:e2:80:25:40:b3:63:98:93:e9:
9e:00:e5:0f:6c:e7:ef:ad:3d:07:c3:0f:96:f9:25:06:0a:fe:
8d:4d:c5:95:77:0e:c3:88:17:42:b7:bb:ba:f5:85:cf:dc:f3:
f2:df:75:13:9d:3a:4a:73:d2:3a:54:c6:30:e2:4d:65:57:05:
87:94:f8:52:64:9c:72:a9:08:3e:0d:01:59:75:6c:bf:b9:46:
a5:9c:af:75:c9:bf:2e:b3:b2:42:a8:31:ed:76:0e:77:5a:e4:
99:d7:58:3a:a3:60:fe:57:f0:21:4f:77:55:2a:15:37:43:f7:
6c:33:f6:7d:41:3f:c4:2c:44:4b:d7:eb:82:b0:60:22:4e:cb:
c0:f3:2c:cb:f7:44:62:06:93:c4:84:fc:c8:59:bd:dc:f6:53:
ec:61:b1:fe:37:78:fd:a6:cb:a0:7f:66:e5:fd:66:41:e7:80:
10:78:9e:02:12:e9:44:cd:0a:cd:8f:ca:92:48:24:87:24:c1:
84:44:02:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/mITYdwE+1807wlfAZfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5
ZTViNjQwHhcNMjYwMzAyMTAwMDU1WhcNMjYwMzAzMTAwMDU1WjAzMTEwLwYDVQQD
EygzOTBiZjk1ZTMyZjk4ZjljMzUwZTE2ZjJmYjcwMTYyYmQzMWU1MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTc+R+6yf0bATob3RTnSiHeVL94B
KgncHIS5EHu584yYHralv7840F1a/R5C8uuBkWF9uUC15+V+R0g7vrEY+fq1TOC6
/SGOM5+o3A39AHMZc9HjfloA/zoYUgLQhvq4U7tWWMA5jW7YywF66gTn7Qc9MMf3
zifpLizjh7xZet1ZKMV6mMvYq9dLRWOrLGwb+AHbbkI3ZRNTuKpe88strBOkF0l5
lIkKrwdUpnzvF0yqqT1aqY2dHlcGJ0jRl+ZBOurbkxBih6SVjE8sHYHxCFJ9BH3w
suh0PTRcVwFeLe6Wg89RCimrzFWI9rgSkti+2dgGNjdDdpJcsl4B2dJj3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkL+V4y+Y+cNQ4W8vtwFivTHlI+MB8GA1UdIwQY
MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt
ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw
LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthF69uGR
8cfUgsZvWyt/QgEAEjvwD1vw1pfqag+oJaQtfZKE+n7+VdOXkHtKXkuALFEKKpnw
plKJES0Lq4EX4oAlQLNjmJPpngDlD2zn7609B8MPlvklBgr+jU3FlXcOw4gXQre7
uvWFz9zz8t91E506SnPSOlTGMOJNZVcFh5T4UmSccqkIPg0BWXVsv7lGpZyvdcm/
LrOyQqgx7XYOd1rkmddYOqNg/lfwIU93VSoVN0P3bDP2fUE/xCxES9frgrBgIk7L
wPMsy/dEYgaTxIT8yFm93PZT7GGx/jd4/abLoH9m5f1mQeeAEHieAhLpRM0KzY/K
kkgkhyTBhEQCHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:51 2026 by rpki-client