Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier: KJkQ3EdkLKTmHSAvRPCYoK49oZ7o+ehaIbtqRtiqMJc=
Subject key identifier: 92:BD:95:85:A9:DF:8F:3F:87:9A:2A:5E:B0:F3:F2:64:3B:6B:12:F8
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 019D29CE5BC7431521298F6C7F74A381939E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:22 +0000
Manifest this update: Thu 26 Mar 2026 11:01:22 +0000
Manifest next update: Fri 27 Mar 2026 11:01:22 +0000
Files and hashes: 1: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (hash: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=)
2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: EDqScw0NuOFUEr9PqSwQc9hBIFhpFRTQWxgup1KP33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5b:c7:43:15:21:29:8f:6c:7f:74:a3:81:93:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Mar 26 11:01:22 2026 GMT
Not After : Mar 27 11:01:22 2026 GMT
Subject: CN=92bd9585a9df8f3f879a2a5eb0f3f2643b6b12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:6e:40:92:99:51:09:ce:20:2b:f3:c7:6c:
2f:f1:f0:44:b2:4c:47:52:43:ed:34:83:d3:b3:92:
d4:c0:e9:20:86:72:e0:1a:ef:b1:c9:17:23:46:c7:
ac:f5:6b:84:cf:16:cf:6c:43:f1:3e:f0:e0:fb:fc:
56:89:3a:44:5a:09:28:11:0e:bd:5b:a1:57:ee:b2:
bb:19:a2:2d:38:34:e9:bf:05:aa:7b:a5:44:4c:d3:
91:ba:d8:62:e5:ac:8a:77:67:3e:72:ef:dc:6b:db:
fd:e3:bc:3e:81:d9:27:6e:9d:fb:84:54:ed:46:45:
58:ea:30:86:b7:03:c0:d4:94:ad:3b:b5:13:e4:d3:
a6:76:4b:d1:13:18:31:c9:14:82:dd:64:0b:96:12:
83:b1:a6:3c:31:a7:7a:c4:c9:5f:1a:1d:75:bf:3d:
e9:28:9d:41:bb:79:e8:d8:6c:03:3e:b0:89:47:9f:
f9:7c:d6:56:dc:98:19:cc:33:14:f6:f3:88:0a:a4:
9b:2b:c9:74:03:f3:20:a2:75:78:ba:47:64:23:e3:
b6:5a:4c:9d:5e:8e:df:63:c8:4e:52:0b:93:e3:08:
e5:f6:47:89:cd:78:0d:40:a5:ff:05:71:50:1c:2e:
d6:3a:6d:77:8c:f1:3a:6e:a9:d6:29:45:3a:0b:0d:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:95:85:A9:DF:8F:3F:87:9A:2A:5E:B0:F3:F2:64:3B:6B:12:F8
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1c:39:c7:04:93:cb:43:54:0e:a3:6b:a3:05:34:ba:88:aa:
7f:47:d1:4e:58:b5:8a:d3:30:54:31:4a:89:b7:2e:2a:f4:28:
d4:0d:e4:77:43:22:01:f5:2e:99:d2:ad:17:cc:9b:02:46:85:
13:ce:bc:e1:f9:03:ca:52:1e:eb:d4:b7:cb:c2:8d:05:9f:26:
ce:1e:86:e7:db:bb:50:b9:8d:28:53:51:be:bf:9e:69:0c:02:
9e:e8:c3:04:38:95:eb:6b:23:39:e2:9f:9c:db:0e:09:2c:79:
20:d7:cf:97:a3:93:52:36:5e:ad:cb:f6:82:c7:55:a9:78:cc:
9f:ff:e3:fb:af:76:d0:bf:1e:a0:42:99:ec:87:db:01:c5:9f:
d5:85:16:75:57:84:c0:16:19:b9:89:4c:e0:2b:88:e3:1c:7c:
00:a9:ae:1a:a2:37:f2:c5:d3:10:10:99:7c:49:9f:fa:60:19:
6e:34:5a:21:33:29:53:62:fa:d8:55:90:d6:52:d7:c4:e8:19:
f1:79:a9:3d:58:91:d6:48:77:15:fa:d4:f8:d3:df:c9:80:66:
26:20:bf:76:3b:5f:19:ae:eb:5e:1c:8a:08:93:51:03:86:f1:
80:8a:65:f7:91:49:ab:99:d5:e6:51:b0:e4:24:27:16:fd:14:
cb:37:28:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzlvHQxUhKY9sf3SjgZOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmE0OWZiYTE0OWUxYTFiMTMxMzliZDAxNjAxYzg2Y2Qy
OTU4YTUwHhcNMjYwMzI2MTEwMTIyWhcNMjYwMzI3MTEwMTIyWjAzMTEwLwYDVQQD
Eyg5MmJkOTU4NWE5ZGY4ZjNmODc5YTJhNWViMGYzZjI2NDNiNmIxMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusFuQJKZUQnOICvzx2wv8fBEskxH
UkPtNIPTs5LUwOkghnLgGu+xyRcjRses9WuEzxbPbEPxPvDg+/xWiTpEWgkoEQ69
W6FX7rK7GaItODTpvwWqe6VETNORuthi5ayKd2c+cu/ca9v947w+gdknbp37hFTt
RkVY6jCGtwPA1JStO7UT5NOmdkvRExgxyRSC3WQLlhKDsaY8Mad6xMlfGh11vz3p
KJ1Bu3no2GwDPrCJR5/5fNZW3JgZzDMU9vOICqSbK8l0A/MgonV4ukdkI+O2Wkyd
Xo7fY8hOUguT4wjl9keJzXgNQKX/BXFQHC7WOm13jPE6bqnWKUU6Cw0dwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK9lYWp348/h5oqXrDz8mQ7axL4MB8GA1UdIwQY
MBaAFMsqSfuhSeGhsTE5vQFgHIbNKVilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjct
NjJkNGExZjFhNTBjLzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjctNjJkNGExZjFhNTBj
LzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxw5xwST
y0NUDqNrowU0uoiqf0fRTli1itMwVDFKibcuKvQo1A3kd0MiAfUumdKtF8ybAkaF
E8684fkDylIe69S3y8KNBZ8mzh6G59u7ULmNKFNRvr+eaQwCnujDBDiV62sjOeKf
nNsOCSx5INfPl6OTUjZercv2gsdVqXjMn//j+6920L8eoEKZ7IfbAcWf1YUWdVeE
wBYZuYlM4CuI4xx8AKmuGqI38sXTEBCZfEmf+mAZbjRaITMpU2L62FWQ1lLXxOgZ
8XmpPViR1kh3FfrU+NPfyYBmJiC/djtfGa7rXhyKCJNRA4bxgIpl95FJq5nV5lGw
5CQnFv0UyzcoSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:16 2026 by rpki-client