Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: ozJJB+2lSCRAEFYgQ96JnUuJa38Ua9tBq3/H4CbvrYo=
Subject key identifier: EA:EA:FC:2F:1E:64:99:AC:F0:0E:3C:E8:59:47:DB:64:14:E7:1C:73
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019D29971969FBA92BC3BAB24EE3F1228977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:01 +0000
Manifest this update: Thu 26 Mar 2026 10:01:01 +0000
Manifest next update: Fri 27 Mar 2026 10:01:01 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: ZnRHsYkPL94Qzomefxyni177WHfSdP1SSGVZxqkOirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:19:69:fb:a9:2b:c3:ba:b2:4e:e3:f1:22:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Mar 26 10:01:01 2026 GMT
Not After : Mar 27 10:01:01 2026 GMT
Subject: CN=eaeafc2f1e6499acf00e3ce85947db6414e71c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:82:4a:38:7d:53:d1:70:8c:99:db:d3:a2:
b6:e1:d5:bf:9b:6f:e2:5d:bf:32:d2:27:93:ae:5f:
0d:08:f5:99:73:86:ae:5b:47:8a:6b:a6:09:95:32:
3d:42:84:db:b4:50:f7:32:bf:01:45:94:6d:c1:f0:
79:e6:05:4b:3e:4d:3e:0e:c5:c8:82:92:55:15:1a:
3e:79:68:91:0f:bd:13:82:8e:d2:d8:23:ba:47:0f:
ce:39:11:b9:5e:c1:a2:7f:01:08:2d:ce:4c:41:cf:
cd:0d:c5:46:23:78:59:17:77:71:5f:30:5b:c7:ee:
f1:f6:51:85:b2:e6:26:92:b1:a0:d4:fc:c9:ab:ba:
95:1e:6c:17:78:4d:2d:cf:83:e5:e5:8d:93:4a:9c:
88:8d:be:3d:43:49:ae:77:5d:84:8a:6a:5c:76:69:
b2:a6:81:a8:5e:1c:2f:88:af:3b:47:2b:cf:65:08:
ae:36:93:5f:b2:c9:cc:f1:84:b5:18:f1:88:52:b6:
c8:da:ed:ff:73:d5:13:66:90:34:1d:17:79:81:82:
f7:96:5c:a9:75:1d:4b:fe:3d:11:fc:7b:10:65:e4:
0e:c2:5e:4a:2a:10:b5:1e:ef:c5:4c:35:4a:ba:9c:
97:0c:d9:5f:c8:93:a2:f9:bf:26:d1:04:17:65:3d:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:FC:2F:1E:64:99:AC:F0:0E:3C:E8:59:47:DB:64:14:E7:1C:73
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:fb:b5:7c:b5:f9:16:ce:7a:db:0b:a6:d3:d4:c1:4d:f5:59:
00:0d:33:f2:c6:b5:bc:b3:d4:c9:14:08:0a:97:d2:05:3a:7c:
bd:b1:5a:41:e1:3d:41:07:e1:b3:65:9d:94:a0:63:78:52:74:
a7:29:9a:cd:27:ec:61:31:4e:bf:63:2e:f7:65:94:e3:4c:8c:
24:cb:14:8e:bd:63:6f:19:68:1d:d4:b9:6b:80:06:f6:ed:10:
99:41:f5:d6:1f:86:b1:9e:98:1d:0e:ef:0b:bc:a8:7e:4d:05:
97:c9:b9:8d:c8:4d:a9:12:95:9b:83:61:52:9d:68:33:ae:bd:
6a:b0:6e:19:7e:17:b9:1e:57:e7:da:42:62:cf:90:0a:0f:97:
be:1c:86:8f:5b:62:66:a5:01:7c:34:9f:9c:09:69:ca:f6:f0:
f1:78:cf:7f:13:f3:c9:df:34:ef:de:ec:02:51:a2:42:71:4d:
06:5e:d0:a7:82:6b:16:ae:40:f5:f1:65:fd:2b:10:45:a6:36:
78:07:18:fb:b2:8b:a5:d3:e4:f5:b7:de:92:8a:79:bb:17:90:
f3:75:48:22:f6:09:e8:ca:e3:65:73:97:ea:2c:76:14:ef:f6:
54:ef:4e:0e:be:74:08:2a:8e:05:90:4f:66:f3:13:73:f5:d7:
17:63:d9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxlp+6krw7qyTuPxIol3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzNhMDM4OTU5Mjc1NmU0MTVjZGUzNDhhYmJjMjQzMTJi
MDJkZjYwHhcNMjYwMzI2MTAwMTAxWhcNMjYwMzI3MTAwMTAxWjAzMTEwLwYDVQQD
EyhlYWVhZmMyZjFlNjQ5OWFjZjAwZTNjZTg1OTQ3ZGI2NDE0ZTcxYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uGCSjh9U9FwjJnb06K24dW/m2/i
Xb8y0ieTrl8NCPWZc4auW0eKa6YJlTI9QoTbtFD3Mr8BRZRtwfB55gVLPk0+DsXI
gpJVFRo+eWiRD70Tgo7S2CO6Rw/OORG5XsGifwEILc5MQc/NDcVGI3hZF3dxXzBb
x+7x9lGFsuYmkrGg1PzJq7qVHmwXeE0tz4Pl5Y2TSpyIjb49Q0mud12Eimpcdmmy
poGoXhwviK87RyvPZQiuNpNfssnM8YS1GPGIUrbI2u3/c9UTZpA0HRd5gYL3llyp
dR1L/j0R/HsQZeQOwl5KKhC1Hu/FTDVKupyXDNlfyJOi+b8m0QQXZT2x3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrq/C8eZJms8A486FlH22QU5xxzMB8GA1UdIwQY
MBaAFMgzoDiVknVuQVzeNIq7wkMSsC32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAt
OWYzMDc1NzQwNTFlLzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAtOWYzMDc1NzQwNTFl
LzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvu1fLX5
Fs562wum09TBTfVZAA0z8sa1vLPUyRQICpfSBTp8vbFaQeE9QQfhs2WdlKBjeFJ0
pymazSfsYTFOv2Mu92WU40yMJMsUjr1jbxloHdS5a4AG9u0QmUH11h+GsZ6YHQ7v
C7yofk0Fl8m5jchNqRKVm4NhUp1oM669arBuGX4XuR5X59pCYs+QCg+XvhyGj1ti
ZqUBfDSfnAlpyvbw8XjPfxPzyd80797sAlGiQnFNBl7Qp4JrFq5A9fFl/SsQRaY2
eAcY+7KLpdPk9bfekop5uxeQ83VIIvYJ6MrjZXOX6ix2FO/2VO9ODr50CCqOBZBP
ZvMTc/XXF2PZ2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:41 2026 by rpki-client