Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: hbcKUF71X8jdkYfmOC6QFuXAxA4U8Up3NgC3BURmyg8=
Subject key identifier: 4D:60:CC:BA:11:44:5B:5F:6B:57:AF:50:6D:F7:7F:1A:D2:FC:CD:B7
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 019D31BE32C45920DF241E7691CE38482C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 00:00:41 +0000
Manifest this update: Sat 28 Mar 2026 00:00:41 +0000
Manifest next update: Sun 29 Mar 2026 00:00:41 +0000
Files and hashes: 1: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: dMoP+PyazqDoc9BSjaUdsw9htJ3OCuHWaloPZF2HmGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:32:c4:59:20:df:24:1e:76:91:ce:38:48:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Mar 28 00:00:41 2026 GMT
Not After : Mar 29 00:00:41 2026 GMT
Subject: CN=4d60ccba11445b5f6b57af506df77f1ad2fccdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:f8:5d:9d:e4:83:5b:f7:7c:1f:df:7d:69:
fd:e3:8c:93:da:0e:43:bc:04:30:de:24:08:d9:b6:
39:99:3d:ed:77:fd:ed:c5:ee:bd:e1:e8:b1:36:ee:
60:18:99:01:67:03:f5:53:7f:e4:04:7d:5f:4a:f1:
38:5f:b0:93:63:7a:a5:7f:0f:fd:d1:76:19:d8:65:
75:c1:4b:21:b7:6e:41:ee:e0:02:29:4e:a7:d6:8d:
12:1f:f4:63:f4:cb:93:f6:8d:cb:1f:31:bc:8f:40:
25:76:c0:32:2a:9d:50:df:be:dc:91:d0:38:c8:5c:
f9:de:62:c7:82:35:7c:fd:5b:7b:47:6d:bd:94:55:
f1:e1:8b:7e:11:ec:34:49:79:d7:be:d8:38:69:67:
9d:87:c4:51:49:aa:63:2f:ed:7c:35:90:e1:63:5d:
ce:3b:e1:8d:77:56:e5:fa:a3:88:2d:62:96:b5:82:
d6:e4:5c:f2:ba:44:e3:da:90:04:cc:7c:6d:bb:72:
c7:4a:5f:6b:58:cc:75:8e:d1:d8:37:ae:1a:b6:bc:
4e:5c:cc:85:5b:55:d4:7b:c2:63:d6:34:5e:a4:bf:
e1:13:b5:2c:4c:96:62:a9:cd:70:af:c9:e5:fe:68:
c7:29:df:69:ca:79:4c:a7:ba:ea:b7:2a:91:a6:2d:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:CC:BA:11:44:5B:5F:6B:57:AF:50:6D:F7:7F:1A:D2:FC:CD:B7
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:63:d6:8f:7d:b6:7d:b9:31:21:42:81:6d:b6:e0:1c:28:5a:
2b:e0:9c:d4:2a:99:ab:ca:ac:83:9a:65:67:6c:42:30:a8:38:
f7:d2:d7:a5:44:a5:c6:d2:55:df:29:45:4b:ed:ec:08:a4:ec:
dd:5c:9e:2a:c7:ee:d6:7e:32:b7:01:fc:e3:9b:10:72:1a:4c:
cf:8c:ec:43:a5:43:2c:12:a9:8f:8a:28:9e:6f:5c:0e:22:17:
8b:99:e3:b7:3e:2b:05:84:71:cd:60:94:b7:a1:c6:2a:a0:bd:
d6:3c:41:e5:e5:7b:67:3d:6b:e5:c7:d5:b2:b7:98:bf:85:21:
66:63:56:75:63:8b:c5:9f:82:02:eb:cf:18:93:67:52:9a:39:
c2:b0:e6:cd:48:df:8e:75:d0:71:d7:9f:df:de:99:b8:d4:8e:
2c:40:75:ec:43:4f:51:3c:bc:7e:ad:c6:a8:9e:64:4f:79:87:
9c:76:1d:8b:b9:f4:82:f7:0b:b1:74:ce:0a:a0:ad:a2:ca:5c:
f4:34:86:c1:3b:89:d1:3d:ee:d7:d8:e6:b2:d5:fc:93:27:59:
ca:49:f6:2a:ee:25:14:b1:74:ba:2f:bc:9d:3e:d7:c1:0f:81:
f7:ef:d3:ae:cd:e8:b0:fb:8f:a0:90:42:9e:82:41:d0:3d:77:
08:db:98:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xvjLEWSDfJB52kc44SCyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZGYzMzdjZWE1NmEwODNmNDZiNzk5MDcyZTcwZGEzNDVj
YzIzNjQwHhcNMjYwMzI4MDAwMDQxWhcNMjYwMzI5MDAwMDQxWjAzMTEwLwYDVQQD
Eyg0ZDYwY2NiYTExNDQ1YjVmNmI1N2FmNTA2ZGY3N2YxYWQyZmNjZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3n4XZ3kg1v3fB/ffWn944yT2g5D
vAQw3iQI2bY5mT3td/3txe694eixNu5gGJkBZwP1U3/kBH1fSvE4X7CTY3qlfw/9
0XYZ2GV1wUsht25B7uACKU6n1o0SH/Rj9MuT9o3LHzG8j0AldsAyKp1Q377ckdA4
yFz53mLHgjV8/Vt7R229lFXx4Yt+Eew0SXnXvtg4aWedh8RRSapjL+18NZDhY13O
O+GNd1bl+qOILWKWtYLW5FzyukTj2pAEzHxtu3LHSl9rWMx1jtHYN64atrxOXMyF
W1XUe8Jj1jRepL/hE7UsTJZiqc1wr8nl/mjHKd9pynlMp7rqtyqRpi12gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1gzLoRRFtfa1evUG33fxrS/M23MB8GA1UdIwQY
MBaAFMjfM3zqVqCD9Gt5kHLnDaNFzCNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDIt
NmZkYmNhNjAwZTAwLzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOTdkNTQtYmQ4Mi00MmUwLTljNDItNmZkYmNhNjAwZTAw
LzEveU44emZPcFdvSVAwYTNtUWN1Y05vMFhNSTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGPWj322
fbkxIUKBbbbgHChaK+Cc1CqZq8qsg5plZ2xCMKg499LXpUSlxtJV3ylFS+3sCKTs
3VyeKsfu1n4ytwH845sQchpMz4zsQ6VDLBKpj4oonm9cDiIXi5njtz4rBYRxzWCU
t6HGKqC91jxB5eV7Zz1r5cfVsreYv4UhZmNWdWOLxZ+CAuvPGJNnUpo5wrDmzUjf
jnXQcdef396ZuNSOLEB17ENPUTy8fq3GqJ5kT3mHnHYdi7n0gvcLsXTOCqCtospc
9DSGwTuJ0T3u19jmstX8kydZykn2Ku4lFLF0ui+8nT7XwQ+B9+/Trs3osPuPoJBC
noJB0D13CNuY+g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:07 2026 by rpki-client