Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: fWkaBaJFEYrQqUbpduRX3YZUy8v4tx49SdiltuLAvG0=
Subject key identifier: C8:12:E2:CE:0E:0A:A0:07:71:67:97:E0:04:DD:99:24:E9:F4:B6:35
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019D2816805971E6A17CBAC43AEBF33268E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 08D8
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: vCcL2Aj0jnB/ZWyMYUdO5NlyNvK5T29qCuRAKYwSS9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:80:59:71:e6:a1:7c:ba:c4:3a:eb:f3:32:68:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=c812e2ce0e0aa007716797e004dd9924e9f4b635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:2d:5b:22:c2:7d:55:2a:59:56:07:a7:87:
23:00:60:d4:0a:d2:ca:fb:35:aa:76:d6:c8:35:d5:
8f:ab:47:78:1e:3f:88:f7:66:87:e2:36:0f:92:ac:
9c:dc:cb:5d:8a:6a:7c:af:67:4b:a8:dc:49:0b:22:
51:52:14:3e:75:4a:80:25:a4:f1:3d:a2:25:c4:8e:
bd:74:24:00:6e:40:9e:92:d2:d6:2d:9e:f9:89:58:
5e:dc:a5:32:7a:f8:7d:9d:af:0c:16:e3:32:da:80:
c4:f1:59:29:3e:bc:8e:0e:ad:cd:d2:f8:01:61:42:
bf:5e:96:51:f4:14:0a:3b:d3:43:d3:80:61:8f:d1:
68:ea:e7:25:ce:da:10:4c:77:2c:c6:0d:ad:7c:04:
15:23:d0:10:fe:ea:8b:5f:bc:45:f9:47:44:f3:6a:
b8:8e:b9:4a:10:df:28:a8:6d:d8:42:1f:50:09:f0:
65:d6:41:f8:51:c7:d5:12:f3:30:7e:e3:3b:39:e9:
e9:8a:0b:89:24:a6:58:f7:d6:da:8c:ba:2a:07:18:
4e:c8:53:a9:bd:b6:39:1b:59:8e:3b:5c:b4:84:6c:
5c:e5:e4:b6:4d:c3:be:27:97:6f:c5:df:a9:53:b6:
e7:2f:c2:8c:93:74:8a:67:5b:93:1c:1e:fb:96:0c:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:E2:CE:0E:0A:A0:07:71:67:97:E0:04:DD:99:24:E9:F4:B6:35
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8b:62:41:d4:98:40:df:45:dd:9d:2f:e3:95:4b:ed:99:06:
fd:4f:5d:ec:81:68:21:b2:f9:81:51:1d:0a:12:0f:5f:ca:82:
78:4a:4e:6d:ba:92:f6:84:5a:9e:e6:5a:af:0f:66:fb:54:32:
95:13:ff:91:66:68:bc:df:ad:79:0d:5c:bd:ea:0d:cb:b3:99:
29:04:4d:73:b3:89:4f:d6:c6:e6:da:51:cf:77:c0:f6:27:20:
63:18:b0:be:ec:b8:4a:94:8d:8d:da:7e:94:c8:5d:50:22:41:
96:a8:7f:3f:1f:01:06:f3:9d:13:be:91:e6:7a:76:57:34:6c:
f7:93:b3:fb:31:97:f0:5f:6f:c4:41:08:99:12:7f:e9:f7:63:
e6:a1:25:e7:53:d5:2d:1a:08:46:db:09:c2:f1:a0:5d:df:28:
26:18:e6:8b:45:18:6f:a9:fa:17:60:a9:5f:21:3b:80:99:d7:
9d:64:43:70:7d:3b:af:14:c5:a8:37:24:93:81:a3:31:af:fd:
64:09:84:be:a7:b5:e9:d6:6c:50:63:ab:a8:cb:2d:0b:8c:8f:
47:08:36:72:7b:4b:a6:4b:11:65:51:4e:a3:06:c5:26:88:b6:
4e:0e:3c:1c:8a:b5:03:6a:02:f1:13:e1:80:56:63:8a:5e:ca:
6b:c4:0a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoBZceahfLrEOuvzMmjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm
YTE4MjkwHhcNMjYwMzI2MDMwMDU2WhcNMjYwMzI3MDMwMDU2WjAzMTEwLwYDVQQD
EyhjODEyZTJjZTBlMGFhMDA3NzE2Nzk3ZTAwNGRkOTkyNGU5ZjRiNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLgtWyLCfVUqWVYHp4cjAGDUCtLK
+zWqdtbINdWPq0d4Hj+I92aH4jYPkqyc3Mtdimp8r2dLqNxJCyJRUhQ+dUqAJaTx
PaIlxI69dCQAbkCektLWLZ75iVhe3KUyevh9na8MFuMy2oDE8VkpPryODq3N0vgB
YUK/XpZR9BQKO9ND04Bhj9Fo6uclztoQTHcsxg2tfAQVI9AQ/uqLX7xF+UdE82q4
jrlKEN8oqG3YQh9QCfBl1kH4UcfVEvMwfuM7OenpiguJJKZY99bajLoqBxhOyFOp
vbY5G1mOO1y0hGxc5eS2TcO+J5dvxd+pU7bnL8KMk3SKZ1uTHB77lgwRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgS4s4OCqAHcWeX4ATdmSTp9LY1MB8GA1UdIwQY
MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt
MjAyYzI2ODlkZmEwLzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAtMjAyYzI2ODlkZmEw
LzEveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbItiQdSY
QN9F3Z0v45VL7ZkG/U9d7IFoIbL5gVEdChIPX8qCeEpObbqS9oRanuZarw9m+1Qy
lRP/kWZovN+teQ1cveoNy7OZKQRNc7OJT9bG5tpRz3fA9icgYxiwvuy4SpSNjdp+
lMhdUCJBlqh/Px8BBvOdE76R5np2VzRs95Oz+zGX8F9vxEEImRJ/6fdj5qEl51PV
LRoIRtsJwvGgXd8oJhjmi0UYb6n6F2CpXyE7gJnXnWRDcH07rxTFqDckk4GjMa/9
ZAmEvqe16dZsUGOrqMstC4yPRwg2cntLpksRZVFOowbFJoi2Tg48HIq1A2oC8RPh
gFZjil7Ka8QKmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:18 2026 by rpki-client