Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: LuqK7sy0FED0SIMOJUyfljX5M2X27ArzEFweDb9dDDY=
Subject key identifier: 42:03:2B:6B:96:D8:69:24:BF:CA:37:7F:DD:0D:31:47:DF:02:A5:DC
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019D2703A343BF693144632D2E2233991E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: o79ddBwycgd1dreMLx+nrlRASRFCRgVIfI26P7Bi/ME=)
2: qdhzDXuwEXMKIhcBtC--OVRDYRs.roa (hash: iT11iYdlbhQ14x4ERQHAeOODlysNDcwshKAALWJPnaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a3:43:bf:69:31:44:63:2d:2e:22:33:99:1e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=42032b6b96d86924bfca377fdd0d3147df02a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:d5:61:d5:1e:0f:7a:9d:e5:11:6b:d6:21:
43:ec:66:da:37:9e:91:db:83:80:fd:1e:dd:df:2b:
58:d5:58:88:f6:5b:06:87:e4:a0:1b:3e:b1:ae:2b:
0b:3f:11:dc:2a:ac:fd:e5:29:c6:c5:cb:64:3d:c8:
06:56:a7:60:07:53:86:70:26:97:36:0e:3c:c0:4f:
71:96:5d:f6:4c:7f:10:78:1a:8f:35:3e:6e:85:6d:
97:23:55:1e:bf:e2:c4:0c:62:4d:55:70:4c:1d:37:
04:0b:3f:dd:27:51:0e:12:5f:77:f8:cf:45:6f:58:
84:ae:39:a8:ed:9d:c3:02:98:15:a2:32:d5:0d:3d:
38:b1:38:58:d7:8e:c2:65:1a:85:6d:35:f4:f3:4f:
a3:9b:fd:9a:f7:cd:2b:ae:be:b2:3f:68:79:d8:84:
57:c6:f5:96:9a:5b:f0:db:34:61:06:a2:cd:4f:c0:
db:a0:92:d7:47:ee:f3:a2:83:be:8c:d6:67:2d:dc:
05:68:fe:d5:3e:cc:70:82:83:83:51:92:bd:2a:4d:
69:1e:ab:9f:2d:5b:b2:63:1c:21:e2:95:d7:84:35:
ca:4a:48:36:67:f9:5d:cc:ac:2a:38:23:35:b1:46:
74:61:e2:a7:4f:05:bc:ce:c8:00:72:ce:22:d2:40:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:2B:6B:96:D8:69:24:BF:CA:37:7F:DD:0D:31:47:DF:02:A5:DC
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:18:89:d6:07:9d:13:37:58:96:cc:66:b6:e8:f7:f8:9b:d3:
d2:72:25:ce:2d:a0:1e:2c:44:1d:5d:f2:b7:8d:ea:5d:61:10:
ca:54:b2:ce:5a:df:f8:e9:b8:3d:99:a0:a1:ba:01:95:ae:9c:
27:98:63:52:21:ac:cf:4e:0c:ca:88:55:7c:bd:d2:39:cb:81:
9c:9f:77:d0:33:32:5c:3a:dd:88:5a:d3:6c:9a:ce:b9:f5:b0:
78:28:b9:04:2f:7f:76:b7:59:53:18:b3:27:92:99:30:5f:4a:
55:00:6d:3f:ae:a3:28:5e:d6:4f:08:5e:94:e5:4b:dc:a3:16:
d1:d0:12:1d:f5:e5:71:a2:90:6d:02:8f:c8:35:08:38:54:d5:
ea:78:da:0e:32:e1:fd:d4:16:65:15:cc:5f:17:75:e9:5b:38:
93:c7:8b:8b:74:3f:10:f1:ce:04:86:d8:f4:ae:07:cf:fb:60:
90:51:63:37:c8:17:8d:fa:19:cc:70:8b:53:15:4c:cc:35:99:
54:1a:13:ba:3f:a0:9b:b8:c9:a4:8a:01:da:ba:6d:c4:b3:33:
96:bc:cf:20:19:63:00:1e:a5:bd:c6:1e:67:66:0d:39:aa:3f:
45:50:59:d2:54:f2:73:27:2d:a5:5b:ed:64:52:4b:71:ae:3f:
3d:3b:0c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6NDv2kxRGMtLiIzmR5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjYwMzI1MjIwMDQyWhcNMjYwMzI2MjIwMDQyWjAzMTEwLwYDVQQD
Eyg0MjAzMmI2Yjk2ZDg2OTI0YmZjYTM3N2ZkZDBkMzE0N2RmMDJhNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz3VYdUeD3qd5RFr1iFD7GbaN56R
24OA/R7d3ytY1ViI9lsGh+SgGz6xrisLPxHcKqz95SnGxctkPcgGVqdgB1OGcCaX
Ng48wE9xll32TH8QeBqPNT5uhW2XI1Uev+LEDGJNVXBMHTcECz/dJ1EOEl93+M9F
b1iErjmo7Z3DApgVojLVDT04sThY147CZRqFbTX080+jm/2a980rrr6yP2h52IRX
xvWWmlvw2zRhBqLNT8DboJLXR+7zooO+jNZnLdwFaP7VPsxwgoODUZK9Kk1pHquf
LVuyYxwh4pXXhDXKSkg2Z/ldzKwqOCM1sUZ0YeKnTwW8zsgAcs4i0kA2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIDK2uW2Gkkv8o3f90NMUffAqXcMB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxiJ1ged
EzdYlsxmtuj3+JvT0nIlzi2gHixEHV3yt43qXWEQylSyzlrf+Om4PZmgoboBla6c
J5hjUiGsz04MyohVfL3SOcuBnJ930DMyXDrdiFrTbJrOufWweCi5BC9/drdZUxiz
J5KZMF9KVQBtP66jKF7WTwhelOVL3KMW0dASHfXlcaKQbQKPyDUIOFTV6njaDjLh
/dQWZRXMXxd16Vs4k8eLi3Q/EPHOBIbY9K4Hz/tgkFFjN8gXjfoZzHCLUxVMzDWZ
VBoTuj+gm7jJpIoB2rptxLMzlrzPIBljAB6lvcYeZ2YNOao/RVBZ0lTycyctpVvt
ZFJLca4/PTsMdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:42 2026 by rpki-client