Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier: Hw7+GCxf/g0NjOA6IrVKMc5dQxcB/RWAN2K6hQbxbQo=
Subject key identifier: 2B:55:4F:14:B2:D4:3A:CE:EA:13:48:C1:72:09:2F:E0:9F:E5:E1:56
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 019D29291A55C0CC4998E4B71A8DA3088679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number: 0AA3
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: bTTqvXax2skVF-82FExKnLfGdxI.roa (hash: AppDpXXgvAN2nt1UzPs9G41XL2gD96AepEYNL7vslAA=)
2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: 0VdXYkoYFPqzRqXiSd/XlaCVtkh94x1bDDJw1AFvj6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:55:c0:cc:49:98:e4:b7:1a:8d:a3:08:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=2b554f14b2d43aceea1348c172092fe09fe5e156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:60:09:6e:6b:c8:b8:59:13:d9:e3:a2:b2:
4f:86:cc:c3:dc:25:63:66:b2:e3:cb:c2:2a:04:31:
e0:0a:5c:2b:39:0d:f2:35:01:6c:f7:23:5b:be:45:
c8:70:37:35:3a:09:19:b1:30:16:fc:15:c0:3c:b0:
6d:74:d5:e3:60:61:f4:68:fc:5c:e7:d1:ca:4b:ef:
2b:45:df:c7:7e:9b:86:76:4d:3e:56:40:b2:0a:06:
12:a7:40:0f:6b:83:a5:68:b7:42:02:59:8b:d6:46:
00:7a:e6:d5:50:74:1c:d3:ac:ed:f3:e7:50:71:c6:
6a:e9:b1:10:88:df:80:2a:75:34:b0:a6:0d:85:9d:
e2:a8:a1:50:a2:ab:d0:15:8f:04:c6:fd:25:35:77:
71:a4:4a:f2:56:58:9b:1b:8c:b7:b7:da:6c:ce:84:
a2:b5:13:83:6a:14:cc:5a:d9:fd:2d:01:6b:80:1c:
ee:2e:d4:ca:10:85:8b:20:f9:af:53:cb:95:50:b5:
34:e8:19:25:47:bd:d0:19:78:cc:28:d8:b4:7b:7c:
d3:9d:5b:7d:13:b4:46:6b:15:cf:6d:b3:63:13:d4:
2b:c5:c5:b2:cf:71:db:05:33:ef:eb:94:85:84:ee:
bd:81:96:69:8c:df:21:95:76:26:4d:f6:2a:6a:61:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:4F:14:B2:D4:3A:CE:EA:13:48:C1:72:09:2F:E0:9F:E5:E1:56
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:f3:22:68:92:05:a7:9e:68:b0:09:bf:d6:25:dd:66:e5:
41:5b:37:62:0b:1b:72:d1:11:cf:6b:bd:3e:fc:2a:69:39:7c:
4a:26:e4:1d:23:52:5a:d7:7e:18:80:a4:41:fb:50:06:3b:75:
fa:46:d1:96:24:f5:05:12:13:41:47:4e:66:30:eb:95:0a:8e:
2e:7a:e1:09:40:be:51:74:83:53:9a:1d:cc:9d:f4:e7:9c:e3:
6d:b8:ae:57:f5:1c:66:d6:72:8b:b8:55:97:77:19:b7:46:5f:
c0:48:2c:2f:fe:ae:c8:32:e5:a1:a5:77:be:f0:a3:ef:66:de:
a1:24:17:f0:f0:b2:35:87:9c:2d:9e:11:80:5f:11:99:fa:ff:
c6:31:84:f2:d3:10:63:bd:ef:82:6e:ee:f9:da:ba:d8:16:1b:
15:c8:e2:41:e0:1d:f0:d7:84:7a:86:1e:bd:f7:30:c0:e1:e2:
59:0c:60:b4:c0:0d:fb:cd:65:d4:75:dd:3c:72:03:4b:ff:91:
9b:9e:a2:a6:bc:15:61:f3:27:50:9b:16:c4:e0:bd:c1:94:da:
b8:e7:52:a0:f6:94:2b:d8:57:79:26:ed:7d:07:3c:88:c3:c9:
23:5b:6d:62:28:b5:0f:4c:83:b6:0b:f2:3d:ea:ad:f1:99:5f:
61:13:2e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKRpVwMxJmOS3Go2jCIZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjc2MjA3MGYxMjU0M2YxYjBhYzcxOTgyYWM3MTAyNTgx
MGZmNWYwHhcNMjYwMzI2MDgwMDUyWhcNMjYwMzI3MDgwMDUyWjAzMTEwLwYDVQQD
EygyYjU1NGYxNGIyZDQzYWNlZWExMzQ4YzE3MjA5MmZlMDlmZTVlMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2dgCW5ryLhZE9njorJPhszD3CVj
ZrLjy8IqBDHgClwrOQ3yNQFs9yNbvkXIcDc1OgkZsTAW/BXAPLBtdNXjYGH0aPxc
59HKS+8rRd/HfpuGdk0+VkCyCgYSp0APa4OlaLdCAlmL1kYAeubVUHQc06zt8+dQ
ccZq6bEQiN+AKnU0sKYNhZ3iqKFQoqvQFY8Exv0lNXdxpEryVlibG4y3t9pszoSi
tRODahTMWtn9LQFrgBzuLtTKEIWLIPmvU8uVULU06BklR73QGXjMKNi0e3zTnVt9
E7RGaxXPbbNjE9QrxcWyz3HbBTPv65SFhO69gZZpjN8hlXYmTfYqamGB0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtVTxSy1DrO6hNIwXIJL+Cf5eFWMB8GA1UdIwQY
MBaAFMsnYgcPElQ/GwrHGYKscQJYEP9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMt
ZWY0Y2RhNWY1MmNmLzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMtZWY0Y2RhNWY1MmNm
LzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6/zImiS
BaeeaLAJv9Yl3WblQVs3YgsbctERz2u9PvwqaTl8SibkHSNSWtd+GICkQftQBjt1
+kbRliT1BRITQUdOZjDrlQqOLnrhCUC+UXSDU5odzJ3055zjbbiuV/UcZtZyi7hV
l3cZt0ZfwEgsL/6uyDLloaV3vvCj72beoSQX8PCyNYecLZ4RgF8Rmfr/xjGE8tMQ
Y73vgm7u+dq62BYbFcjiQeAd8NeEeoYevfcwwOHiWQxgtMAN+81l1HXdPHIDS/+R
m56iprwVYfMnUJsWxOC9wZTauOdSoPaUK9hXeSbtfQc8iMPJI1ttYii1D0yDtgvy
Peqt8ZlfYRMuHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:24 2026 by rpki-client