Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
File: Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft (raw, json)
Hash identifier: BAWUT1VnODne5RUGm8pYX5c7sibJV2J+6O4bNfqRoqA=
Subject key identifier: A8:B5:69:40:91:CA:18:F9:32:93:5F:8C:9B:1D:ED:C4:1E:28:79:6A
Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Certificate serial: 019D27DFA8B0BC467CBC2F27462B7E1C0031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
Manifest number: 0214
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl (hash: FIrQgFGPkOlqRgyExOjp+9ixy1qZBM4NmEUpKdVAK4A=)
2: _e_Zokrtlt_aju5Wh034zgAkl8I.roa (hash: +uQejsCjn3rFp2s+ELCiuSbZ+f8sp3uWgsCAiuje2M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a8:b0:bc:46:7c:bc:2f:27:46:2b:7e:1c:00:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=a8b5694091ca18f932935f8c9b1dedc41e28796a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:cc:e8:da:e7:d8:84:50:43:9c:fc:67:52:
92:ff:f0:33:e5:9f:40:96:ab:6c:1d:2a:bf:0b:d8:
13:da:e2:a9:de:17:b6:3c:60:04:e8:f8:5e:a3:5a:
d5:73:e3:cb:2f:fb:2f:1f:82:e9:15:07:0c:69:28:
64:ee:0b:d3:1d:bb:e2:0d:d7:fe:35:c3:96:da:a0:
a1:4f:6b:10:e4:5f:d9:a2:06:09:fa:4a:3c:19:24:
29:8e:c1:36:60:e1:0c:86:ed:5a:de:68:b1:84:0e:
af:e8:05:1f:3b:86:97:48:72:38:92:96:46:85:5d:
52:31:2b:50:dd:ea:b9:dc:2e:04:f0:36:9c:1c:6a:
e7:b0:44:cc:c3:0f:0a:f9:e6:d9:17:94:91:5a:6a:
bb:bc:3d:79:48:f7:af:9b:79:4a:60:e3:64:26:2b:
0b:a6:0a:c2:01:75:f5:86:d0:c2:07:78:be:b8:a5:
e3:64:cf:37:ff:54:fa:d9:2a:06:d8:6e:b1:66:b2:
af:c9:b5:4e:b5:8d:8d:04:0c:12:fe:04:bc:dc:26:
04:61:28:52:49:42:41:9e:cf:af:eb:c7:e5:1c:1d:
ac:2f:21:98:a0:0b:29:69:ae:df:9e:88:65:1e:bb:
2e:fd:a6:98:67:03:1c:aa:73:2d:01:c9:d9:4c:86:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:69:40:91:CA:18:F9:32:93:5F:8C:9B:1D:ED:C4:1E:28:79:6A
X509v3 Authority Key Identifier:
keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:35:1d:22:7c:18:ce:2c:03:97:8f:da:88:da:c8:2a:24:fc:
b8:a1:af:33:7d:5b:7f:c2:99:77:48:44:19:0a:d6:31:d3:70:
94:ee:91:16:05:0d:86:cb:bf:2c:7f:2e:05:5d:5a:36:e9:9f:
e3:6e:8d:10:65:db:f5:55:b2:dd:34:1f:2a:6b:0d:2c:6b:94:
4a:8c:cc:6c:c8:ed:d9:cf:2c:24:19:83:73:08:32:dd:67:58:
32:b4:31:f2:bf:30:86:55:69:b7:63:ae:e4:e5:bc:09:dd:a8:
35:36:10:1f:95:10:70:3c:e1:d3:13:04:4e:25:29:98:69:5d:
f1:aa:6e:00:a6:e1:94:c1:ec:eb:b2:0e:be:f1:ae:1d:49:51:
18:3c:bf:0f:5a:5b:e5:2a:7d:bc:c6:b3:02:0f:87:e4:df:27:
a3:67:50:9b:98:3e:a2:ec:78:3b:aa:48:25:af:86:06:0f:d1:
7b:0a:bb:7c:f9:61:20:0a:95:f9:ac:5d:9e:fb:38:4f:3d:34:
45:55:c1:c9:cd:e1:62:a0:bc:69:96:8d:59:f7:88:82:5f:46:
6f:5b:68:a7:15:50:20:34:0b:94:99:3b:a9:63:bb:a7:79:01:
49:22:58:b9:21:0d:3c:1a:9c:33:bd:f2:55:7e:12:94:6e:c4:
c0:39:9e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36iwvEZ8vC8nRit+HAAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmNlN2U1YTgxNTYxNmNiNmE4YmEwM2M0OGFiYzQ5NDI5
YjdlMDEwHhcNMjYwMzI2MDIwMTAyWhcNMjYwMzI3MDIwMTAyWjAzMTEwLwYDVQQD
EyhhOGI1Njk0MDkxY2ExOGY5MzI5MzVmOGM5YjFkZWRjNDFlMjg3OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zHM6Nrn2IRQQ5z8Z1KS//Az5Z9A
lqtsHSq/C9gT2uKp3he2PGAE6Pheo1rVc+PLL/svH4LpFQcMaShk7gvTHbviDdf+
NcOW2qChT2sQ5F/ZogYJ+ko8GSQpjsE2YOEMhu1a3mixhA6v6AUfO4aXSHI4kpZG
hV1SMStQ3eq53C4E8DacHGrnsETMww8K+ebZF5SRWmq7vD15SPevm3lKYONkJisL
pgrCAXX1htDCB3i+uKXjZM83/1T62SoG2G6xZrKvybVOtY2NBAwS/gS83CYEYShS
SUJBns+v68flHB2sLyGYoAspaa7fnohlHrsu/aaYZwMcqnMtAcnZTIYGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi1aUCRyhj5MpNfjJsd7cQeKHlqMB8GA1UdIwQY
MBaAFGL85+WoFWFstqi6A8SKvElCm34BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgt
OTJiODQyYTk2NDk1LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgtOTJiODQyYTk2NDk1
LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjUdInwY
ziwDl4/aiNrIKiT8uKGvM31bf8KZd0hEGQrWMdNwlO6RFgUNhsu/LH8uBV1aNumf
426NEGXb9VWy3TQfKmsNLGuUSozMbMjt2c8sJBmDcwgy3WdYMrQx8r8whlVpt2Ou
5OW8Cd2oNTYQH5UQcDzh0xMETiUpmGld8apuAKbhlMHs67IOvvGuHUlRGDy/D1pb
5Sp9vMazAg+H5N8no2dQm5g+oux4O6pIJa+GBg/Rewq7fPlhIAqV+axdnvs4Tz00
RVXByc3hYqC8aZaNWfeIgl9Gb1topxVQIDQLlJk7qWO7p3kBSSJYuSENPBqcM73y
VX4SlG7EwDmefg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:36 2026 by rpki-client