Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
File: yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json)
Hash identifier: I4N5og3ArgSR1D1hLi8+COXQu8gtCcSVSs83OgtT4Wc=
Subject key identifier: 83:90:3F:17:63:14:D0:F4:AB:4B:B8:CF:6C:38:3B:FC:5E:A1:E7:E1
Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Certificate serial: 019D28BB7294B3D9F81D7049A337822EAA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
Manifest number: 11D6
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: xX0KGIvLQes55K6JPglZPPnxQiA.roa (hash: XeKa8aHFKZ1r7SOoTQMHPVlkjUA/yur8nQajCi/GwGA=)
2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: UibERaqcQKyq+sKv+IF9Oa9akLvOFRihRT3cX9z+Yas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:94:b3:d9:f8:1d:70:49:a3:37:82:2e:aa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=83903f176314d0f4ab4bb8cf6c383bfc5ea1e7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:28:48:5e:7b:c5:5b:f2:02:6f:0d:f9:80:
de:df:2f:8e:67:e5:16:d6:28:bd:c5:c4:b7:b0:8b:
96:6e:72:1e:bd:34:ca:fc:04:fc:87:00:df:b7:4e:
08:8c:b6:e0:5d:65:74:f2:e9:3d:8d:a2:6f:58:f6:
9c:5d:22:69:c9:45:50:d2:d5:1c:95:8a:76:04:9c:
70:63:0a:8e:66:13:c8:03:f4:6d:7f:75:2d:57:37:
86:c9:8a:0f:91:76:04:e2:9f:f4:6c:43:17:0c:1f:
0d:27:22:d7:5a:59:9a:37:ef:fd:78:3c:c3:71:a5:
bc:9e:51:73:7d:bf:06:ac:3c:81:7c:cc:87:25:80:
d4:e7:6b:2c:b7:69:91:d4:68:09:26:aa:9e:21:fb:
cd:6a:30:38:46:f4:e1:38:2c:9e:34:cb:67:7f:f0:
24:b0:22:ef:75:ec:f8:37:5f:68:c3:49:94:fc:92:
71:1b:99:8f:87:16:8f:1e:ef:aa:d5:23:53:22:dd:
59:11:fa:26:72:cc:37:28:d3:cb:88:ca:da:38:aa:
20:de:ef:06:87:95:27:1d:ce:31:a9:53:40:1f:6c:
f2:cf:11:fb:f8:07:31:b5:a5:6f:41:d5:04:62:1f:
47:69:83:85:c9:57:f8:95:25:73:c4:32:70:d6:3e:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:3F:17:63:14:D0:F4:AB:4B:B8:CF:6C:38:3B:FC:5E:A1:E7:E1
X509v3 Authority Key Identifier:
keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:72:eb:1e:e0:9a:aa:ee:95:aa:81:1b:68:d8:f6:94:0d:
e3:1c:a8:3c:07:f7:11:49:c3:32:bc:4c:ac:a9:3d:36:57:0a:
82:13:22:69:84:54:9d:c9:3e:b6:e9:4e:74:58:53:87:2c:82:
af:24:d4:49:19:ca:2b:60:54:ce:05:0f:da:d5:c5:a9:2c:d7:
53:3b:25:4f:ca:bc:02:d9:52:f4:84:eb:b2:63:72:84:4b:30:
b6:60:44:31:eb:a1:09:08:0b:27:81:0e:a0:32:6c:db:20:94:
17:90:29:64:96:54:c8:b6:4d:5c:4c:56:ad:ed:d0:4e:48:fa:
37:e4:00:89:10:bd:d8:80:63:3c:d4:48:74:bb:87:4a:e3:94:
14:77:15:fd:b0:3e:28:f6:46:c0:61:99:33:9a:54:2f:e6:e0:
86:38:cc:22:3d:84:63:0e:17:1e:5a:27:54:e4:06:3a:ce:9f:
08:06:c4:2d:e7:0c:ff:2c:2a:d3:3e:30:16:03:f9:50:31:6a:
a7:7a:db:d8:e6:71:81:fe:d0:3a:7b:05:b4:1c:2f:21:72:f4:
89:16:c7:b8:75:78:05:85:b5:67:0a:a6:4b:f4:36:ba:cd:e3:
c8:ac:a6:ab:89:86:d9:5f:67:22:ae:42:9d:3a:7c:8b:c9:86:
df:84:e3:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3KUs9n4HXBJozeCLqohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZTA2OWI2NjNlZTI1ZmQxMzU1OTEwMWRhYzFkNTAzMmI5
ZmQ2NmUwHhcNMjYwMzI2MDYwMTA2WhcNMjYwMzI3MDYwMTA2WjAzMTEwLwYDVQQD
Eyg4MzkwM2YxNzYzMTRkMGY0YWI0YmI4Y2Y2YzM4M2JmYzVlYTFlN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHUoSF57xVvyAm8N+YDe3y+OZ+UW
1ii9xcS3sIuWbnIevTTK/AT8hwDft04IjLbgXWV08uk9jaJvWPacXSJpyUVQ0tUc
lYp2BJxwYwqOZhPIA/Rtf3UtVzeGyYoPkXYE4p/0bEMXDB8NJyLXWlmaN+/9eDzD
caW8nlFzfb8GrDyBfMyHJYDU52sst2mR1GgJJqqeIfvNajA4RvThOCyeNMtnf/Ak
sCLvdez4N19ow0mU/JJxG5mPhxaPHu+q1SNTIt1ZEfomcsw3KNPLiMraOKog3u8G
h5UnHc4xqVNAH2zyzxH7+AcxtaVvQdUEYh9HaYOFyVf4lSVzxDJw1j5+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOQPxdjFND0q0u4z2w4O/xeoefhMB8GA1UdIwQY
MBaAFMrgabZj7iX9E1WRAdrB1QMrn9ZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2Mt
ZWNjZWVlZTExMGE0LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2MtZWNjZWVlZTExMGE0
LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl1y6x7g
mqrulaqBG2jY9pQN4xyoPAf3EUnDMrxMrKk9NlcKghMiaYRUnck+tulOdFhThyyC
ryTUSRnKK2BUzgUP2tXFqSzXUzslT8q8AtlS9ITrsmNyhEswtmBEMeuhCQgLJ4EO
oDJs2yCUF5ApZJZUyLZNXExWre3QTkj6N+QAiRC92IBjPNRIdLuHSuOUFHcV/bA+
KPZGwGGZM5pUL+bghjjMIj2EYw4XHlonVOQGOs6fCAbELecM/ywq0z4wFgP5UDFq
p3rb2OZxgf7QOnsFtBwvIXL0iRbHuHV4BYW1ZwqmS/Q2us3jyKymq4mG2V9nIq5C
nTp8i8mG34Tjng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:10 2026 by rpki-client