Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: Se34ApUi5I61rwM2u+ayWGCN97y7ANeaM9Ewie4YND0=
Subject key identifier: F2:0E:0C:B1:76:63:92:69:C0:61:9A:9C:5A:C2:E1:8E:42:B5:26:A6
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 019D29CDEEE8FB2FE73301BA03376142B226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 0A96
Signing time: Thu 26 Mar 2026 11:00:54 +0000
Manifest this update: Thu 26 Mar 2026 11:00:54 +0000
Manifest next update: Fri 27 Mar 2026 11:00:54 +0000
Files and hashes: 1: B-jtVqVW9M43hbMxN6j_v-hrwB4.roa (hash: xV6nCB7rwxI+22ZkCjSqm8Ae38pQziS4ET9GFX+UA2o=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: 1jKyQeLqM8ahqNkWa3MY+us3h7we0OORfzr/EWdF15M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ee:e8:fb:2f:e7:33:01:ba:03:37:61:42:b2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Mar 26 11:00:54 2026 GMT
Not After : Mar 27 11:00:54 2026 GMT
Subject: CN=f20e0cb176639269c0619a9c5ac2e18e42b526a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:91:6d:57:dd:f6:e2:dc:8f:ce:c5:8e:86:
ad:b4:96:c4:18:b2:b5:76:a8:c8:05:6b:25:81:c1:
a3:23:9b:c9:8b:d3:a7:d4:0b:5f:a4:e0:a3:80:a6:
9e:b0:64:60:3b:b9:4f:88:48:3a:03:04:f0:11:7e:
db:1e:0e:dc:af:0a:c3:56:a8:aa:91:f1:80:0c:c2:
f1:0b:94:cf:a6:a6:fd:aa:ef:66:e9:a1:0d:41:a6:
6d:bc:89:5a:77:e7:c8:41:8a:5e:89:7a:ec:66:6c:
2e:dd:6c:65:b6:2b:08:3a:1b:9e:1b:23:5c:80:0a:
43:4f:52:f7:89:a1:a7:9f:4c:c9:de:b2:02:38:70:
f6:59:bd:d9:1d:4e:e9:8a:87:f1:3e:aa:81:cb:92:
aa:8f:c3:37:fd:aa:48:d6:db:31:e8:21:ca:8d:7f:
b0:88:de:e8:9a:df:51:99:94:f7:e1:77:bd:10:37:
a8:85:9f:c0:5c:f5:fd:4d:ca:05:d9:c0:3e:56:91:
49:61:11:50:d9:a5:df:11:d4:b3:3f:e7:59:23:42:
37:56:88:5b:e3:9e:68:13:97:8b:4e:75:df:f7:c8:
17:98:1a:a1:fd:0b:b6:8c:b7:dc:f9:8d:1d:3c:df:
be:fb:db:25:6c:3a:6c:21:cb:fd:bb:cd:7e:b6:a9:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:0C:B1:76:63:92:69:C0:61:9A:9C:5A:C2:E1:8E:42:B5:26:A6
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b1:03:28:e2:59:f4:cc:08:b4:50:53:e2:8f:47:8c:70:bd:
10:95:7c:e5:f3:4e:3f:f2:cd:67:09:0b:6a:b8:0f:2e:83:9a:
b8:2f:79:0b:19:39:03:01:5c:da:6a:ab:2c:44:6a:28:8e:01:
3a:92:d8:8a:93:00:12:f2:11:b5:70:89:43:47:8c:2c:0e:72:
26:97:48:a6:69:5b:79:35:c7:5c:25:64:0a:eb:bd:ff:ef:bc:
6c:51:5c:1d:ef:b7:26:a3:9b:14:a0:2a:75:c1:83:a3:8c:84:
9c:2d:10:55:5c:65:00:1e:f8:1f:cd:2d:e3:5d:26:e4:46:55:
89:c3:1f:30:13:36:42:aa:a7:30:e6:2c:e9:18:24:ac:e4:25:
ec:6d:fe:bc:84:2a:e9:fb:ca:1f:90:b7:ea:a3:6c:72:e0:0b:
83:70:f1:21:76:ba:f9:51:a3:8a:9d:a5:54:f4:5b:02:5e:a1:
0c:01:18:5f:b5:d5:33:fe:1e:ca:4b:aa:be:00:a6:11:1a:89:
a3:8f:fb:fd:22:14:09:8a:6d:51:65:61:df:d2:b1:13:40:e2:
de:c1:f4:ab:bd:1f:3f:9b:2e:9c:32:94:4a:b8:79:da:35:16:
2e:0f:25:1d:d8:b4:85:fd:06:5b:a0:52:0c:71:e6:c4:51:8f:
19:a2:d6:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pze7o+y/nMwG6AzdhQrImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2
NWRjNWIwHhcNMjYwMzI2MTEwMDU0WhcNMjYwMzI3MTEwMDU0WjAzMTEwLwYDVQQD
EyhmMjBlMGNiMTc2NjM5MjY5YzA2MTlhOWM1YWMyZTE4ZTQyYjUyNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGCRbVfd9uLcj87FjoattJbEGLK1
dqjIBWslgcGjI5vJi9On1AtfpOCjgKaesGRgO7lPiEg6AwTwEX7bHg7crwrDVqiq
kfGADMLxC5TPpqb9qu9m6aENQaZtvIlad+fIQYpeiXrsZmwu3WxltisIOhueGyNc
gApDT1L3iaGnn0zJ3rICOHD2Wb3ZHU7piofxPqqBy5Kqj8M3/apI1tsx6CHKjX+w
iN7omt9RmZT34Xe9EDeohZ/AXPX9TcoF2cA+VpFJYRFQ2aXfEdSzP+dZI0I3Vohb
455oE5eLTnXf98gXmBqh/Qu2jLfc+Y0dPN+++9slbDpsIcv9u81+tqmfyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIODLF2Y5JpwGGanFrC4Y5CtSamMB8GA1UdIwQY
MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt
MWRjMGI4NGExYzdlLzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl
LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7EDKOJZ
9MwItFBT4o9HjHC9EJV85fNOP/LNZwkLargPLoOauC95Cxk5AwFc2mqrLERqKI4B
OpLYipMAEvIRtXCJQ0eMLA5yJpdIpmlbeTXHXCVkCuu9/++8bFFcHe+3JqObFKAq
dcGDo4yEnC0QVVxlAB74H80t410m5EZVicMfMBM2QqqnMOYs6RgkrOQl7G3+vIQq
6fvKH5C36qNscuALg3DxIXa6+VGjip2lVPRbAl6hDAEYX7XVM/4eykuqvgCmERqJ
o4/7/SIUCYptUWVh39KxE0Di3sH0q70fP5sunDKUSrh52jUWLg8lHdi0hf0GW6BS
DHHmxFGPGaLWyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:15 2026 by rpki-client