Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: J3aLggh9w91V7jN6aFLbsTguiACJtSerCHpehyVRKSo=
Subject key identifier: 34:A6:33:B1:6A:0E:E2:C7:0D:36:76:08:50:19:B1:9D:54:0B:A0:E4
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019D262893431EA8EAD0C956A7B401F9D12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: A2
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: CP7XAwVQiMz2Q6ounln3ad2WPSs.asa (hash: dHCmJ8L0c4EENwwKULgdmd0i+CmSQXVp+UAKeU6FrFw=)
2: XE1hA9GoSwCCQTzlrJPud8rwosk.roa (hash: YUFGp3JRLfRJAoIp1SDL1Gd34rSXV9G2A1bQuPoViQw=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: DBhsmH5Gy8QUzm5LKGDcYdQWhp9Tw17jy4PoEW4q2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:93:43:1e:a8:ea:d0:c9:56:a7:b4:01:f9:d1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=34a633b16a0ee2c70d3676085019b19d540ba0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:86:e4:2e:9d:62:d7:33:48:8d:be:7d:b6:
e6:21:f9:94:30:42:9c:c6:91:f6:39:04:58:26:3c:
14:ff:cd:a3:5e:9d:55:1d:92:18:c8:07:43:36:d1:
6e:9e:59:52:32:10:2e:a2:a4:59:6a:7b:5d:57:6e:
7b:8e:6b:ed:5e:6b:bc:54:c5:49:32:87:4a:89:7b:
bb:62:4f:3f:99:63:72:45:40:e0:7b:fe:d1:dd:1c:
b1:8d:c4:14:1e:c8:ec:10:36:2b:d4:57:b5:90:76:
9a:1b:5e:23:2d:4f:56:03:2c:9e:5d:7a:fb:2c:11:
c1:69:37:7e:0d:7e:29:46:32:4b:30:db:2e:b7:a1:
0e:29:47:7a:78:5d:d9:69:f7:03:1a:5f:a7:bc:0b:
6d:b1:cb:fe:34:72:7d:78:58:dd:a0:70:b8:53:8e:
ce:4f:d5:9c:7c:e2:18:c1:80:c7:e8:de:5a:01:26:
a7:cf:a8:28:f0:5e:23:32:5c:ee:34:fb:df:8e:cd:
a8:b8:76:ec:79:65:53:96:73:c6:e7:d2:aa:e4:60:
31:4b:40:69:42:cc:8d:8d:15:2f:fa:57:04:65:8a:
e6:68:b7:01:da:02:76:4d:35:67:e0:7e:cd:29:8e:
5f:0f:2d:26:f5:33:12:c8:18:f6:b4:a5:ec:e4:0e:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:33:B1:6A:0E:E2:C7:0D:36:76:08:50:19:B1:9D:54:0B:A0:E4
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:d3:41:35:7d:18:7d:45:c6:ac:27:dd:8d:e2:0e:eb:2d:
47:e1:96:97:bb:fd:70:7a:b8:9a:8b:2b:ec:c3:ab:d9:c4:4e:
cc:90:bb:17:96:3b:5a:81:7c:20:49:43:59:d1:7b:3c:eb:ca:
79:d7:3f:59:39:ca:3a:5a:23:b0:a3:3f:65:d9:9e:b1:cb:24:
fa:c0:cb:b6:ee:5c:25:e4:b6:a2:10:61:e1:23:c9:6a:e3:67:
6e:4f:c9:8b:ed:a8:06:93:22:b0:37:d0:26:04:9e:dd:1e:3d:
0b:08:5f:90:0e:e3:c8:f3:a4:43:8f:a3:07:0d:f9:d4:bd:c9:
d8:7f:be:a4:19:14:56:00:40:d6:f3:98:61:c3:e6:82:55:f9:
c4:92:43:98:30:07:eb:79:3e:23:c7:18:30:5f:a8:0c:e1:c1:
39:b5:d0:39:00:ba:5f:fc:e8:15:96:63:3d:c8:18:41:8d:b0:
b7:57:ee:ac:58:dd:0d:9c:87:cd:ac:0b:9b:fc:8b:7e:d5:0a:
42:75:73:b5:be:53:1e:fb:5b:75:27:cf:b7:2c:d6:89:24:1f:
1e:b3:56:00:1d:5f:01:7f:32:82:b9:fd:3a:98:b2:44:5d:72:
92:90:33:62:2b:a6:a4:6e:62:3d:ca:09:b3:54:b1:ed:8d:ac:
ff:c1:7e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJNDHqjq0MlWp7QB+dEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjU3NmIyMzZlM2VlNWQxZjk5OTljM2RiYjdjMTZjNDUx
ZjllMWYwHhcNMjYwMzI1MTgwMTI2WhcNMjYwMzI2MTgwMTI2WjAzMTEwLwYDVQQD
EygzNGE2MzNiMTZhMGVlMmM3MGQzNjc2MDg1MDE5YjE5ZDU0MGJhMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWG5C6dYtczSI2+fbbmIfmUMEKc
xpH2OQRYJjwU/82jXp1VHZIYyAdDNtFunllSMhAuoqRZantdV257jmvtXmu8VMVJ
ModKiXu7Yk8/mWNyRUDge/7R3RyxjcQUHsjsEDYr1Fe1kHaaG14jLU9WAyyeXXr7
LBHBaTd+DX4pRjJLMNsut6EOKUd6eF3ZafcDGl+nvAttscv+NHJ9eFjdoHC4U47O
T9WcfOIYwYDH6N5aASanz6go8F4jMlzuNPvfjs2ouHbseWVTlnPG59Kq5GAxS0Bp
QsyNjRUv+lcEZYrmaLcB2gJ2TTVn4H7NKY5fDy0m9TMSyBj2tKXs5A5OrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSmM7FqDuLHDTZ2CFAZsZ1UC6DkMB8GA1UdIwQY
MBaAFMj1drI24+5dH5mZw9u3wWxFH54fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMt
ODkyZTdlM2NjZWNmLzEveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMtODkyZTdlM2NjZWNm
LzEveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUnTQTV9
GH1Fxqwn3Y3iDustR+GWl7v9cHq4mosr7MOr2cROzJC7F5Y7WoF8IElDWdF7POvK
edc/WTnKOlojsKM/Zdmescsk+sDLtu5cJeS2ohBh4SPJauNnbk/Ji+2oBpMisDfQ
JgSe3R49CwhfkA7jyPOkQ4+jBw351L3J2H++pBkUVgBA1vOYYcPmglX5xJJDmDAH
63k+I8cYMF+oDOHBObXQOQC6X/zoFZZjPcgYQY2wt1furFjdDZyHzawLm/yLftUK
QnVztb5THvtbdSfPtyzWiSQfHrNWAB1fAX8ygrn9OpiyRF1ykpAzYiumpG5iPcoJ
s1Sx7Y2s/8F+xg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:09 2026 by rpki-client