Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: 2pug6/Mw1yFgruBh925hAWnJiEP2mrsElGhNSGrCF+s=
Subject key identifier: 6F:71:97:CD:24:B8:84:7B:1B:4A:89:94:5F:72:17:4F:24:33:16:BB
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019D27A8F0CFA44BE8BB3B9A5F383B15909A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 0545
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 2xzFC8OMEZNAn3qw1vFdwvFNhEfphUroJahQpE/FYq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f0:cf:a4:4b:e8:bb:3b:9a:5f:38:3b:15:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=6f7197cd24b8847b1b4a89945f72174f243316bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:a3:04:1e:37:fa:c5:c3:55:21:1c:d2:2f:
b1:6d:63:c0:cf:f5:31:0a:ca:fe:8e:33:f6:a6:53:
40:82:0b:4f:c5:70:7b:2b:73:bb:0b:4c:53:0a:49:
df:c9:82:02:90:92:35:38:2a:0c:1c:c4:fc:cb:f1:
a3:2f:01:c8:47:38:6d:65:ec:9c:72:62:db:e1:b8:
da:4d:e0:11:31:02:3f:7d:90:93:56:f7:3b:97:32:
33:93:94:70:d1:de:32:4d:8f:fe:1f:c6:8e:3b:35:
4c:fb:43:76:fb:c1:97:f9:a0:ef:97:12:19:3f:9e:
71:5b:90:e5:90:eb:8b:84:0e:cc:16:52:fa:62:bf:
35:72:ba:b4:ab:6c:ee:bd:a7:33:39:06:cb:14:4c:
28:35:15:39:b6:22:0c:fc:a9:5c:bf:1e:77:ed:df:
5c:bd:e0:a3:80:97:0e:57:1a:7d:71:ae:02:0e:c1:
ad:1a:30:ba:0a:61:1f:3d:9f:90:39:60:b4:0d:9d:
a6:00:c1:be:b0:29:75:b1:52:24:a5:34:48:0f:c6:
fb:40:65:fc:3a:c2:01:14:da:23:5e:71:ed:0c:0a:
18:26:3e:f0:4b:9f:24:22:15:5b:66:d8:a1:16:cb:
49:8c:3f:f5:da:8c:6f:94:d8:c8:fc:94:26:66:1d:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:97:CD:24:B8:84:7B:1B:4A:89:94:5F:72:17:4F:24:33:16:BB
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:fa:07:d9:fd:df:d5:ce:4a:3b:cd:9f:02:03:81:a7:24:
f1:62:91:da:c2:cd:4b:41:0d:c4:28:2a:4e:71:a2:b3:c4:ef:
fe:c6:97:7f:b1:08:fc:ca:e3:be:d9:a6:ac:43:cc:6e:a9:64:
ce:24:96:56:dd:61:a4:3c:10:9a:e5:cb:27:9f:35:11:7d:86:
5c:ab:5e:46:60:03:ac:55:a9:db:fc:3d:bc:de:d6:98:73:13:
94:f3:fc:b8:85:c5:a9:cc:a6:3f:c4:6a:bf:de:a0:fd:8e:52:
49:fb:65:98:09:ae:1b:ee:4d:0b:6c:fe:5c:af:c0:06:44:a8:
1e:66:d6:e1:2e:9b:75:a7:36:e2:c5:e4:8b:57:95:50:00:34:
e7:9a:f4:b1:6a:b8:40:b9:07:4f:4b:84:5f:22:2e:17:31:62:
ca:8a:a9:e0:ce:a6:59:ad:85:db:c8:6c:b3:05:4c:4b:d4:7c:
37:39:ad:40:33:a1:4c:6e:44:38:11:52:78:b4:e3:22:9b:97:
29:8c:65:d2:cd:da:2c:d2:0b:f1:08:f3:b2:28:e8:12:f1:88:
45:a1:63:bf:8a:8c:f7:47:f7:c7:4e:e0:aa:97:25:d7:83:3e:
fa:96:7a:40:0d:33:0e:61:86:4c:fd:53:36:aa:83:5b:03:74:
54:c8:a8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPDPpEvouzuaXzg7FZCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzIzMzk3ZDZlNTI5ZGZmMDZjN2NmMTRkMTc2MGQ2ZTcw
NmFhNmYwHhcNMjYwMzI2MDEwMTE2WhcNMjYwMzI3MDEwMTE2WjAzMTEwLwYDVQQD
Eyg2ZjcxOTdjZDI0Yjg4NDdiMWI0YTg5OTQ1ZjcyMTc0ZjI0MzMxNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO6jBB43+sXDVSEc0i+xbWPAz/Ux
Csr+jjP2plNAggtPxXB7K3O7C0xTCknfyYICkJI1OCoMHMT8y/GjLwHIRzhtZeyc
cmLb4bjaTeARMQI/fZCTVvc7lzIzk5Rw0d4yTY/+H8aOOzVM+0N2+8GX+aDvlxIZ
P55xW5DlkOuLhA7MFlL6Yr81crq0q2zuvaczOQbLFEwoNRU5tiIM/Klcvx537d9c
veCjgJcOVxp9ca4CDsGtGjC6CmEfPZ+QOWC0DZ2mAMG+sCl1sVIkpTRID8b7QGX8
OsIBFNojXnHtDAoYJj7wS58kIhVbZtihFstJjD/12oxvlNjI/JQmZh0L4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9xl80kuIR7G0qJlF9yF08kMxa7MB8GA1UdIwQY
MBaAFGEyM5fW5Snf8Gx88U0XYNbnBqpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEt
ZWYzM2Q4NWE0YTg2LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iYTM5MWItY2I4OS00ZTIxLTk0NGEtZWYzM2Q4NWE0YTg2
LzEvWVRJemw5YmxLZF93Ykh6eFRSZGcxdWNHcW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlH6B9n9
39XOSjvNnwIDgack8WKR2sLNS0ENxCgqTnGis8Tv/saXf7EI/MrjvtmmrEPMbqlk
ziSWVt1hpDwQmuXLJ581EX2GXKteRmADrFWp2/w9vN7WmHMTlPP8uIXFqcymP8Rq
v96g/Y5SSftlmAmuG+5NC2z+XK/ABkSoHmbW4S6bdac24sXki1eVUAA055r0sWq4
QLkHT0uEXyIuFzFiyoqp4M6mWa2F28hsswVMS9R8NzmtQDOhTG5EOBFSeLTjIpuX
KYxl0s3aLNIL8QjzsijoEvGIRaFjv4qM90f3x07gqpcl14M++pZ6QA0zDmGGTP1T
NqqDWwN0VMioUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:12 2026 by rpki-client