Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: Ve4LwGZt9xsW/q99WVxdnTo+Etny8ZODAxfnejVtptw=
Subject key identifier: AB:87:36:23:F2:2D:7D:6F:EB:84:83:7A:C0:D9:A6:E0:C6:10:C7:31
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019D28BBC4BF8B5C3A8AB9368C471B98939E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 021C
Signing time: Thu 26 Mar 2026 06:01:27 +0000
Manifest this update: Thu 26 Mar 2026 06:01:27 +0000
Manifest next update: Fri 27 Mar 2026 06:01:27 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: K52Hc8w5azJBScSJzWmCchqp00jCz6Fp7Jnx8Vo4Fic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c4:bf:8b:5c:3a:8a:b9:36:8c:47:1b:98:93:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Mar 26 06:01:27 2026 GMT
Not After : Mar 27 06:01:27 2026 GMT
Subject: CN=ab873623f22d7d6feb84837ac0d9a6e0c610c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:61:74:2b:f5:a2:f4:ff:ec:78:a9:74:4d:
9f:96:cb:a2:2b:b4:dc:8c:3d:fe:ef:77:30:2a:a8:
5e:94:8b:19:7e:ff:55:fc:bf:9f:04:b4:ff:fc:7c:
aa:5a:c5:0c:51:0b:80:90:10:b9:ee:35:1d:86:ca:
8f:ee:f5:95:dd:dd:3d:55:b0:f0:05:26:19:d2:f3:
32:37:08:92:55:74:94:73:98:2b:58:19:8b:4b:da:
1a:8b:96:7d:6d:68:61:b6:69:c1:a5:c8:74:9d:97:
d6:33:72:5c:24:76:64:0b:44:1a:6d:bb:f7:ba:b8:
31:39:86:bc:07:62:ab:f5:8f:2d:b5:7c:f9:87:02:
59:f1:e9:e1:48:04:74:23:fe:ed:44:fa:18:42:86:
bd:e5:21:8e:61:ef:93:84:cf:4c:9b:8b:e7:76:af:
ea:75:98:aa:07:b0:68:0c:fa:82:2a:28:ab:b4:d9:
c0:bb:10:e2:9b:ab:5b:c9:35:d9:50:d2:75:10:f5:
b7:a9:7e:fb:e6:eb:79:6c:a5:09:02:39:c4:8a:36:
10:30:b3:8c:bc:73:19:f5:b4:ba:1b:59:0e:95:c1:
08:96:ee:04:09:e8:15:e4:6d:7c:32:d9:36:08:cf:
79:f7:a4:27:23:3e:b7:70:ff:9e:4b:f5:08:41:f0:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:36:23:F2:2D:7D:6F:EB:84:83:7A:C0:D9:A6:E0:C6:10:C7:31
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:37:40:86:92:63:39:a1:9c:75:92:58:d3:fa:00:34:da:
dc:c7:f4:66:84:44:8e:39:59:42:0d:a4:4b:6d:5e:84:c0:36:
f6:18:a1:a3:de:dd:29:97:46:f6:07:24:f8:b7:a5:75:52:bc:
82:20:bd:76:5d:e6:9c:7b:ed:5b:9e:d4:f3:f5:14:7c:73:75:
7a:7a:f0:7f:03:62:30:38:cb:08:82:9c:9b:2f:18:0f:4f:c7:
9b:28:a9:67:bd:2c:12:83:bf:62:f6:84:de:71:d7:04:c2:0f:
34:32:de:00:17:88:42:c5:0d:2a:a1:77:8e:ce:75:f1:99:7e:
a3:81:74:18:cc:c1:5b:fc:60:cc:96:76:99:64:03:7a:2f:7a:
b2:7c:52:73:5a:24:11:2d:6b:ee:33:7d:6d:69:c4:05:66:38:
4e:45:0d:0e:a9:92:54:1e:e0:45:d0:71:64:f7:3e:8b:7c:bf:
0e:32:23:f3:4e:05:9e:85:3f:9d:62:92:61:c6:54:58:19:63:
29:61:c6:b6:8d:89:c1:d8:ba:c2:c6:44:19:07:bf:3c:56:6a:
b9:7e:33:cb:29:ee:05:d0:47:7a:d1:68:bd:14:65:2f:cd:c0:
e3:ae:d5:cf:a8:c1:da:1a:f5:bf:e3:e4:ed:43:66:21:79:10:
48:a9:e0:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou8S/i1w6irk2jEcbmJOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3
ZjFjZDgwHhcNMjYwMzI2MDYwMTI3WhcNMjYwMzI3MDYwMTI3WjAzMTEwLwYDVQQD
EyhhYjg3MzYyM2YyMmQ3ZDZmZWI4NDgzN2FjMGQ5YTZlMGM2MTBjNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFphdCv1ovT/7HipdE2flsuiK7Tc
jD3+73cwKqhelIsZfv9V/L+fBLT//HyqWsUMUQuAkBC57jUdhsqP7vWV3d09VbDw
BSYZ0vMyNwiSVXSUc5grWBmLS9oai5Z9bWhhtmnBpch0nZfWM3JcJHZkC0Qabbv3
urgxOYa8B2Kr9Y8ttXz5hwJZ8enhSAR0I/7tRPoYQoa95SGOYe+ThM9Mm4vndq/q
dZiqB7BoDPqCKiirtNnAuxDim6tbyTXZUNJ1EPW3qX775ut5bKUJAjnEijYQMLOM
vHMZ9bS6G1kOlcEIlu4ECegV5G18Mtk2CM9596QnIz63cP+eS/UIQfCPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuHNiPyLX1v64SDesDZpuDGEMcxMB8GA1UdIwQY
MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt
MTBjNTQ2ZDc5YmE1LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1
LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaI3QIaS
YzmhnHWSWNP6ADTa3Mf0ZoREjjlZQg2kS21ehMA29hiho97dKZdG9gck+LeldVK8
giC9dl3mnHvtW57U8/UUfHN1enrwfwNiMDjLCIKcmy8YD0/HmyipZ70sEoO/YvaE
3nHXBMIPNDLeABeIQsUNKqF3js518Zl+o4F0GMzBW/xgzJZ2mWQDei96snxSc1ok
ES1r7jN9bWnEBWY4TkUNDqmSVB7gRdBxZPc+i3y/DjIj804FnoU/nWKSYcZUWBlj
KWHGto2Jwdi6wsZEGQe/PFZquX4zyynuBdBHetFovRRlL83A467Vz6jB2hr1v+Pk
7UNmIXkQSKngzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:57 2026 by rpki-client