Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: psS4dKaSTK7dbD1ql02C+HUjgYTJtXBDDKXKagmVvAs=
Subject key identifier: 29:6A:1D:A0:22:74:B6:60:B7:CB:6B:38:92:43:6D:6B:0B:22:6C:7D
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019D2996D889A4AA33328071B20B5C0483AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:00:44 +0000
Manifest this update: Thu 26 Mar 2026 10:00:44 +0000
Manifest next update: Fri 27 Mar 2026 10:00:44 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: ruBf9kCsUVZlo27PrNSsjkRsIbtzIZPGPfQR76AA06g=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d8:89:a4:aa:33:32:80:71:b2:0b:5c:04:83:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Mar 26 10:00:44 2026 GMT
Not After : Mar 27 10:00:44 2026 GMT
Subject: CN=296a1da02274b660b7cb6b3892436d6b0b226c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:c6:26:2c:30:e0:84:bf:3d:fa:23:ad:2a:
ea:76:23:1e:71:54:97:82:7c:b3:5f:78:44:8f:51:
f4:93:85:05:2c:75:a0:8a:21:30:08:48:3d:96:d8:
e3:5a:b5:39:50:b0:74:6e:8d:90:13:b8:79:59:c4:
75:ed:fb:86:1c:ca:7e:ed:a8:42:50:40:4b:fe:74:
c2:e0:6e:d3:b2:14:57:53:72:5c:12:6f:64:f4:a4:
ca:a1:3c:ae:39:c3:8e:40:92:1d:28:a5:fb:a4:42:
5a:57:f1:6f:a1:2f:bf:da:00:3c:cf:44:91:24:55:
c9:20:f1:bc:b4:21:8e:53:4b:54:62:2b:a4:7a:79:
04:f0:81:2e:2a:21:d5:78:8d:fd:f0:c5:30:c8:9b:
2a:56:ba:98:bf:4f:c0:1a:30:68:7f:28:76:94:e1:
07:a7:a7:eb:cb:e9:6f:4c:bc:47:d5:54:35:cf:1e:
6a:47:9a:bd:78:f8:9c:e0:52:b2:34:1c:51:45:cb:
ba:f4:56:b3:14:34:22:48:a1:7a:2f:c4:48:69:77:
fa:8b:1e:41:ed:dc:62:e9:a9:0e:4e:18:30:58:e2:
f9:94:95:e8:f4:c8:56:f3:be:96:fc:69:1f:62:50:
42:f5:90:ac:3b:4f:6a:9a:c5:f7:cc:2a:ba:9f:10:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:1D:A0:22:74:B6:60:B7:CB:6B:38:92:43:6D:6B:0B:22:6C:7D
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:dd:e0:e9:70:cd:bc:1c:64:37:59:2e:21:39:7e:85:d3:
45:c7:e0:bf:17:8a:cd:75:64:9e:28:82:f2:90:b4:50:5e:cb:
ff:19:da:2f:31:91:f9:5d:fb:6b:b6:05:af:e6:cc:06:35:5f:
7b:79:71:7d:59:48:2f:ac:00:5e:cb:47:48:f3:8f:4c:7d:6d:
e8:b5:91:24:84:66:2b:42:59:d6:fd:40:cf:11:f6:d2:1a:4f:
59:85:48:78:63:c9:85:9a:b6:bf:08:9d:f8:92:8a:d4:b7:df:
f8:c8:32:91:5a:ba:26:ff:be:21:61:4b:72:bd:86:8e:0e:af:
e5:88:70:a3:ab:e0:d6:d6:12:59:70:d9:64:1a:2f:59:67:ad:
6d:7a:a0:f0:4f:f2:b7:69:1a:63:86:eb:34:d9:5f:b1:eb:bb:
78:00:0e:fa:31:51:93:af:6b:0c:96:ea:43:31:1a:a9:8a:f6:
64:98:50:3e:63:a0:5f:5c:04:cc:d0:1d:86:45:97:82:5d:1a:
d1:e0:e6:f7:db:68:5f:22:6f:15:42:4f:ba:7e:1d:7d:17:65:
f0:f1:25:87:6d:58:b8:2a:b9:12:74:1b:6d:f1:2e:0c:00:6a:
b9:4a:fa:c4:c7:b9:06:3a:9e:6c:2c:65:9f:e1:91:ad:ed:9c:
7b:6a:30:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pltiJpKozMoBxsgtcBIOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjYwMzI2MTAwMDQ0WhcNMjYwMzI3MTAwMDQ0WjAzMTEwLwYDVQQD
EygyOTZhMWRhMDIyNzRiNjYwYjdjYjZiMzg5MjQzNmQ2YjBiMjI2YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19HGJiww4IS/PfojrSrqdiMecVSX
gnyzX3hEj1H0k4UFLHWgiiEwCEg9ltjjWrU5ULB0bo2QE7h5WcR17fuGHMp+7ahC
UEBL/nTC4G7TshRXU3JcEm9k9KTKoTyuOcOOQJIdKKX7pEJaV/FvoS+/2gA8z0SR
JFXJIPG8tCGOU0tUYiukenkE8IEuKiHVeI398MUwyJsqVrqYv0/AGjBofyh2lOEH
p6fry+lvTLxH1VQ1zx5qR5q9ePic4FKyNBxRRcu69FazFDQiSKF6L8RIaXf6ix5B
7dxi6akOThgwWOL5lJXo9MhW876W/GkfYlBC9ZCsO09qmsX3zCq6nxADZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClqHaAidLZgt8trOJJDbWsLImx9MB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt/d4Olw
zbwcZDdZLiE5foXTRcfgvxeKzXVkniiC8pC0UF7L/xnaLzGR+V37a7YFr+bMBjVf
e3lxfVlIL6wAXstHSPOPTH1t6LWRJIRmK0JZ1v1AzxH20hpPWYVIeGPJhZq2vwid
+JKK1Lff+MgykVq6Jv++IWFLcr2Gjg6v5Yhwo6vg1tYSWXDZZBovWWetbXqg8E/y
t2kaY4brNNlfseu7eAAO+jFRk69rDJbqQzEaqYr2ZJhQPmOgX1wEzNAdhkWXgl0a
0eDm99toXyJvFUJPun4dfRdl8PElh21YuCq5EnQbbfEuDABquUr6xMe5BjqebCxl
n+GRre2ce2owXQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:53 2026 by rpki-client