Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: GxGrSN9aep9IDcAEydI4FJ7hq0g223K5q2zZN7N46JY=
Subject key identifier: FA:BD:AA:01:1B:B7:93:01:02:A9:9A:94:0B:1E:2B:4D:47:A2:17:93
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 019CAA8F9870B222D82C68FDE08BC6D0228C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 14C7
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: BmBBK0QtvLVON7vpeX+kMLZeZZRYEx3CtflSd0B/5Kk=)
2: y72QXlfn1iGh89QO3R6WPZp7awU.roa (hash: O6eU6r5oRWPIVud9+sofhzvQc+xlO3/W5yzIFE7k+e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:98:70:b2:22:d8:2c:68:fd:e0:8b:c6:d0:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=fabdaa011bb7930102a99a940b1e2b4d47a21793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:29:d3:f0:e8:b0:2f:a8:36:d1:b3:49:da:
36:6b:fc:3a:1f:4d:b3:4b:62:21:e0:d0:be:5a:1f:
3d:c9:0a:86:b8:46:36:5b:d8:76:f8:1e:27:ad:a2:
e0:0e:16:e6:bd:86:60:00:b9:93:59:8b:6b:68:4e:
9b:c8:d9:5b:d4:16:61:57:62:0f:06:b1:20:4f:c3:
e1:90:a1:e3:d7:c5:20:d3:93:6e:ab:a5:ed:9d:ed:
5b:ab:c7:43:7f:90:8b:1f:fa:74:a7:be:cd:30:41:
e4:87:3c:93:f8:4e:80:72:04:73:3c:1c:12:53:61:
1d:56:fb:b1:1d:a7:36:e2:d8:f5:77:5d:99:f9:c4:
aa:67:43:22:37:73:b4:30:2d:2d:cf:d2:28:a1:c7:
66:56:44:02:c5:4d:62:af:f2:5d:26:74:ce:30:88:
fc:da:bb:56:6c:29:7b:45:92:ff:a2:d7:a1:aa:e6:
90:5e:56:a4:c2:dd:a5:b1:ef:0c:47:22:91:5d:b4:
28:f1:bd:e5:85:05:fa:da:d2:7c:cc:6a:e2:e0:c5:
3e:ad:5b:f4:0a:12:5e:9a:6a:d0:11:37:bb:77:cc:
8e:80:3e:19:09:f6:0a:b0:15:eb:26:d0:17:5f:59:
fa:7e:cb:65:da:00:7f:0d:8b:a4:75:ca:28:10:2b:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:AA:01:1B:B7:93:01:02:A9:9A:94:0B:1E:2B:4D:47:A2:17:93
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:d9:e7:32:de:15:93:82:9a:1c:04:00:3c:d1:a6:bc:c5:
3c:08:a2:9b:da:ed:d0:f9:8e:e1:64:fd:72:01:26:0c:be:2a:
dd:75:37:69:b4:ba:d5:a8:e9:ce:cd:db:1a:4f:dc:4b:dc:8f:
ae:4a:f2:3d:9d:88:45:0d:c7:1c:5e:b0:5c:69:96:a1:23:d3:
df:b9:74:01:2f:f4:02:15:06:1d:12:24:71:ca:54:b9:60:94:
c5:f3:44:6d:67:be:e7:f3:9d:ea:4e:0c:57:02:68:2d:e2:a2:
df:c9:80:c7:89:b6:cd:c4:4d:ed:60:c2:b9:ac:ba:56:0b:8c:
f8:95:e5:c2:9f:0d:12:14:67:da:eb:cb:63:1f:1c:d4:5e:5e:
d8:17:ad:eb:6f:e3:db:b7:dd:bc:1f:44:4a:db:19:35:32:96:
81:b8:e2:6c:f8:84:ab:12:0a:7c:4a:3f:3a:d3:5a:47:ba:22:
4f:04:9f:4d:44:2f:10:c0:47:d1:eb:be:84:30:0b:7b:57:34:
85:87:b4:1b:a4:54:ae:68:06:1d:df:b1:ae:fb:e1:e5:c7:5f:
4a:58:2f:97:08:c3:fd:a5:fe:e6:bb:73:94:16:8a:bb:f2:aa:
76:9b:c8:42:89:03:d2:95:54:ba:26:82:fe:d9:80:39:2a:56:
fc:9f:13:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj5hwsiLYLGj94IvG0CKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk
NmIzOTAwHhcNMjYwMzAxMTgwMTAzWhcNMjYwMzAyMTgwMTAzWjAzMTEwLwYDVQQD
EyhmYWJkYWEwMTFiYjc5MzAxMDJhOTlhOTQwYjFlMmI0ZDQ3YTIxNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoQp0/DosC+oNtGzSdo2a/w6H02z
S2Ih4NC+Wh89yQqGuEY2W9h2+B4nraLgDhbmvYZgALmTWYtraE6byNlb1BZhV2IP
BrEgT8PhkKHj18Ug05Nuq6Xtne1bq8dDf5CLH/p0p77NMEHkhzyT+E6AcgRzPBwS
U2EdVvuxHac24tj1d12Z+cSqZ0MiN3O0MC0tz9IoocdmVkQCxU1ir/JdJnTOMIj8
2rtWbCl7RZL/otehquaQXlakwt2lse8MRyKRXbQo8b3lhQX62tJ8zGri4MU+rVv0
ChJemmrQETe7d8yOgD4ZCfYKsBXrJtAXX1n6fstl2gB/DYukdcooECuKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq9qgEbt5MBAqmalAseK01HoheTMB8GA1UdIwQY
MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt
Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4
LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhzZ5zLe
FZOCmhwEADzRprzFPAiim9rt0PmO4WT9cgEmDL4q3XU3abS61ajpzs3bGk/cS9yP
rkryPZ2IRQ3HHF6wXGmWoSPT37l0AS/0AhUGHRIkccpUuWCUxfNEbWe+5/Od6k4M
VwJoLeKi38mAx4m2zcRN7WDCuay6VguM+JXlwp8NEhRn2uvLYx8c1F5e2Bet62/j
27fdvB9EStsZNTKWgbjibPiEqxIKfEo/OtNaR7oiTwSfTUQvEMBH0eu+hDALe1c0
hYe0G6RUrmgGHd+xrvvh5cdfSlgvlwjD/aX+5rtzlBaKu/KqdpvIQokD0pVUuiaC
/tmAOSpW/J8TsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:46 2026 by rpki-client