Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: 2FdhkME3HMslaCAvFoAHaKiEdFLBAAmN9oY0potazR8=
Subject key identifier: 5D:74:31:1E:89:FB:2A:B7:1D:B9:00:4C:E1:37:16:C5:1F:35:1E:8F
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019D2772695C63B283A1953C7829AE252AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 104C
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: YLEFTIF0JjQBaAxM3L7IrojWNqwwgRr4Vj+uVBydp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:69:5c:63:b2:83:a1:95:3c:78:29:ae:25:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=5d74311e89fb2ab71db9004ce13716c51f351e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:c8:b9:28:15:a7:0c:dd:50:21:ef:b4:43:
11:80:d4:0f:4f:09:6f:79:96:ae:6d:59:bd:42:44:
aa:67:ba:d7:f4:49:bc:93:cb:5d:65:ca:ca:a5:86:
6e:99:13:9c:36:bf:1b:c9:a0:96:e4:f1:c9:79:71:
6a:53:e8:23:b0:37:64:62:5b:6c:75:99:17:bf:02:
2b:fa:20:80:ed:38:d6:62:15:f4:0d:da:9e:5b:de:
77:08:9c:82:2d:a2:f7:89:1a:0c:b1:5d:8f:e7:2b:
ec:1e:35:3a:59:be:ac:30:c1:9e:49:fd:d6:37:0b:
21:6d:dc:37:64:3d:9c:ed:8e:f8:72:b9:37:cc:9c:
be:df:ea:86:ca:28:2b:26:f3:d3:c9:9d:1d:7f:a8:
02:4f:43:4a:a4:1c:a8:82:32:68:2e:6f:34:6e:bd:
ab:f0:67:bd:4b:80:65:e6:8a:cf:e2:01:a4:e7:07:
9c:6b:62:ef:cf:06:fa:11:1a:b6:45:32:8a:e5:34:
af:89:83:ab:bc:66:0d:09:1f:12:e2:27:ae:6c:21:
b1:b3:64:ff:c1:56:7f:27:c8:e0:9f:a8:c4:da:de:
49:36:19:bb:91:b6:bb:a5:9c:48:43:9f:01:90:d5:
c1:5b:cf:3b:33:ff:df:8c:1c:b2:64:dc:cf:17:73:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:74:31:1E:89:FB:2A:B7:1D:B9:00:4C:E1:37:16:C5:1F:35:1E:8F
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a8:40:9c:8f:81:c8:5b:68:a5:df:cb:53:f9:e4:2f:e1:3a:
6f:42:34:40:c8:c0:a4:c5:61:19:51:86:37:24:28:8a:6b:06:
ae:f2:6d:3b:1b:3d:39:fa:3f:59:2c:2a:97:0a:99:2e:0f:86:
91:80:06:50:85:77:d5:78:5b:59:83:be:fe:79:5b:a2:93:00:
00:d3:ae:07:20:78:f4:25:6b:e3:bc:84:ad:38:44:f2:53:13:
56:be:d8:aa:fa:55:2e:ec:36:5a:f0:a5:cb:73:a4:92:91:dc:
44:63:53:37:04:bd:92:bf:42:c0:8a:b9:f1:6e:9f:60:24:ce:
65:9b:02:4d:9d:22:81:e3:d2:e3:2f:9e:ae:0b:ac:07:6a:2a:
30:cc:e1:9f:82:08:ee:be:5b:5f:5e:fa:b7:db:6d:03:bb:68:
0a:77:84:b6:33:fb:53:99:a3:32:51:be:aa:9e:11:b8:37:a3:
e3:29:54:e2:ac:94:70:56:e0:ac:fe:79:79:68:1a:1f:02:87:
78:4f:8d:d8:14:07:12:05:b5:1a:d7:2f:1e:44:8d:7e:a4:de:
ef:3c:7e:39:d8:6b:2d:e5:92:4b:52:14:12:16:91:fb:38:ca:
43:da:89:72:10:6a:bd:9c:d5:cf:f1:61:55:5d:a7:b5:e6:ad:
cf:a4:7a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncmlcY7KDoZU8eCmuJSqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjYwMzI2MDAwMTQyWhcNMjYwMzI3MDAwMTQyWjAzMTEwLwYDVQQD
Eyg1ZDc0MzExZTg5ZmIyYWI3MWRiOTAwNGNlMTM3MTZjNTFmMzUxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSTIuSgVpwzdUCHvtEMRgNQPTwlv
eZaubVm9QkSqZ7rX9Em8k8tdZcrKpYZumROcNr8byaCW5PHJeXFqU+gjsDdkYlts
dZkXvwIr+iCA7TjWYhX0DdqeW953CJyCLaL3iRoMsV2P5yvsHjU6Wb6sMMGeSf3W
Nwshbdw3ZD2c7Y74crk3zJy+3+qGyigrJvPTyZ0df6gCT0NKpByogjJoLm80br2r
8Ge9S4Bl5orP4gGk5weca2Lvzwb6ERq2RTKK5TSviYOrvGYNCR8S4ieubCGxs2T/
wVZ/J8jgn6jE2t5JNhm7kba7pZxIQ58BkNXBW887M//fjByyZNzPF3P3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF10MR6J+yq3HbkATOE3FsUfNR6PMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqhAnI+B
yFtopd/LU/nkL+E6b0I0QMjApMVhGVGGNyQoimsGrvJtOxs9Ofo/WSwqlwqZLg+G
kYAGUIV31XhbWYO+/nlbopMAANOuByB49CVr47yErThE8lMTVr7YqvpVLuw2WvCl
y3OkkpHcRGNTNwS9kr9CwIq58W6fYCTOZZsCTZ0igePS4y+ergusB2oqMMzhn4II
7r5bX176t9ttA7toCneEtjP7U5mjMlG+qp4RuDej4ylU4qyUcFbgrP55eWgaHwKH
eE+N2BQHEgW1GtcvHkSNfqTe7zx+OdhrLeWSS1IUEhaR+zjKQ9qJchBqvZzVz/Fh
VV2nteatz6R6IA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:32 2026 by rpki-client