Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: /2PEvAlzjH1nGK5w7X3mourKUGTv4XaDva+fK5LYUmE=
Subject key identifier: 13:47:A9:08:D8:FA:04:94:EC:91:D1:BC:6F:EF:8A:27:9C:A3:71:A9
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019CADC7E591A4FFDEF835CB00F481CE1B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0D71
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: H77Z9UcwjjFJuHOffms5V+Y2PkAqaM8r1lPXjbmBb2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e5:91:a4:ff:de:f8:35:cb:00:f4:81:ce:1b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=1347a908d8fa0494ec91d1bc6fef8a279ca371a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:4b:fa:eb:47:29:ea:e1:73:e3:45:07:ae:
2e:2a:6b:8e:9e:70:85:0b:5c:01:08:40:ec:77:90:
e2:54:ac:38:35:5b:c2:91:e2:b2:9c:bb:11:82:35:
13:f0:4a:c5:b7:3b:e3:05:e8:eb:7d:0c:4c:b0:db:
f4:40:19:91:6f:bc:a6:7c:24:ea:c5:54:34:69:cc:
9f:0d:45:e4:bf:91:e0:13:ff:b9:2c:3f:62:31:55:
80:1d:c4:f1:45:7f:2a:d5:dc:ee:8b:00:0c:b9:e5:
2b:34:48:04:4e:3f:33:d3:61:63:74:0e:91:1f:c8:
43:8b:11:de:64:0a:d5:74:1d:97:91:f5:69:ef:ea:
56:ba:f2:54:53:9c:6b:2d:11:ac:0f:1c:ff:b6:ee:
34:4c:4d:72:57:19:f1:eb:2e:12:2a:f2:44:ee:2c:
80:1a:6b:47:38:32:88:ef:39:1b:19:2a:d9:e1:58:
e1:df:6d:b4:4b:b3:d8:9c:d3:9b:f8:8e:bb:fe:19:
06:a4:59:9a:94:cc:eb:30:bc:c9:7f:cb:bb:94:02:
dd:ff:34:83:6c:15:a7:99:23:c5:46:81:55:88:cf:
66:60:ff:f3:7f:f2:68:f9:0c:c7:32:29:9f:0d:68:
21:e2:d8:55:36:d4:8e:73:c5:b3:af:f1:c1:a8:b8:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:47:A9:08:D8:FA:04:94:EC:91:D1:BC:6F:EF:8A:27:9C:A3:71:A9
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:66:8f:8e:40:b0:97:8c:f4:d6:2e:d8:75:a9:cb:34:2c:
45:27:12:1a:14:23:be:89:2f:6f:ca:11:c0:7f:bf:70:50:a9:
ab:ba:c3:a3:12:c1:65:5c:42:44:e4:0a:b9:e0:c5:c8:0d:56:
63:5c:d8:da:6b:4b:93:ea:7f:57:e4:cb:28:a2:81:fb:2b:f2:
a5:32:e4:f5:78:21:03:a0:9b:a5:47:77:0b:76:92:19:09:b7:
fe:52:ce:45:4a:03:bd:cb:e2:cb:73:97:7b:66:e6:1c:b7:f2:
39:b7:58:41:61:15:b0:ce:83:a4:11:94:03:1b:20:f0:b4:ee:
8c:af:7c:6a:62:09:c3:46:2e:84:71:5b:0f:26:36:93:08:c2:
8c:7e:56:9c:ce:c4:fb:41:ea:63:2b:2a:7d:ed:2a:77:c8:43:
e7:0d:b8:01:db:df:92:46:e3:19:a7:73:b2:e6:69:ef:f6:87:
3e:52:ad:ec:4f:d8:46:71:28:02:a0:06:b2:e3:ad:22:36:f0:
8a:e6:9e:ca:fa:67:25:5d:cc:47:2b:bc:d3:0b:ac:d0:9b:f1:
00:66:00:c0:22:ff:f0:d8:c2:1f:61:3c:ec:b6:a4:89:24:f3:
45:89:aa:b9:aa:fd:8f:bb:25:42:63:ee:7b:ac:38:99:89:b6:
21:ec:be:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx+WRpP/e+DXLAPSBzhtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3
NDYzOTcwHhcNMjYwMzAyMDkwMTI0WhcNMjYwMzAzMDkwMTI0WjAzMTEwLwYDVQQD
EygxMzQ3YTkwOGQ4ZmEwNDk0ZWM5MWQxYmM2ZmVmOGEyNzljYTM3MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn69L+utHKerhc+NFB64uKmuOnnCF
C1wBCEDsd5DiVKw4NVvCkeKynLsRgjUT8ErFtzvjBejrfQxMsNv0QBmRb7ymfCTq
xVQ0acyfDUXkv5HgE/+5LD9iMVWAHcTxRX8q1dzuiwAMueUrNEgETj8z02FjdA6R
H8hDixHeZArVdB2XkfVp7+pWuvJUU5xrLRGsDxz/tu40TE1yVxnx6y4SKvJE7iyA
GmtHODKI7zkbGSrZ4Vjh3220S7PYnNOb+I67/hkGpFmalMzrMLzJf8u7lALd/zSD
bBWnmSPFRoFViM9mYP/zf/Jo+QzHMimfDWgh4thVNtSOc8Wzr/HBqLimdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNHqQjY+gSU7JHRvG/viieco3GpMB8GA1UdIwQY
MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt
ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh
LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ05mj45A
sJeM9NYu2HWpyzQsRScSGhQjvokvb8oRwH+/cFCpq7rDoxLBZVxCROQKueDFyA1W
Y1zY2mtLk+p/V+TLKKKB+yvypTLk9XghA6CbpUd3C3aSGQm3/lLORUoDvcviy3OX
e2bmHLfyObdYQWEVsM6DpBGUAxsg8LTujK98amIJw0YuhHFbDyY2kwjCjH5WnM7E
+0HqYysqfe0qd8hD5w24AdvfkkbjGadzsuZp7/aHPlKt7E/YRnEoAqAGsuOtIjbw
iuaeyvpnJV3MRyu80wus0JvxAGYAwCL/8NjCH2E87LakiSTzRYmquar9j7slQmPu
e6w4mYm2Iey+gA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:10 2026 by rpki-client