Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: Pou+vdWalNifkGJJ0lPMR09avSMvObHIJJiyd/OLFKY=
Subject key identifier: A6:9D:49:E7:D3:D8:D5:B3:FE:FE:B3:62:00:70:6B:B5:E3:FE:73:36
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 019D26CD3B167C08C7BCC1271BD485F3DD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 0D08
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: VuBlEkm2FhdUdv2xrxxG+9QQVUbD7vGbvaldtjajYco=)
2: iYF3KvUl8FH939niefVDnuUP2E0.roa (hash: hm0pJ2uzYWg+4xRBDq9krSLEFM5bGxPbKMQmAB2V7Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3b:16:7c:08:c7:bc:c1:27:1b:d4:85:f3:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=a69d49e7d3d8d5b3fefeb36200706bb5e3fe7336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:5a:52:f7:a0:af:d8:eb:ac:a7:52:16:88:
5a:82:15:c8:5b:54:c2:b4:02:0e:ed:34:e2:12:0a:
53:f6:0b:2c:02:1b:20:9b:53:b6:48:24:aa:38:20:
47:b4:e7:7f:ef:59:13:b7:07:17:14:d5:92:a1:20:
4c:87:b2:20:8b:cb:39:98:56:e9:ba:63:cd:d3:6b:
3a:ff:fd:ed:f8:65:d8:ca:f4:b8:6c:36:43:de:56:
dc:2d:5f:92:23:11:d8:1c:f7:47:4a:23:98:e6:2f:
56:06:33:3a:ca:f7:72:5f:01:0f:ec:02:09:41:73:
30:c8:52:41:56:bf:17:89:62:dd:62:01:10:f7:70:
89:c5:4a:1f:70:00:49:3b:6e:0f:7d:b0:30:92:0f:
6b:7a:46:3d:c2:94:e9:aa:e5:c7:d6:9b:00:a1:93:
0f:ec:05:1e:25:70:d8:72:73:df:c9:29:fb:e7:94:
a2:42:09:0f:6a:c4:d7:d2:8b:a3:2c:57:9b:a5:0e:
6a:a8:e6:3b:3d:4a:90:bb:09:e4:2d:da:3d:4c:a5:
27:66:ac:26:50:52:6a:e3:12:78:d6:6e:ef:d6:37:
a5:cd:ca:d8:69:e0:d8:d3:25:fe:a3:69:36:61:d5:
97:02:fa:d3:e7:15:c0:f6:2c:33:44:e9:b1:4a:ac:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:49:E7:D3:D8:D5:B3:FE:FE:B3:62:00:70:6B:B5:E3:FE:73:36
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:0c:df:ae:df:ef:b6:a5:88:33:03:11:f9:9f:4b:b3:ea:
ca:55:70:a7:04:73:eb:fa:00:94:5a:09:d5:06:47:2c:df:b8:
29:41:76:1f:d3:cd:9f:57:78:5b:07:c4:ee:04:75:75:0f:fc:
1c:55:92:9b:15:37:c1:cb:eb:b6:28:57:e0:e1:fa:c1:e3:7e:
ef:53:b0:37:74:42:8d:29:80:79:41:33:12:eb:dd:36:5a:ea:
ee:87:87:64:af:74:ae:69:4e:d9:c1:2b:19:a0:16:0e:0c:96:
92:6c:3b:46:a4:a1:61:aa:d2:b7:44:bf:d8:6a:14:18:ed:e2:
f1:6e:3e:bc:65:55:4c:90:29:d3:d3:d7:2a:7b:25:75:c9:64:
f7:c7:2f:9a:27:ec:a1:4b:da:68:9c:78:12:eb:e3:f4:f6:8a:
9f:94:c7:35:2e:3a:a1:75:ef:c4:b0:0a:80:65:6a:db:de:37:
19:b7:33:ce:31:bf:42:ab:64:36:62:da:6d:9b:78:c1:cb:bf:
94:4a:37:a7:5f:30:5c:e1:e5:03:23:5a:f6:eb:67:33:a1:6c:
c8:24:5e:ea:29:e9:2b:5b:0a:97:ca:18:39:47:f7:01:b4:2f:
61:4f:93:46:88:a5:70:8a:23:7a:18:54:84:6c:56:04:db:e1:
0c:af:a0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzTsWfAjHvMEnG9SF890cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjZiY2Y2ZTJiMTA5YmEyYTE0YTczYjk3NWFkOTU0NDg0
YjRiYTUwHhcNMjYwMzI1MjEwMTE3WhcNMjYwMzI2MjEwMTE3WjAzMTEwLwYDVQQD
EyhhNjlkNDllN2QzZDhkNWIzZmVmZWIzNjIwMDcwNmJiNWUzZmU3MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqpaUvegr9jrrKdSFohaghXIW1TC
tAIO7TTiEgpT9gssAhsgm1O2SCSqOCBHtOd/71kTtwcXFNWSoSBMh7Igi8s5mFbp
umPN02s6//3t+GXYyvS4bDZD3lbcLV+SIxHYHPdHSiOY5i9WBjM6yvdyXwEP7AIJ
QXMwyFJBVr8XiWLdYgEQ93CJxUofcABJO24PfbAwkg9rekY9wpTpquXH1psAoZMP
7AUeJXDYcnPfySn755SiQgkPasTX0oujLFebpQ5qqOY7PUqQuwnkLdo9TKUnZqwm
UFJq4xJ41m7v1jelzcrYaeDY0yX+o2k2YdWXAvrT5xXA9iwzROmxSqxr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKadSefT2NWz/v6zYgBwa7Xj/nM2MB8GA1UdIwQY
MBaAFGD2vPbisQm6KhSnO5da2VRIS0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2Qt
YWI0MDI1M2I1ZTJiLzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2QtYWI0MDI1M2I1ZTJi
LzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAcM367f
77aliDMDEfmfS7PqylVwpwRz6/oAlFoJ1QZHLN+4KUF2H9PNn1d4WwfE7gR1dQ/8
HFWSmxU3wcvrtihX4OH6weN+71OwN3RCjSmAeUEzEuvdNlrq7oeHZK90rmlO2cEr
GaAWDgyWkmw7RqShYarSt0S/2GoUGO3i8W4+vGVVTJAp09PXKnsldclk98cvmifs
oUvaaJx4Euvj9PaKn5THNS46oXXvxLAKgGVq2943GbczzjG/QqtkNmLabZt4wcu/
lEo3p18wXOHlAyNa9utnM6FsyCRe6inpK1sKl8oYOUf3AbQvYU+TRoilcIojehhU
hGxWBNvhDK+gdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:03 2026 by rpki-client