Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: kfJugJe2aNAkrEWjujzOMzeu83bsikcn1aD9P8jSwls=
Subject key identifier: 90:3E:EB:83:D1:3A:FC:23:02:93:73:AF:9E:57:DF:75:24:30:2F:63
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019D26CCC6D64B3D02E4EA26E1F3ED65B958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0FDD
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (hash: hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: 7c4ZhOdN1ehH/H4x3KT8ztm6vcl6GNzXGKPP+b3DorU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c6:d6:4b:3d:02:e4:ea:26:e1:f3:ed:65:b9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=903eeb83d13afc23029373af9e57df7524302f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:60:33:ae:67:60:28:d2:23:da:4b:a1:a4:
cb:fd:44:f7:8e:c7:01:4f:aa:6f:29:9e:47:86:0d:
d0:df:5f:3a:91:ae:52:56:54:54:c0:73:49:0a:56:
75:7e:a4:49:56:24:0c:e3:ea:e7:ad:71:3d:5e:4b:
d4:82:01:e2:a6:33:99:24:bb:e7:6d:2a:bd:34:a8:
da:88:ad:49:0b:40:94:55:48:c2:c6:61:3f:f2:43:
cf:f1:39:e9:9b:0b:9d:28:86:1f:bb:1f:98:91:c2:
ef:58:6d:b5:f3:0c:09:d6:30:c9:88:98:88:87:82:
38:58:22:ce:5f:0e:c9:f7:d0:63:bc:3e:55:b8:06:
2a:3a:d1:9a:13:e7:77:88:5d:ba:1c:81:d4:e9:b8:
54:1d:e9:d5:19:34:b0:ba:cf:b2:65:02:18:55:4f:
1d:3a:1c:03:e5:0e:43:bd:6e:c9:a3:98:9e:c7:0f:
1d:aa:a6:10:ba:5a:60:e8:c7:fc:8a:c3:11:fa:87:
06:70:ac:b2:63:5f:aa:f8:ac:a0:8d:98:3f:b1:76:
96:35:1b:bf:d2:67:36:95:59:dc:9c:51:b9:cd:58:
72:cb:11:41:4f:55:92:49:a6:ec:92:ae:2e:fd:33:
37:4e:ee:6b:c8:bb:99:51:ed:4a:3c:ca:c3:ba:e2:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:EB:83:D1:3A:FC:23:02:93:73:AF:9E:57:DF:75:24:30:2F:63
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:c9:00:5a:11:51:77:5d:8b:44:1d:e5:b8:cb:86:e8:7f:
e3:73:f1:81:15:c7:e3:71:a5:45:14:44:83:06:a1:34:ac:a8:
73:2b:fc:67:85:bb:da:b9:92:9d:a8:3f:a3:a4:f7:8a:fc:7c:
a8:cc:cd:03:90:ed:a4:a0:ad:03:de:ff:4f:27:ce:0f:0e:c3:
f4:5c:2e:8c:5f:7d:b0:a4:a6:a5:ef:d0:e2:28:74:81:3d:82:
27:7d:a2:47:3f:fe:3f:07:6a:49:2d:fb:86:3a:55:f1:36:e0:
d6:ef:ad:bb:8f:2d:ee:33:6c:11:f8:1c:64:21:9f:c4:0b:de:
ca:19:46:7c:11:44:0b:2b:1c:11:bc:f5:13:53:3e:b7:77:64:
a4:06:55:dd:be:6d:81:c8:4a:1a:2a:f8:3f:e9:dd:bc:3a:4d:
2f:aa:25:4e:76:41:75:90:43:a6:86:e3:db:06:6e:f1:8e:46:
9c:d3:e1:06:ad:66:1c:db:72:93:fa:b3:81:26:1c:75:d1:95:
1e:0c:c7:a0:ad:94:be:e4:87:03:71:e8:a5:14:8c:e7:9f:5a:
4f:7b:1a:11:49:ab:8d:ee:5e:c5:91:3f:f5:7b:f5:f4:29:9e:
53:9b:21:fe:91:e8:ea:95:75:06:a9:91:d1:6d:37:84:cb:50:
5c:c8:26:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMbWSz0C5Oom4fPtZblYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzdjNTgwOTI2NTk5ZTgzYWI3MzViYTJlMDRmYzEwODc3
OGM0NDEwHhcNMjYwMzI1MjEwMDQ3WhcNMjYwMzI2MjEwMDQ3WjAzMTEwLwYDVQQD
Eyg5MDNlZWI4M2QxM2FmYzIzMDI5MzczYWY5ZTU3ZGY3NTI0MzAyZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn9gM65nYCjSI9pLoaTL/UT3jscB
T6pvKZ5Hhg3Q3186ka5SVlRUwHNJClZ1fqRJViQM4+rnrXE9XkvUggHipjOZJLvn
bSq9NKjaiK1JC0CUVUjCxmE/8kPP8TnpmwudKIYfux+YkcLvWG218wwJ1jDJiJiI
h4I4WCLOXw7J99BjvD5VuAYqOtGaE+d3iF26HIHU6bhUHenVGTSwus+yZQIYVU8d
OhwD5Q5DvW7Jo5iexw8dqqYQulpg6Mf8isMR+ocGcKyyY1+q+KygjZg/sXaWNRu/
0mc2lVncnFG5zVhyyxFBT1WSSabskq4u/TM3Tu5ryLuZUe1KPMrDuuL+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA+64PROvwjApNzr55X33UkMC9jMB8GA1UdIwQY
MBaAFGF3xYCSZZnoOrc1ui4E/BCHeMRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEt
YTMyZTJlZDBjZmQzLzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWJmN2ItNDc0NS00NDIzLWE4ZmEtYTMyZTJlZDBjZmQz
LzEvWVhmRmdKSmxtZWc2dHpXNkxnVDhFSWQ0eEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2XJAFoR
UXddi0Qd5bjLhuh/43PxgRXH43GlRRREgwahNKyocyv8Z4W72rmSnag/o6T3ivx8
qMzNA5DtpKCtA97/TyfODw7D9FwujF99sKSmpe/Q4ih0gT2CJ32iRz/+PwdqSS37
hjpV8Tbg1u+tu48t7jNsEfgcZCGfxAveyhlGfBFECyscEbz1E1M+t3dkpAZV3b5t
gchKGir4P+ndvDpNL6olTnZBdZBDpobj2wZu8Y5GnNPhBq1mHNtyk/qzgSYcddGV
HgzHoK2UvuSHA3HopRSM559aT3saEUmrje5exZE/9Xv19CmeU5sh/pHo6pV1BqmR
0W03hMtQXMgmUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:25 2026 by rpki-client