
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: mFjrIr4mOCrQcuAFQRMeKC1QvDImm0vyi8naisN/7cs=
Subject key identifier: 11:95:AA:A9:AA:BD:D2:5E:D6:79:0B:F2:EA:92:35:6E:72:3B:BF:8E
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 019D2703A127F8C8FA0BD4E5E61B0CFE0CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 100F
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: mn+U+WVNUxn7UepO4foqNDHs5Tm+N7KAotcd2voI7EQ=)
2: gJQzhId802-YJNx0WWaWWkM-fD4.roa (hash: Lrav2MOtvej8ZsEdP9SgEjv5mWkDtP7CfAPS8l/cHkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a1:27:f8:c8:fa:0b:d4:e5:e6:1b:0c:fe:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=1195aaa9aabdd25ed6790bf2ea92356e723bbf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:6d:32:19:c8:99:a8:34:ee:1f:44:3a:13:
d2:cf:f0:c8:81:65:f7:4b:b9:c7:59:da:47:98:79:
df:6f:70:9e:8a:cb:39:1c:76:75:73:67:90:a1:f7:
de:9a:da:00:0a:5b:d9:7d:b2:7e:b6:7e:b2:79:ea:
18:ce:ef:bc:ed:26:13:56:6e:fe:48:66:b6:87:17:
2c:c6:48:be:25:e1:df:bd:ad:96:1c:ce:9e:68:18:
20:75:ef:62:02:9a:ea:38:67:b6:52:a7:c9:b8:bf:
1e:4a:35:67:90:52:87:0d:ad:4b:c1:a8:fa:c1:8e:
68:2b:b4:95:02:2a:28:6b:40:b2:5b:7c:9b:b7:5c:
a6:36:43:08:22:7d:d0:25:93:82:26:a1:7c:11:06:
fa:13:f7:22:90:03:8d:a7:d7:85:8f:ae:d9:81:10:
63:16:22:80:02:11:a9:7b:ff:80:b7:2f:0f:fe:41:
06:a7:c8:ef:61:5b:4b:34:a0:64:b0:95:83:a2:50:
a5:11:17:1f:d9:fc:f4:9d:22:4d:5b:bb:32:5e:3e:
07:36:d3:0f:21:f1:4d:7f:4f:58:e3:37:87:69:66:
84:89:ea:35:59:75:45:17:ca:ec:41:77:ee:e5:4e:
8b:e7:42:13:81:3c:42:0b:20:e7:d4:04:26:2c:f9:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:AA:A9:AA:BD:D2:5E:D6:79:0B:F2:EA:92:35:6E:72:3B:BF:8E
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:d6:a8:af:d1:0d:b6:db:4e:a1:c9:6a:58:e1:ea:26:fc:
7e:cb:72:6b:87:83:00:c5:99:1d:86:43:b0:20:da:a6:b8:d9:
e5:e8:2f:a5:5c:bf:99:9f:57:e6:2b:5e:b7:06:c0:f7:37:04:
2f:1d:6a:d7:2b:3c:75:4c:32:7f:d1:7b:f1:4e:c4:34:a8:4d:
c8:93:36:93:c0:4a:84:0a:19:cc:70:ca:22:31:fb:b2:45:e8:
8d:d5:27:a0:5b:78:3f:8a:38:12:7f:53:98:b9:93:0a:20:d6:
cf:d6:a6:a5:b4:1d:31:af:dd:ef:6f:e0:82:3f:b7:69:ca:fc:
8a:b4:95:89:98:68:bf:9e:04:d4:ee:bb:38:41:10:3d:35:00:
eb:c9:3c:ce:28:31:e5:ea:43:aa:e0:16:6b:5b:a9:ac:2e:f4:
07:14:4a:64:b9:21:66:b7:7c:68:41:58:99:79:88:19:34:5f:
f6:1e:2e:b6:b1:91:83:4e:91:0b:fa:1d:6e:15:60:ba:d6:ed:
0d:6b:8b:0c:52:bd:30:58:42:9e:43:b2:4b:21:dd:3c:99:9c:
2c:9a:84:86:d2:43:eb:b7:91:18:f8:25:45:5d:e3:0f:09:c7:
c4:03:0f:da:b7:4a:8d:a0:e2:93:f9:ba:6b:32:30:32:0b:c9:
6c:ac:fb:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6En+Mj6C9Tl5hsM/gz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjU4ZDVlZmEyYTBhM2MzNmM5MjM5Mzc0MjU4YTk4Zjdm
ZGEzODgwHhcNMjYwMzI1MjIwMDQyWhcNMjYwMzI2MjIwMDQyWjAzMTEwLwYDVQQD
EygxMTk1YWFhOWFhYmRkMjVlZDY3OTBiZjJlYTkyMzU2ZTcyM2JiZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA9tMhnImag07h9EOhPSz/DIgWX3
S7nHWdpHmHnfb3Ceiss5HHZ1c2eQoffemtoAClvZfbJ+tn6yeeoYzu+87SYTVm7+
SGa2hxcsxki+JeHfva2WHM6eaBggde9iAprqOGe2UqfJuL8eSjVnkFKHDa1Lwaj6
wY5oK7SVAiooa0CyW3ybt1ymNkMIIn3QJZOCJqF8EQb6E/cikAONp9eFj67ZgRBj
FiKAAhGpe/+Aty8P/kEGp8jvYVtLNKBksJWDolClERcf2fz0nSJNW7syXj4HNtMP
IfFNf09Y4zeHaWaEieo1WXVFF8rsQXfu5U6L50ITgTxCCyDn1AQmLPkUuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGVqqmqvdJe1nkL8uqSNW5yO7+OMB8GA1UdIwQY
MBaAFGFljV76Kgo8Nskjk3Qlipj3/aOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAt
ZGZlNmM1ZWIxZjdjLzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAtZGZlNmM1ZWIxZjdj
LzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFLWqK/R
DbbbTqHJaljh6ib8fstya4eDAMWZHYZDsCDaprjZ5egvpVy/mZ9X5itetwbA9zcE
Lx1q1ys8dUwyf9F78U7ENKhNyJM2k8BKhAoZzHDKIjH7skXojdUnoFt4P4o4En9T
mLmTCiDWz9ampbQdMa/d72/ggj+3acr8irSViZhov54E1O67OEEQPTUA68k8zigx
5epDquAWa1uprC70BxRKZLkhZrd8aEFYmXmIGTRf9h4utrGRg06RC/odbhVgutbt
DWuLDFK9MFhCnkOySyHdPJmcLJqEhtJD67eRGPglRV3jDwnHxAMP2rdKjaDik/m6
azIwMgvJbKz7VQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:44 2026 by rpki-client