Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: vuUQiGtU3rJG3BTwUb90G2LXaPFgr+42JVk4pTJdQBI=
Subject key identifier: FC:A9:56:8D:25:0A:33:C3:81:6F:C4:0C:FD:F1:39:F8:AE:D1:96:20
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019D2A724565457C6D309B181FADC073592A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:24 +0000
Manifest this update: Thu 26 Mar 2026 14:00:24 +0000
Manifest next update: Fri 27 Mar 2026 14:00:24 +0000
Files and hashes: 1: LgvbuVV_52WynAHYpwvRHpZVnNI.roa (hash: 2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: f1gqA6msibetpuIEUWft3RNMBhgxu+EN64hD9pb/eZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:45:65:45:7c:6d:30:9b:18:1f:ad:c0:73:59:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Mar 26 14:00:24 2026 GMT
Not After : Mar 27 14:00:24 2026 GMT
Subject: CN=fca9568d250a33c3816fc40cfdf139f8aed19620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:09:2b:19:88:07:17:c7:98:66:03:7b:77:
5c:0e:3e:bc:f6:67:95:2b:2a:d5:54:19:6d:7b:d6:
87:8c:65:d0:43:2d:f4:ed:78:61:96:fe:4e:9d:93:
da:4f:d8:f2:3d:22:3b:d3:4e:86:43:4a:32:34:20:
2d:cd:e6:b4:8b:16:08:92:21:df:7f:02:bb:b3:f8:
45:53:fd:30:f0:19:13:7f:c9:9c:5b:cb:ae:ec:61:
c2:26:07:4a:39:05:10:d8:55:38:18:3b:04:7d:b1:
ee:fc:9e:3b:f2:d9:58:8a:fa:0b:fb:cf:88:0e:49:
b6:03:ea:f4:63:82:f0:07:c2:f4:ce:96:c8:bc:4c:
89:56:c4:b6:75:0b:d5:63:62:9d:ba:75:f7:d7:8e:
c2:43:2d:f2:29:4f:8f:3f:64:10:f5:4c:4f:96:1e:
3b:82:9b:16:35:52:7f:5b:5b:d7:b4:2b:67:30:12:
2e:2c:4a:c6:4b:bb:0b:18:94:8b:30:35:71:bd:dd:
c9:7f:a7:3c:b6:95:d5:3e:99:40:72:57:93:23:f9:
37:52:28:3f:d3:f7:e8:4c:aa:f4:02:b0:43:67:c4:
57:62:5e:5c:b2:01:d0:7c:06:d7:70:74:95:e1:64:
19:0a:2f:2c:ec:e5:ac:80:2c:c8:02:c2:d1:90:cc:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:56:8D:25:0A:33:C3:81:6F:C4:0C:FD:F1:39:F8:AE:D1:96:20
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f5:ab:f8:fa:10:f3:90:0b:42:ae:59:26:60:d0:92:f3:4b:
c2:1f:da:3b:55:42:57:cd:e5:be:ca:02:79:1b:a6:bc:10:f3:
5d:0d:61:b1:d0:a6:52:f3:18:bf:05:72:6b:74:e3:17:18:43:
51:ad:35:4d:06:15:c7:84:3a:27:ae:1e:80:a9:ec:b7:ba:33:
d7:35:ba:1a:ee:1d:3f:49:54:83:e8:30:1d:1f:0d:21:06:2e:
93:5e:81:6c:61:66:a6:66:d7:c4:68:a8:a2:e6:a3:5d:61:e6:
cf:d0:85:9a:89:b9:0b:27:ab:6a:fe:04:5f:3d:8c:13:ef:13:
2b:1e:cb:39:a1:5b:9e:03:bb:81:45:b5:09:94:77:db:41:0f:
dc:8a:ae:48:ec:86:25:e0:fc:19:50:51:88:8f:0f:e1:06:48:
85:d8:39:c1:27:88:23:78:27:b8:2a:bb:84:03:36:e4:12:2e:
40:b5:1a:79:3d:4f:4a:03:53:3d:0e:2f:a0:49:5d:de:9b:54:
cf:94:3b:97:f5:d0:57:47:e0:66:7c:93:d8:07:16:dd:e4:21:
87:ab:46:13:74:f8:9d:6a:92:5e:fb:a4:4c:e9:e8:98:4b:fc:
f0:00:97:ad:0d:f4:03:b9:18:b1:7c:d6:b1:2f:b3:6f:bd:20:
26:12:a1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qckVlRXxtMJsYH63Ac1kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjYwMzI2MTQwMDI0WhcNMjYwMzI3MTQwMDI0WjAzMTEwLwYDVQQD
EyhmY2E5NTY4ZDI1MGEzM2MzODE2ZmM0MGNmZGYxMzlmOGFlZDE5NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo24JKxmIBxfHmGYDe3dcDj689meV
KyrVVBlte9aHjGXQQy307Xhhlv5OnZPaT9jyPSI7006GQ0oyNCAtzea0ixYIkiHf
fwK7s/hFU/0w8BkTf8mcW8uu7GHCJgdKOQUQ2FU4GDsEfbHu/J478tlYivoL+8+I
Dkm2A+r0Y4LwB8L0zpbIvEyJVsS2dQvVY2KdunX3147CQy3yKU+PP2QQ9UxPlh47
gpsWNVJ/W1vXtCtnMBIuLErGS7sLGJSLMDVxvd3Jf6c8tpXVPplAcleTI/k3Uig/
0/foTKr0ArBDZ8RXYl5csgHQfAbXcHSV4WQZCi8s7OWsgCzIAsLRkMzieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPypVo0lCjPDgW/EDP3xOfiu0ZYgMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1
LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfWr+PoQ
85ALQq5ZJmDQkvNLwh/aO1VCV83lvsoCeRumvBDzXQ1hsdCmUvMYvwVya3TjFxhD
Ua01TQYVx4Q6J64egKnst7oz1zW6Gu4dP0lUg+gwHR8NIQYuk16BbGFmpmbXxGio
ouajXWHmz9CFmom5Cyerav4EXz2ME+8TKx7LOaFbngO7gUW1CZR320EP3IquSOyG
JeD8GVBRiI8P4QZIhdg5wSeII3gnuCq7hAM25BIuQLUaeT1PSgNTPQ4voEld3ptU
z5Q7l/XQV0fgZnyT2AcW3eQhh6tGE3T4nWqSXvukTOnomEv88ACXrQ30A7kYsXzW
sS+zb70gJhKh2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:50:35 2026 by rpki-client