Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: 0DNK/NA/5eiCu542bD4YMCe9VUB0c/1W8QABt2W6nrU=
Subject key identifier: 71:E0:62:4E:BF:FE:74:A3:9D:30:6B:DC:9A:AE:51:0F:49:96:93:C5
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019D29CDF94B9BC2BE9EAD1149D6362FE057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: YE5lv4IS+cUvKNiSD5kVYsJeHLcb07EDZYZhyBBzs/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f9:4b:9b:c2:be:9e:ad:11:49:d6:36:2f:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=71e0624ebffe74a39d306bdc9aae510f499693c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:3b:ae:ee:43:55:52:2d:4b:b4:cb:d9:20:
46:ed:83:fb:55:dd:8f:35:6c:bc:b2:92:4f:e5:4e:
f6:a0:d2:a0:a0:b7:0c:9c:1a:18:32:3e:69:1a:b3:
09:29:1e:43:ba:ed:90:7f:3f:1c:3d:26:f5:30:44:
2b:8b:b2:34:68:10:b5:bc:d0:3f:d5:f9:ce:96:87:
32:ca:25:c7:63:37:14:bd:64:49:df:7c:fb:e4:38:
ca:36:a6:21:fc:e7:85:ce:c4:6b:ab:76:06:7b:84:
18:00:af:4c:3d:2b:b1:50:ef:37:db:b5:0d:98:c1:
36:4c:11:7a:84:e8:10:b0:51:f6:a5:41:b4:bd:97:
0b:0e:78:52:ea:0b:d9:a7:ce:ac:25:73:12:e0:b6:
bc:9d:80:b2:95:2b:41:f6:e2:75:a1:51:b6:45:00:
f8:7d:dc:db:14:f2:87:be:34:b6:2e:65:08:74:4b:
8c:c6:fc:a0:14:79:b6:eb:4f:ff:7c:95:06:4c:bc:
f0:de:15:3b:88:10:3b:72:e1:45:ca:e9:cd:81:37:
3e:54:79:d3:48:21:64:9a:1b:80:f1:17:b4:24:a0:
4f:86:6e:1c:0a:73:86:94:77:ea:d0:40:80:45:ee:
b6:e0:0a:6c:92:5c:cf:94:ab:f4:36:ba:9d:de:5b:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:62:4E:BF:FE:74:A3:9D:30:6B:DC:9A:AE:51:0F:49:96:93:C5
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:b4:e9:31:e3:60:6a:23:fd:1e:25:2f:12:d1:3c:35:d8:
ab:6e:58:8b:50:0d:2a:ba:a6:da:e5:8b:cb:c8:1b:23:0e:09:
b3:02:e9:d4:f5:04:a5:13:7a:5b:9f:d1:9f:75:b4:e7:ff:a8:
e8:4c:64:1c:73:ad:41:da:a9:80:2d:86:8c:92:ba:f5:a1:c8:
4d:ac:a8:37:3f:4f:4f:46:83:c2:50:7f:05:20:b5:c3:73:b6:
69:d7:4d:98:b8:ff:42:57:1c:6d:29:ea:4d:31:22:27:ec:84:
75:6b:a3:c0:46:f7:db:c3:aa:44:e7:2a:35:2c:57:fd:61:b5:
c0:b5:72:ad:61:db:cc:3c:a2:c1:93:6c:cc:d3:1f:1d:87:9d:
60:0c:68:e2:b5:14:16:0b:df:47:e4:3e:51:85:01:7f:a9:64:
02:84:04:5e:51:09:10:24:8d:83:57:1d:0f:75:93:da:e0:bc:
35:b6:37:f9:6c:a3:43:94:22:b7:1c:c3:48:1b:ee:f1:18:a9:
01:a0:ee:96:cb:cc:df:6b:0b:50:ad:8a:38:06:e3:26:02:70:
88:28:f9:9f:b7:5a:66:74:73:60:1e:82:d8:2f:64:30:e1:7f:
8f:33:c7:14:3e:a0:40:92:29:8a:fa:18:39:44:e4:2e:bf:21:
f4:15:bd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzflLm8K+nq0RSdY2L+BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy
ZTcwYTUwHhcNMjYwMzI2MTEwMDU3WhcNMjYwMzI3MTEwMDU3WjAzMTEwLwYDVQQD
Eyg3MWUwNjI0ZWJmZmU3NGEzOWQzMDZiZGM5YWFlNTEwZjQ5OTY5M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV07ru5DVVItS7TL2SBG7YP7Vd2P
NWy8spJP5U72oNKgoLcMnBoYMj5pGrMJKR5Duu2Qfz8cPSb1MEQri7I0aBC1vNA/
1fnOlocyyiXHYzcUvWRJ33z75DjKNqYh/OeFzsRrq3YGe4QYAK9MPSuxUO8327UN
mME2TBF6hOgQsFH2pUG0vZcLDnhS6gvZp86sJXMS4La8nYCylStB9uJ1oVG2RQD4
fdzbFPKHvjS2LmUIdEuMxvygFHm260//fJUGTLzw3hU7iBA7cuFFyunNgTc+VHnT
SCFkmhuA8Re0JKBPhm4cCnOGlHfq0ECARe624ApsklzPlKv0Nrqd3lsW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHgYk6//nSjnTBr3JquUQ9JlpPFMB8GA1UdIwQY
MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt
MTM2OTYxOTdkM2I2LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2
LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHe06THj
YGoj/R4lLxLRPDXYq25Yi1ANKrqm2uWLy8gbIw4JswLp1PUEpRN6W5/Rn3W05/+o
6ExkHHOtQdqpgC2GjJK69aHITayoNz9PT0aDwlB/BSC1w3O2addNmLj/QlccbSnq
TTEiJ+yEdWujwEb328OqROcqNSxX/WG1wLVyrWHbzDyiwZNszNMfHYedYAxo4rUU
FgvfR+Q+UYUBf6lkAoQEXlEJECSNg1cdD3WT2uC8NbY3+WyjQ5QitxzDSBvu8Rip
AaDulsvM32sLUK2KOAbjJgJwiCj5n7daZnRzYB6C2C9kMOF/jzPHFD6gQJIpivoY
OUTkLr8h9BW9zQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:32 2026 by rpki-client