Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: fSrzddUwGwlwVX6mwMfBvuNbm+A9O5M/Zye4zwCt15k=
Subject key identifier: 5A:CB:7C:1D:4C:69:6F:1F:B8:72:E5:93:64:E9:0E:27:BB:DA:D2:E8
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019D2A3B5115A7F63FD9362557DDCF1F148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 15C6
Signing time: Thu 26 Mar 2026 13:00:23 +0000
Manifest this update: Thu 26 Mar 2026 13:00:23 +0000
Manifest next update: Fri 27 Mar 2026 13:00:23 +0000
Files and hashes: 1: H4N6iHzqJPwBL4ZeeQhJkfgslhY.roa (hash: KYorPqkctUfreyDSNu/x2TOdKW4S2t1MdUfVGYYO4/g=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: xqHoNDeA6AU7BcDW40JNg55+jMe8Rh2YXZsRrDsNrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:51:15:a7:f6:3f:d9:36:25:57:dd:cf:1f:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Mar 26 13:00:23 2026 GMT
Not After : Mar 27 13:00:23 2026 GMT
Subject: CN=5acb7c1d4c696f1fb872e59364e90e27bbdad2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:68:41:0d:19:6e:44:ab:15:64:76:18:22:
25:a2:71:9b:cc:b0:6f:d2:cf:0f:87:bb:3f:90:9b:
47:2d:d1:50:56:f2:02:2e:36:d7:2f:b5:53:59:23:
ca:ce:e0:b4:2a:12:49:d4:44:89:d6:0e:e1:99:e8:
2e:14:a8:03:69:cc:82:2d:b0:62:c6:a7:43:2b:2f:
66:28:e6:8a:2e:cd:49:3f:1f:28:63:c5:2c:a0:39:
9f:fe:a5:9a:15:cc:69:dc:b9:c7:38:5c:85:91:7a:
b4:7f:ef:5e:c7:3b:d6:05:44:6c:89:d3:16:c3:b5:
14:3c:21:c8:a9:08:ac:25:64:86:f3:66:58:0b:c5:
0a:93:1d:e9:d5:ab:3f:31:a0:0d:57:9e:34:62:25:
3a:b7:94:41:8c:7d:67:8e:9c:01:f5:98:0b:66:7b:
45:01:b5:d4:1f:29:c6:81:b6:5c:8e:a6:67:12:55:
33:47:99:de:b3:1d:5c:46:b6:94:92:8c:4d:ff:fb:
96:95:75:f6:14:0a:09:f5:26:39:0a:54:67:8b:9e:
c8:f4:17:90:da:fc:75:41:37:83:22:9a:91:ad:04:
37:96:79:db:8b:9d:de:52:e4:0f:c4:99:ff:f9:81:
8a:2a:ff:d6:c7:ea:99:8b:91:17:1c:02:fd:0e:33:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:7C:1D:4C:69:6F:1F:B8:72:E5:93:64:E9:0E:27:BB:DA:D2:E8
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6b:24:5c:be:04:81:eb:4f:b9:e9:92:49:b5:14:63:ec:8a:
06:01:06:89:24:30:9d:cf:fe:80:be:13:7b:4f:fd:47:02:ad:
41:e9:95:db:1b:3c:21:d0:95:64:40:c0:9c:77:5f:74:d5:cb:
47:2c:e3:2e:5a:d6:f8:3e:b8:4b:c7:f1:55:24:7e:38:fe:f0:
25:d5:5c:5e:84:5a:e4:a4:c4:30:27:06:7b:c1:46:60:6a:59:
d5:6f:7d:43:4c:13:64:57:be:85:9c:f8:21:21:54:7b:0c:60:
59:9f:29:a6:a7:d2:ef:2e:d9:00:f1:6f:d5:69:f5:c2:5d:08:
0f:a1:e4:e2:0c:44:5a:bd:09:50:db:1a:a7:e3:33:f6:02:43:
84:5d:09:f2:2a:65:90:38:bd:01:39:2c:bf:dd:7f:94:ee:8d:
07:7f:7b:af:ae:f7:a3:bf:96:e2:6d:2b:97:2b:80:f9:2b:9b:
40:7f:04:8f:e1:3a:51:c4:56:74:3d:65:cf:e4:13:ec:32:09:
89:d2:03:78:8b:9b:75:47:40:6f:77:ec:42:99:18:a9:fa:c3:
39:8c:67:93:67:92:41:0d:be:ea:3c:d4:b4:d6:e6:e8:28:d1:
e9:b5:96:14:99:00:fb:f7:f1:3b:72:b2:af:ab:57:56:f6:01:
ca:4c:a0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO1EVp/Y/2TYlV93PHxSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2NlYTZlMTAzYTIzMjVjNDhjMTY2N2E5OWM3YjE3ZWIz
Y2U3YjYwHhcNMjYwMzI2MTMwMDIzWhcNMjYwMzI3MTMwMDIzWjAzMTEwLwYDVQQD
Eyg1YWNiN2MxZDRjNjk2ZjFmYjg3MmU1OTM2NGU5MGUyN2JiZGFkMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFoQQ0ZbkSrFWR2GCIlonGbzLBv
0s8Ph7s/kJtHLdFQVvICLjbXL7VTWSPKzuC0KhJJ1ESJ1g7hmeguFKgDacyCLbBi
xqdDKy9mKOaKLs1JPx8oY8UsoDmf/qWaFcxp3LnHOFyFkXq0f+9exzvWBURsidMW
w7UUPCHIqQisJWSG82ZYC8UKkx3p1as/MaANV540YiU6t5RBjH1njpwB9ZgLZntF
AbXUHynGgbZcjqZnElUzR5nesx1cRraUkoxN//uWlXX2FAoJ9SY5ClRni57I9BeQ
2vx1QTeDIpqRrQQ3lnnbi53eUuQPxJn/+YGKKv/Wx+qZi5EXHAL9DjPg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrLfB1MaW8fuHLlk2TpDie72tLoMB8GA1UdIwQY
MBaAFGB86m4QOiMlxIwWZ6mcexfrPOe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWIt
YzlhOWJhYTQzZjk0LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWItYzlhOWJhYTQzZjk0
LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWskXL4E
getPuemSSbUUY+yKBgEGiSQwnc/+gL4Te0/9RwKtQemV2xs8IdCVZEDAnHdfdNXL
RyzjLlrW+D64S8fxVSR+OP7wJdVcXoRa5KTEMCcGe8FGYGpZ1W99Q0wTZFe+hZz4
ISFUewxgWZ8ppqfS7y7ZAPFv1Wn1wl0ID6Hk4gxEWr0JUNsap+Mz9gJDhF0J8ipl
kDi9ATksv91/lO6NB397r673o7+W4m0rlyuA+SubQH8Ej+E6UcRWdD1lz+QT7DIJ
idIDeIubdUdAb3fsQpkYqfrDOYxnk2eSQQ2+6jzUtNbm6CjR6bWWFJkA+/fxO3Ky
r6tXVvYBykygmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:37 2026 by rpki-client