Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: UymNp+kk/9ovhcqPhI3zuUlYWQ1RYNF82f51CYoJ4zQ=
Subject key identifier: 79:0D:1B:7D:18:6A:CE:4A:0C:6A:79:1F:51:6B:14:59:5A:50:B7:0B
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019D262897B5768F1AA3BC1F610500AFBB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 13A5
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: VYZ5Fgld7RXGEOrVqR8rQ1goxUQ.roa (hash: cLhaanJStsJrz0IULm7aO3Ok7sBDzVaf9JM7x28CLYM=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: y5gg6ka/zRvx3zf1LqyZjGE9+16pyT0x6jViCAxBZuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:97:b5:76:8f:1a:a3:bc:1f:61:05:00:af:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=790d1b7d186ace4a0c6a791f516b14595a50b70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:35:77:de:d6:98:96:85:fb:ec:c8:9b:99:
30:1d:ae:45:ea:7f:12:c2:ce:4b:82:df:59:8d:a6:
9c:c4:d6:72:39:f5:05:f7:b8:dc:7a:07:59:30:e8:
a6:09:72:b7:dc:5d:6c:1c:9b:86:2f:98:a2:07:9d:
16:d4:bf:3f:d7:a9:16:7d:56:a4:81:a3:33:98:b8:
d5:ac:51:ae:46:c0:3a:3e:aa:13:fc:a5:cf:c8:a0:
aa:48:60:cd:9c:2a:fe:7d:c3:a5:d9:2b:9c:7a:b6:
5f:4e:34:d4:64:86:7f:4f:d3:bd:75:f4:4c:e3:98:
e2:46:93:c9:4f:10:86:f1:5e:8a:cb:b0:58:8c:c0:
a7:ab:04:40:41:ae:6b:d4:89:9b:f3:9c:3d:23:10:
f9:e0:f6:be:36:68:42:3e:cf:74:ce:c6:80:c2:7f:
b8:e5:fe:fe:34:aa:b2:d8:8c:6c:ee:b1:9b:9e:49:
1e:47:dc:f2:32:95:67:ba:2f:39:71:e8:a4:0f:69:
d6:33:85:37:b6:ab:69:3e:2c:64:ba:27:e0:8b:6e:
fa:19:1b:c6:6a:a4:a3:0d:cb:cb:de:b9:07:35:d8:
d8:4c:10:f8:c0:d7:1b:4f:45:0e:6c:cd:ee:c5:3a:
73:18:7f:7d:e7:3a:a8:4c:ad:6b:02:e2:64:29:c9:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0D:1B:7D:18:6A:CE:4A:0C:6A:79:1F:51:6B:14:59:5A:50:B7:0B
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:b3:b9:d0:1c:fc:6b:47:db:c0:89:54:86:74:4b:45:12:
8b:2c:9d:7a:d6:7b:0c:f7:0a:f8:2c:b2:3f:b0:2e:dd:4d:c8:
96:fd:a1:0d:28:1a:85:34:55:eb:f0:ff:5e:aa:dc:c2:31:44:
d7:27:f1:fb:c5:62:ca:1f:54:43:c6:bb:c6:67:c7:94:7c:71:
61:f1:24:f3:2a:58:be:84:ad:e2:c4:56:b7:13:c1:47:24:86:
88:a5:c7:fc:05:16:30:37:3d:b6:f3:a8:84:c1:1b:58:f6:69:
2c:f4:49:1a:bf:5e:ff:13:13:13:de:c9:78:be:44:58:c3:2b:
cb:36:c4:3c:27:a9:ba:cd:36:11:f4:41:de:fd:cc:a0:53:71:
30:4d:43:ea:a4:11:38:92:32:e7:af:ae:0a:8e:d5:e3:b9:46:
a9:4b:c4:b4:b1:8e:6a:7e:e4:9f:a6:38:14:13:b7:f0:22:15:
72:38:20:fc:ac:72:e0:b6:b3:6c:12:59:7e:e4:be:f1:15:2c:
61:3d:12:cc:48:bf:00:d8:22:47:f6:3e:31:17:9a:69:97:1f:
c9:6c:b5:cd:34:ec:fd:5e:83:9b:35:a8:bd:55:91:3c:cf:c9:
88:b4:03:fe:13:4c:ad:a6:cd:28:88:99:89:6f:bf:e1:30:96:
3e:41:0c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJe1do8ao7wfYQUAr7s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx
NDE0NDcwHhcNMjYwMzI1MTgwMTI3WhcNMjYwMzI2MTgwMTI3WjAzMTEwLwYDVQQD
Eyg3OTBkMWI3ZDE4NmFjZTRhMGM2YTc5MWY1MTZiMTQ1OTVhNTBiNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vw1d97WmJaF++zIm5kwHa5F6n8S
ws5Lgt9ZjaacxNZyOfUF97jcegdZMOimCXK33F1sHJuGL5iiB50W1L8/16kWfVak
gaMzmLjVrFGuRsA6PqoT/KXPyKCqSGDNnCr+fcOl2SucerZfTjTUZIZ/T9O9dfRM
45jiRpPJTxCG8V6Ky7BYjMCnqwRAQa5r1Imb85w9IxD54Pa+NmhCPs90zsaAwn+4
5f7+NKqy2Ixs7rGbnkkeR9zyMpVnui85ceikD2nWM4U3tqtpPixkuifgi276GRvG
aqSjDcvL3rkHNdjYTBD4wNcbT0UObM3uxTpzGH995zqoTK1rAuJkKcmKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkNG30Yas5KDGp5H1FrFFlaULcLMB8GA1UdIwQY
MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct
NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2
LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde2zudAc
/GtH28CJVIZ0S0USiyydetZ7DPcK+CyyP7Au3U3Ilv2hDSgahTRV6/D/XqrcwjFE
1yfx+8Viyh9UQ8a7xmfHlHxxYfEk8ypYvoSt4sRWtxPBRySGiKXH/AUWMDc9tvOo
hMEbWPZpLPRJGr9e/xMTE97JeL5EWMMryzbEPCepus02EfRB3v3MoFNxME1D6qQR
OJIy56+uCo7V47lGqUvEtLGOan7kn6Y4FBO38CIVcjgg/Kxy4LazbBJZfuS+8RUs
YT0SzEi/ANgiR/Y+MReaaZcfyWy1zTTs/V6DmzWovVWRPM/JiLQD/hNMrabNKIiZ
iW+/4TCWPkEMJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:33 2026 by rpki-client