Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: Yse6k5UD0C09d3jmFUDms50dJqRb9r4oy1ae/QEHxvc=
Subject key identifier: 8C:AA:D8:C3:97:ED:8B:CF:56:60:95:F4:6B:25:60:1A:0F:78:0B:2E
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019D2997776031B5340F5C2C757A4A3C66FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 43
Signing time: Thu 26 Mar 2026 10:01:25 +0000
Manifest this update: Thu 26 Mar 2026 10:01:25 +0000
Manifest next update: Fri 27 Mar 2026 10:01:25 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: OlJ8iGNMR6EHnO/u6pFweyza+jEDvh5sUngg82MS72c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:77:60:31:b5:34:0f:5c:2c:75:7a:4a:3c:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Mar 26 10:01:25 2026 GMT
Not After : Mar 27 10:01:25 2026 GMT
Subject: CN=8caad8c397ed8bcf566095f46b25601a0f780b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:28:bf:82:51:1f:0e:b5:18:52:02:9a:52:
fd:3d:78:6a:4e:75:40:6c:29:4b:b8:f6:7a:39:c6:
58:51:de:ab:0d:54:9e:f5:26:a5:53:0d:58:be:2d:
fe:7d:1b:f6:12:74:17:b3:b7:bd:ad:ec:54:4b:a7:
23:2b:73:5e:db:09:57:29:f8:0f:05:73:97:6b:ec:
74:72:49:aa:f3:92:47:47:5d:bd:4e:fd:ec:2e:41:
4b:20:35:a5:ee:b0:af:2d:7f:0b:3f:17:fe:ec:9d:
9e:08:f6:55:b6:26:38:f2:f1:66:ec:2e:88:8b:c2:
a4:1d:0c:47:d1:6f:74:4d:a6:7b:27:48:96:ff:37:
e3:17:0e:9b:bf:4e:66:58:d6:d2:3c:71:e9:54:0b:
ea:f6:b6:63:1d:c6:77:34:eb:64:5b:f1:79:66:1a:
ba:9f:03:11:a5:0a:81:c4:29:7e:f3:99:f4:9e:f0:
41:95:b1:b1:2c:7f:f1:30:3d:42:13:36:08:9b:7d:
52:f1:0c:41:79:b1:ab:03:e3:8a:63:f0:57:ae:62:
e3:f1:8e:7f:74:48:e9:31:2d:54:15:08:c9:a4:bf:
d1:fe:5e:de:3d:ce:cf:37:97:8f:23:85:c9:38:b7:
24:72:b4:7f:1b:5c:fe:14:b1:84:d7:7b:1e:ad:a5:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AA:D8:C3:97:ED:8B:CF:56:60:95:F4:6B:25:60:1A:0F:78:0B:2E
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:da:ac:c9:c8:d8:6e:d4:45:b8:8e:f6:25:c6:33:fc:79:
58:81:46:66:61:60:b1:4a:33:93:ed:cd:6a:41:3c:16:82:d6:
59:5f:37:4c:1f:bd:66:50:71:25:1b:fa:c1:15:1d:a4:0e:c4:
21:b2:72:7f:d0:72:de:b1:1c:0c:e0:65:d4:e7:eb:63:c5:4d:
da:7e:79:49:53:86:90:1e:56:58:39:19:80:c6:1b:83:cd:bd:
5f:ce:8a:e8:0a:14:30:ad:a7:d2:e7:be:4b:0e:f1:2e:fb:68:
4f:d3:6a:04:95:ae:06:29:e0:08:b3:99:bc:35:b4:27:b5:17:
ce:8e:d6:c9:4d:99:3e:83:dc:f9:7a:ed:a2:49:81:9d:fe:c8:
61:d7:dc:83:50:a1:5d:e9:41:69:b7:83:35:09:ec:f9:5b:9b:
f1:11:65:a2:4c:bf:4f:e1:dc:80:3a:22:5b:9e:14:a3:5f:f4:
3a:f7:42:77:98:4b:d0:75:84:cd:93:00:fc:e9:28:f3:0c:ab:
fe:f9:13:3e:1d:cb:4e:fb:4c:51:51:81:85:18:21:0f:10:85:
81:f7:5e:ac:cf:33:43:9d:66:b0:f6:7f:0b:6e:0d:5b:c8:df:
da:90:e5:c5:86:bc:cb:4f:57:2e:32:8b:ef:79:c0:df:23:c4:
d7:27:89:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3dgMbU0D1wsdXpKPGb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmUxNjcyNDYzYjdmMTVmMTJiMjJmOGI5NjcwNGIwNGE1
ZGJlOTUwHhcNMjYwMzI2MTAwMTI1WhcNMjYwMzI3MTAwMTI1WjAzMTEwLwYDVQQD
Eyg4Y2FhZDhjMzk3ZWQ4YmNmNTY2MDk1ZjQ2YjI1NjAxYTBmNzgwYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPIov4JRHw61GFICmlL9PXhqTnVA
bClLuPZ6OcZYUd6rDVSe9SalUw1Yvi3+fRv2EnQXs7e9rexUS6cjK3Ne2wlXKfgP
BXOXa+x0ckmq85JHR129Tv3sLkFLIDWl7rCvLX8LPxf+7J2eCPZVtiY48vFm7C6I
i8KkHQxH0W90TaZ7J0iW/zfjFw6bv05mWNbSPHHpVAvq9rZjHcZ3NOtkW/F5Zhq6
nwMRpQqBxCl+85n0nvBBlbGxLH/xMD1CEzYIm31S8QxBebGrA+OKY/BXrmLj8Y5/
dEjpMS1UFQjJpL/R/l7ePc7PN5ePI4XJOLckcrR/G1z+FLGE13seraXicwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyq2MOX7YvPVmCV9GslYBoPeAsuMB8GA1UdIwQY
MBaAFP8uFnJGO38V8Ssi+LlnBLBKXb6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYt
ZTQ0NTZmNTdkNDgyLzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYtZTQ0NTZmNTdkNDgy
LzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMnarMnI
2G7URbiO9iXGM/x5WIFGZmFgsUozk+3NakE8FoLWWV83TB+9ZlBxJRv6wRUdpA7E
IbJyf9By3rEcDOBl1OfrY8VN2n55SVOGkB5WWDkZgMYbg829X86K6AoUMK2n0ue+
Sw7xLvtoT9NqBJWuBingCLOZvDW0J7UXzo7WyU2ZPoPc+XrtokmBnf7IYdfcg1Ch
XelBabeDNQns+Vub8RFloky/T+HcgDoiW54Uo1/0OvdCd5hL0HWEzZMA/Oko8wyr
/vkTPh3LTvtMUVGBhRghDxCFgfderM8zQ51msPZ/C24NW8jf2pDlxYa8y09XLjKL
73nA3yPE1yeJuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:06 2026 by rpki-client