Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
File: yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft (raw, json)
Hash identifier: +i4/7BbH1wc2BRhYzc3Wa/GlOksoG3Xn39CoL7zoCME=
Subject key identifier: 7C:D8:CC:D5:27:5C:E1:53:CA:A0:90:0C:51:7E:DD:21:0B:89:72:51
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 019D3376352A0D63BDB55AD40FCDC81F168F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 08:01:17 +0000
Manifest this update: Sat 28 Mar 2026 08:01:17 +0000
Manifest next update: Sun 29 Mar 2026 08:01:17 +0000
Files and hashes: 1: 3vVZXpDUCirehXY4MO0zGH2vBO4.roa (hash: qpzysLhmvuGRqt7jkyatEEtyL/ESSTNsTcF+6pkg6kI=)
2: CjTHzz_pedQNs9Wy-ktvieMeLZU.roa (hash: GewhMZdSVK/eP+WdUo1TepjK8vxWB2eP26Uvtne0FXk=)
3: TQW4zD8K0vBl16MI3IxT8Xtlivw.roa (hash: 8QTOlJVZ39Tpkv2V9vgaCs5dPhtyiGWy37iuwYkyjaM=)
4: yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl (hash: rI4Mbss4yUddFY9fkan8m+pbQ+Zor6J0qFp7ocZSICY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:35:2a:0d:63:bd:b5:5a:d4:0f:cd:c8:1f:16:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Mar 28 08:01:17 2026 GMT
Not After : Mar 29 08:01:17 2026 GMT
Subject: CN=7cd8ccd5275ce153caa0900c517edd210b897251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:fc:7a:d3:d3:ab:3f:49:a9:22:e6:9a:00:
66:bc:b1:3b:7e:30:a5:25:7d:24:c8:94:f7:b7:67:
ca:a0:1f:05:80:ab:e9:1c:cd:b6:6e:4a:ee:4f:7e:
7e:91:92:c9:87:73:db:37:65:8c:b5:3c:4f:3b:ed:
5e:89:1c:eb:b8:f7:86:1b:da:f2:0d:f6:0a:22:4b:
ea:0d:7f:ae:11:db:bb:ab:90:e2:25:ec:22:67:5e:
48:e6:34:8a:de:77:ee:d8:b5:62:0e:c1:df:8d:c5:
95:40:17:be:d3:27:0a:62:92:72:b7:54:bb:ac:90:
83:2f:65:2c:25:61:11:91:c3:91:fe:03:0a:cd:ab:
b2:92:a6:20:67:4e:8c:6d:cf:ee:68:8b:ac:62:5a:
bf:4f:53:04:c1:ab:5f:c9:ab:5b:e2:09:18:4e:26:
8a:2b:d7:bc:e0:59:81:77:0d:22:5e:cd:b8:6b:43:
12:35:d0:25:9d:0b:73:6a:aa:8b:78:d6:0d:a2:99:
11:90:62:16:b4:22:b5:c9:ca:57:9c:a7:b4:39:5c:
d4:68:21:4d:7a:64:7c:41:f6:66:2f:d6:ac:18:51:
9f:54:b6:58:01:57:54:f8:5b:de:5b:04:73:0b:41:
37:01:70:67:4f:00:34:9a:7b:a4:72:b6:28:e8:e6:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:CC:D5:27:5C:E1:53:CA:A0:90:0C:51:7E:DD:21:0B:89:72:51
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:75:05:c2:b9:3e:60:8f:4b:9f:ed:40:1b:2c:01:50:5f:d8:
31:a9:5e:bc:7e:5b:58:53:ba:76:02:ae:30:f4:b7:28:59:07:
2f:6f:76:11:2c:19:97:74:be:85:32:bb:40:bb:30:58:85:6e:
8a:97:08:51:26:cc:a1:d1:4d:97:00:88:50:60:52:4f:85:9a:
9d:d6:26:f3:4e:6d:d0:d4:a4:f1:80:f3:ee:66:8f:3e:73:fb:
7b:ab:b5:13:d4:8b:58:cd:cd:b8:0e:f8:36:d2:b0:b7:6c:69:
64:55:36:07:94:fc:c7:de:d6:6a:4d:20:15:c6:df:76:f9:97:
ce:15:6a:0e:4e:5c:65:eb:16:2b:60:a0:b2:80:8c:23:e1:5b:
c0:c5:42:cc:e7:ea:29:37:28:12:26:64:bc:f0:29:d2:b0:31:
09:6d:7b:29:87:91:94:46:a6:d0:76:40:b3:d9:1f:4a:2e:50:
38:ae:b0:12:c4:5c:5c:ac:e2:70:fa:49:f2:e1:86:5f:f5:93:
b7:47:75:c8:19:20:b2:06:2f:6e:2b:cc:b6:e2:5d:5d:21:48:
b7:9e:7b:0e:42:db:96:3c:85:84:df:0c:ee:e9:ee:44:5e:0b:
44:b8:78:0c:3d:26:14:59:37:04:be:6e:23:b4:2d:a9:e4:73:
68:0d:2e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdjUqDWO9tVrUD83IHxaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NjMzZmE2ZmM2NmI0MzYzOWMwNTZkMDIxNzRmODBjMjQy
NjYxNGIwHhcNMjYwMzI4MDgwMTE3WhcNMjYwMzI5MDgwMTE3WjAzMTEwLwYDVQQD
Eyg3Y2Q4Y2NkNTI3NWNlMTUzY2FhMDkwMGM1MTdlZGQyMTBiODk3MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziH8etPTqz9JqSLmmgBmvLE7fjCl
JX0kyJT3t2fKoB8FgKvpHM22bkruT35+kZLJh3PbN2WMtTxPO+1eiRzruPeGG9ry
DfYKIkvqDX+uEdu7q5DiJewiZ15I5jSK3nfu2LViDsHfjcWVQBe+0ycKYpJyt1S7
rJCDL2UsJWERkcOR/gMKzauykqYgZ06Mbc/uaIusYlq/T1MEwatfyatb4gkYTiaK
K9e84FmBdw0iXs24a0MSNdAlnQtzaqqLeNYNopkRkGIWtCK1ycpXnKe0OVzUaCFN
emR8QfZmL9asGFGfVLZYAVdU+FveWwRzC0E3AXBnTwA0mnukcrYo6OZhhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzYzNUnXOFTyqCQDFF+3SELiXJRMB8GA1UdIwQY
MBaAFMljP6b8ZrQ2OcBW0CF0+AwkJmFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYt
MDM4YTU0ZTM5MTJmLzEveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYtMDM4YTU0ZTM5MTJm
LzEveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3UFwrk+
YI9Ln+1AGywBUF/YMalevH5bWFO6dgKuMPS3KFkHL292ESwZl3S+hTK7QLswWIVu
ipcIUSbModFNlwCIUGBST4WandYm805t0NSk8YDz7maPPnP7e6u1E9SLWM3NuA74
NtKwt2xpZFU2B5T8x97Wak0gFcbfdvmXzhVqDk5cZesWK2CgsoCMI+FbwMVCzOfq
KTcoEiZkvPAp0rAxCW17KYeRlEam0HZAs9kfSi5QOK6wEsRcXKzicPpJ8uGGX/WT
t0d1yBkgsgYvbivMtuJdXSFIt557DkLbljyFhN8M7unuRF4LRLh4DD0mFFk3BL5u
I7QtqeRzaA0ugw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:03 2026 by rpki-client