Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: 54eRJMoTqydOMp4ttxooBeymRC9Sw3L6neR65CUhO1o=
Subject key identifier: 9A:9E:10:2B:F2:D3:08:23:28:12:73:42:65:2F:88:A0:C3:56:B5:C7
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019D25834E6BE53476CE0B5000B0C5151917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: G1KaBVb4MbkYjcVikkTk5XLlQgKHwGfVVrNIwFTVS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4e:6b:e5:34:76:ce:0b:50:00:b0:c5:15:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=9a9e102bf2d3082328127342652f88a0c356b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:e4:61:1b:38:30:db:f0:ca:73:1b:24:86:
39:06:4f:b9:92:b5:04:ef:0e:8d:58:3f:3f:fa:3e:
fc:af:5f:82:f2:19:09:4c:d0:c4:6c:4c:cd:ad:6a:
47:59:ca:0d:fc:18:58:81:b3:d9:0f:7d:0d:b5:8d:
e6:80:9a:fe:3d:bd:da:ec:f5:6e:79:9c:4a:b1:58:
c4:1b:99:54:b6:48:15:73:5b:ba:74:9d:03:d9:05:
1b:c5:77:85:6c:45:2c:29:27:68:ae:cd:df:21:ab:
67:bf:d6:9c:6c:43:d4:16:e0:c9:97:a1:ef:7d:08:
98:b6:1d:3d:4e:b7:4a:96:57:07:43:70:7d:8d:12:
c2:05:bb:e9:b3:07:1b:5f:f2:b5:0b:41:3c:37:ee:
e4:c3:ce:98:44:37:30:62:79:e8:47:89:02:2f:3a:
09:7c:4a:a1:a3:b4:bf:03:02:63:3c:91:33:ec:c4:
6b:83:75:9c:1f:62:51:17:02:ac:0e:e1:4e:58:6e:
92:9c:a1:24:45:39:aa:5f:af:97:1e:02:dd:76:22:
fc:09:09:09:1c:2d:24:ac:9e:39:7d:15:2e:0a:31:
89:52:f2:f0:8e:8e:cb:82:0f:b4:a6:c2:eb:21:43:
95:e3:12:a2:42:66:d5:a1:6b:17:5e:6b:2e:34:e5:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:10:2B:F2:D3:08:23:28:12:73:42:65:2F:88:A0:C3:56:B5:C7
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:82:38:ea:90:62:1c:a5:4d:c4:89:b8:dd:3b:57:51:19:f5:
2b:08:4b:92:d7:b5:82:b6:12:34:71:6c:57:24:f4:19:b4:49:
bb:8d:ea:05:45:95:1a:19:d6:4c:a0:cf:cf:49:ea:92:c9:04:
b1:f1:98:74:b4:d2:ba:37:22:b0:67:ab:ba:09:f0:25:f8:a2:
d9:1c:14:bd:9e:37:00:bd:dc:54:5d:61:42:60:d9:14:6f:2c:
fd:e6:c5:c0:9a:a1:9b:75:1b:56:ad:b4:06:21:bd:e1:6e:b6:
94:cd:75:22:e8:10:a2:88:c0:93:dc:ae:4d:6f:be:3d:12:b7:
27:50:ba:34:83:a0:04:c0:cb:a3:92:c3:dc:e4:92:31:25:f0:
89:0a:8f:be:6e:e2:9e:ba:73:74:94:44:c9:7e:5e:39:8c:fd:
20:dd:19:3d:3e:23:29:e5:71:5d:23:ca:c3:e7:2a:39:a3:61:
2e:e0:52:77:0b:31:22:5c:07:d1:27:fc:09:16:dc:8c:28:e4:
80:70:82:22:88:31:2a:85:6d:3d:0b:9b:30:96:54:65:84:b9:
fd:14:d5:b1:26:4a:7a:3f:61:c3:4e:09:54:bf:c3:88:79:9b:
8d:02:2d:51:ac:d4:f9:4a:e8:17:80:00:a8:ac:51:14:b7:58:
a2:52:01:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg05r5TR2zgtQALDFFRkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDAxYjk0ODU5NWJjZTI0OTEzZjgxMWFmZjcxZTNjY2U0
NWQ2NTYwHhcNMjYwMzI1MTUwMDU1WhcNMjYwMzI2MTUwMDU1WjAzMTEwLwYDVQQD
Eyg5YTllMTAyYmYyZDMwODIzMjgxMjczNDI2NTJmODhhMGMzNTZiNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3kYRs4MNvwynMbJIY5Bk+5krUE
7w6NWD8/+j78r1+C8hkJTNDEbEzNrWpHWcoN/BhYgbPZD30NtY3mgJr+Pb3a7PVu
eZxKsVjEG5lUtkgVc1u6dJ0D2QUbxXeFbEUsKSdors3fIatnv9acbEPUFuDJl6Hv
fQiYth09TrdKllcHQ3B9jRLCBbvpswcbX/K1C0E8N+7kw86YRDcwYnnoR4kCLzoJ
fEqho7S/AwJjPJEz7MRrg3WcH2JRFwKsDuFOWG6SnKEkRTmqX6+XHgLddiL8CQkJ
HC0krJ45fRUuCjGJUvLwjo7Lgg+0psLrIUOV4xKiQmbVoWsXXmsuNOWSAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqeECvy0wgjKBJzQmUviKDDVrXHMB8GA1UdIwQY
MBaAFMoAG5SFlbziSRP4Ea/3HjzORdZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDIt
Y2ZjNmFhMDE2NjY5LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDItY2ZjNmFhMDE2NjY5
LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4I46pBi
HKVNxIm43TtXURn1KwhLkte1grYSNHFsVyT0GbRJu43qBUWVGhnWTKDPz0nqkskE
sfGYdLTSujcisGerugnwJfii2RwUvZ43AL3cVF1hQmDZFG8s/ebFwJqhm3UbVq20
BiG94W62lM11IugQoojAk9yuTW++PRK3J1C6NIOgBMDLo5LD3OSSMSXwiQqPvm7i
nrpzdJREyX5eOYz9IN0ZPT4jKeVxXSPKw+cqOaNhLuBSdwsxIlwH0Sf8CRbcjCjk
gHCCIogxKoVtPQubMJZUZYS5/RTVsSZKej9hw04JVL/DiHmbjQItUazU+UroF4AA
qKxRFLdYolIBmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:42 2026 by rpki-client