Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: T0w16cA+3gnuU2R6AXDTN06op8d7IAHdXbgWhmY1F8s=
Subject key identifier: 69:68:CB:0F:DF:EE:71:B7:AA:4A:9E:C8:56:F0:26:4D:C6:C7:25:43
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019D330785C9CDC88AD2ABFC98E95C0DD066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 1175
Signing time: Sat 28 Mar 2026 06:00:24 +0000
Manifest this update: Sat 28 Mar 2026 06:00:24 +0000
Manifest next update: Sun 29 Mar 2026 06:00:24 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: b3OE9CdjJphKnPyxqBZ6d4wqN7gFG5D5Cvbd3D1xoWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:85:c9:cd:c8:8a:d2:ab:fc:98:e9:5c:0d:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Mar 28 06:00:24 2026 GMT
Not After : Mar 29 06:00:24 2026 GMT
Subject: CN=6968cb0fdfee71b7aa4a9ec856f0264dc6c72543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:17:c7:09:c5:11:3d:ff:90:3c:c4:05:ec:
ef:e8:33:59:1c:96:39:77:1c:b5:91:75:4c:b5:00:
0d:a3:f3:dd:d0:27:57:f0:c6:e5:3c:8c:67:78:27:
ad:f7:6d:c8:ed:a2:ad:de:db:03:c9:d5:84:c0:aa:
17:1a:37:16:9c:1b:23:4e:55:c3:f5:99:91:4f:c8:
3d:a1:4e:51:15:3b:74:cd:ed:63:3a:0c:43:9b:c0:
f3:25:d0:52:1e:b0:c7:04:32:0c:2e:1e:18:d7:ed:
df:f7:db:95:47:50:b5:ae:80:8c:50:dc:29:f0:dc:
e9:0c:f9:b4:3a:27:50:8c:d4:83:f2:50:ed:19:48:
97:e6:50:46:72:66:2b:02:e8:8c:3c:fc:6e:0c:60:
ef:10:50:07:87:70:fd:f3:13:02:fb:cc:f1:04:9a:
30:f8:0e:0e:71:1c:ba:dd:04:97:be:d3:7d:f1:60:
cf:2d:96:3e:60:59:4d:ad:1e:db:83:69:ca:1c:61:
37:77:cd:64:ee:2f:49:8f:49:e0:95:e9:22:aa:f7:
e5:51:a8:96:1d:71:96:74:96:01:30:43:f8:70:96:
cd:be:d5:39:88:03:8e:d1:b3:9b:98:ca:b7:69:3f:
b1:93:da:73:cd:4f:6e:2d:e3:24:f8:4e:95:98:ad:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:68:CB:0F:DF:EE:71:B7:AA:4A:9E:C8:56:F0:26:4D:C6:C7:25:43
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:da:bd:ce:1b:9a:60:b1:33:e9:ff:ef:76:ce:27:50:e7:
3f:81:01:c4:64:c5:f1:4b:67:44:f3:a3:19:49:cc:24:50:11:
e9:55:a2:c3:a7:67:6d:78:81:83:cb:5e:bd:fa:0f:19:dd:a2:
ed:59:52:d5:a7:27:80:ac:73:ef:c3:d0:7d:eb:e7:be:6b:72:
2b:dd:ff:6c:11:90:5b:19:a5:ba:d5:70:a6:34:fd:9a:70:86:
43:35:19:33:67:ca:6a:72:88:1b:7a:c1:1b:d1:d4:36:e1:a0:
21:97:75:2b:88:d3:2f:83:91:04:90:94:d5:9f:be:e1:4f:8b:
95:b9:27:ac:24:6b:26:c9:c6:26:aa:c7:30:b7:63:24:1d:c9:
4d:a4:11:c7:5f:2c:98:81:5c:7b:ad:4c:06:7c:21:a9:ac:78:
f1:0c:f2:de:70:d5:7d:f6:0e:e1:80:a1:05:11:15:67:24:ad:
db:1a:4a:8e:9f:5a:33:e0:7d:71:5a:7a:95:6d:4b:81:b2:34:
29:b7:e9:53:72:28:75:3a:f4:d2:71:c6:21:10:b3:96:86:cd:
91:e8:a0:63:a3:2b:50:66:07:7d:d8:9a:5c:39:02:4a:ce:9b:
e4:f1:85:35:1b:c9:90:d1:ab:26:a5:41:86:49:99:14:26:3e:
66:5d:5f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB4XJzciK0qv8mOlcDdBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2UxMzU3OGM2ODBlZTk4ZmRhYWQyMDIzNzBmMTBlM2My
ODJhZmMwHhcNMjYwMzI4MDYwMDI0WhcNMjYwMzI5MDYwMDI0WjAzMTEwLwYDVQQD
Eyg2OTY4Y2IwZmRmZWU3MWI3YWE0YTllYzg1NmYwMjY0ZGM2YzcyNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoUXxwnFET3/kDzEBezv6DNZHJY5
dxy1kXVMtQANo/Pd0CdX8MblPIxneCet923I7aKt3tsDydWEwKoXGjcWnBsjTlXD
9ZmRT8g9oU5RFTt0ze1jOgxDm8DzJdBSHrDHBDIMLh4Y1+3f99uVR1C1roCMUNwp
8NzpDPm0OidQjNSD8lDtGUiX5lBGcmYrAuiMPPxuDGDvEFAHh3D98xMC+8zxBJow
+A4OcRy63QSXvtN98WDPLZY+YFlNrR7bg2nKHGE3d81k7i9Jj0nglekiqvflUaiW
HXGWdJYBMEP4cJbNvtU5iAOO0bObmMq3aT+xk9pzzU9uLeMk+E6VmK0l4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGloyw/f7nG3qkqeyFbwJk3GxyVDMB8GA1UdIwQY
MBaAFGB+E1eMaA7pj9qtICNw8Q48KCr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgt
YmFmZmUzYjY3N2RmLzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hMjFiYmUtYmE0ZC00ZTAzLWJlZjgtYmFmZmUzYjY3N2Rm
LzEvWUg0VFY0eG9EdW1QMnEwZ0kzRHhEandvS3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7zavc4b
mmCxM+n/73bOJ1DnP4EBxGTF8UtnRPOjGUnMJFAR6VWiw6dnbXiBg8tevfoPGd2i
7VlS1acngKxz78PQfevnvmtyK93/bBGQWxmlutVwpjT9mnCGQzUZM2fKanKIG3rB
G9HUNuGgIZd1K4jTL4ORBJCU1Z++4U+LlbknrCRrJsnGJqrHMLdjJB3JTaQRx18s
mIFce61MBnwhqax48Qzy3nDVffYO4YChBREVZySt2xpKjp9aM+B9cVp6lW1LgbI0
KbfpU3IodTr00nHGIRCzlobNkeigY6MrUGYHfdiaXDkCSs6b5PGFNRvJkNGrJqVB
hkmZFCY+Zl1fFw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:02:01 2026 by rpki-client