Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: 5MKAnFD8HrsuWumKTUef19qSUnAZ0/DIX9mUISB52i8=
Subject key identifier: 29:2C:8D:BD:1D:8A:EE:B8:92:A4:9C:AF:85:6A:E5:C2:89:A9:1B:80
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019D25BA8B92AAFE4DFF34C58E4877287A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 07D5
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: 4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa (hash: new/XwK7LDSQZ29SSLejk2ZrF4hRfXE6iD6WKPwdrVA=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: 8VUCHDq+9hr2D8Ofice97h8rQ2Ilhc2oMbaVFAwtXBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8b:92:aa:fe:4d:ff:34:c5:8e:48:77:28:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=292c8dbd1d8aeeb892a49caf856ae5c289a91b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:30:2e:02:37:8f:6a:28:58:ec:a0:3c:43:
f4:6a:50:ce:02:0b:ea:d0:2a:08:ed:7b:6e:dc:12:
c2:85:9c:f0:b6:af:ff:a4:e1:72:6e:02:6a:c6:aa:
57:12:af:53:a8:11:64:3d:6e:0a:f3:71:4b:e5:2a:
37:e8:35:9b:4f:74:66:83:ed:ac:35:f7:1b:15:c0:
f9:10:c2:1b:2f:22:1d:97:12:a0:0b:7c:43:0c:14:
dc:aa:7b:7a:ae:6a:96:51:eb:85:bb:69:d9:ea:ab:
dd:07:ba:44:a5:bd:cc:47:9e:ee:05:9a:19:21:7c:
b7:ce:69:5a:b6:ce:f0:5b:0e:a3:c7:87:ab:df:5c:
f1:4e:2d:e9:b8:e5:70:3d:ce:63:e2:d1:9f:87:29:
f0:9d:9c:88:8f:35:04:0d:91:ba:1f:02:01:fa:3a:
55:06:8f:70:d6:20:2a:75:cb:e0:e0:04:b1:ed:d4:
87:c4:15:eb:e4:97:67:0f:bd:42:5c:71:38:eb:8a:
90:9d:86:9d:6a:d8:e8:f4:74:a7:85:09:13:88:ea:
5d:c8:22:a0:43:8e:80:e7:0e:a1:e7:6f:2c:0c:67:
50:95:bc:7a:a9:79:d2:51:a7:21:39:5a:57:a4:37:
6f:a5:e1:31:99:07:5b:e4:81:58:c1:94:c3:9e:e0:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:8D:BD:1D:8A:EE:B8:92:A4:9C:AF:85:6A:E5:C2:89:A9:1B:80
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:86:ec:fb:8f:d1:3d:59:2f:eb:98:a4:90:f4:54:5d:47:5f:
c1:0d:75:60:26:4b:a9:57:ab:b7:30:78:98:36:e7:bd:fc:a0:
7e:a5:cf:a3:e7:4c:53:48:8d:89:29:65:ab:60:87:13:40:62:
0e:4e:6c:62:51:23:88:db:5f:96:98:9a:b8:23:0d:8a:bc:2d:
7f:90:1c:20:18:58:ac:ca:b6:7a:73:dd:c4:be:10:ce:5e:6c:
f6:1f:3a:43:d6:ae:d8:5f:e8:4f:30:b6:ce:08:e1:13:05:88:
71:aa:40:47:57:44:ef:c7:1f:b1:e9:28:35:95:bd:10:c9:8b:
41:a9:40:92:d8:e2:57:7c:16:74:ea:61:a3:d8:8a:49:98:7f:
ae:fc:4b:10:b2:55:47:ea:cb:5a:e0:3d:a2:42:9f:7a:c6:11:
9b:1c:6a:ee:6b:50:96:b4:62:44:56:e1:a6:7a:7f:62:a3:4d:
f7:e0:43:0e:b0:08:42:14:5c:cc:ab:b6:35:37:1d:c1:2c:58:
56:7e:70:21:1c:99:48:79:5c:f0:d7:8a:64:33:27:20:e2:9f:
c6:5d:80:c5:42:e7:51:a9:22:5a:f3:b4:22:26:08:0e:93:90:
9d:92:05:d9:2b:a0:2f:63:eb:ec:ac:b5:4a:c7:d6:62:14:1f:
79:9b:c7:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luouSqv5N/zTFjkh3KHodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2
MTQwMDMwHhcNMjYwMzI1MTYwMTE1WhcNMjYwMzI2MTYwMTE1WjAzMTEwLwYDVQQD
EygyOTJjOGRiZDFkOGFlZWI4OTJhNDljYWY4NTZhZTVjMjg5YTkxYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikcwLgI3j2ooWOygPEP0alDOAgvq
0CoI7Xtu3BLChZzwtq//pOFybgJqxqpXEq9TqBFkPW4K83FL5So36DWbT3Rmg+2s
NfcbFcD5EMIbLyIdlxKgC3xDDBTcqnt6rmqWUeuFu2nZ6qvdB7pEpb3MR57uBZoZ
IXy3zmlats7wWw6jx4er31zxTi3puOVwPc5j4tGfhynwnZyIjzUEDZG6HwIB+jpV
Bo9w1iAqdcvg4ASx7dSHxBXr5JdnD71CXHE464qQnYadatjo9HSnhQkTiOpdyCKg
Q46A5w6h528sDGdQlbx6qXnSUachOVpXpDdvpeExmQdb5IFYwZTDnuCBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCksjb0diu64kqScr4Vq5cKJqRuAMB8GA1UdIwQY
MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt
OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1
LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4bs+4/R
PVkv65ikkPRUXUdfwQ11YCZLqVertzB4mDbnvfygfqXPo+dMU0iNiSllq2CHE0Bi
Dk5sYlEjiNtflpiauCMNirwtf5AcIBhYrMq2enPdxL4Qzl5s9h86Q9au2F/oTzC2
zgjhEwWIcapAR1dE78cfsekoNZW9EMmLQalAktjiV3wWdOpho9iKSZh/rvxLELJV
R+rLWuA9okKfesYRmxxq7mtQlrRiRFbhpnp/YqNN9+BDDrAIQhRczKu2NTcdwSxY
Vn5wIRyZSHlc8NeKZDMnIOKfxl2AxULnUakiWvO0IiYIDpOQnZIF2SugL2Pr7Ky1
SsfWYhQfeZvHJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:43 2026 by rpki-client