Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier: OSW5eq6MwocSn/+Un062Y/lLPqaYx+ahWerbMf/lu4c=
Subject key identifier: C5:63:86:8A:E1:5B:FF:A5:E0:79:E9:73:8F:98:6B:3D:28:57:12:18
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial: 019D254C631249C54BC489E5F6F774DD0AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 14:00:56 +0000
Manifest this update: Wed 25 Mar 2026 14:00:56 +0000
Manifest next update: Thu 26 Mar 2026 14:00:56 +0000
Files and hashes: 1: OnAgwLdUpQzNJnA7pMJph6gOrUw.asa (hash: wsRn9NEKfnSW8oD5dKJ7unDfbcpkUk4I+SjLO5gwn9s=)
2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: GWN5zllVxvnLvEQRd7hTsIo/z3GTkP4ZwAa/d1ASyE4=)
3: iWP4svoOPBmLWqsmXNureCvqWt0.roa (hash: NogACOntswbtzLCi1NQN4fIlpsGo2D3P9AqJg73o1QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:63:12:49:c5:4b:c4:89:e5:f6:f7:74:dd:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Validity
Not Before: Mar 25 14:00:56 2026 GMT
Not After : Mar 26 14:00:56 2026 GMT
Subject: CN=c563868ae15bffa5e079e9738f986b3d28571218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:e7:24:bd:46:4d:84:fc:53:23:7e:bd:64:
bf:dd:56:91:a4:4c:cd:c8:3b:72:82:d5:bf:04:0f:
c5:85:30:e6:cf:b3:27:1e:cf:a7:17:ab:9f:1f:78:
b4:b2:57:3c:ad:9a:46:2a:0c:7b:92:59:5c:75:3e:
53:5c:1a:27:c0:74:5b:e3:f7:63:14:b2:74:a0:70:
34:30:38:f0:14:1f:51:0c:d4:34:69:90:5f:2f:be:
6f:89:ea:d8:8c:26:e2:49:e7:d4:b6:34:ed:60:ed:
a4:30:06:09:1b:49:5a:ea:2a:d9:58:ec:86:ec:72:
2e:c9:3f:53:39:48:63:ff:cf:ab:da:72:47:01:79:
04:e1:32:c4:50:55:66:67:61:19:f3:5e:14:49:af:
dd:ca:cb:88:d6:40:f4:52:8d:8e:da:82:56:ba:eb:
89:0b:59:3a:b5:6c:13:70:6d:5e:b4:0e:05:57:00:
ff:9b:04:c5:06:a4:2f:79:be:d3:37:00:31:85:4b:
94:0d:19:f5:09:5c:38:76:74:e1:82:b5:2a:c3:29:
ba:86:d6:3a:d3:a7:64:e2:06:3a:87:9d:72:be:ab:
ea:e3:af:a0:e5:9c:7b:f2:9a:d1:86:3a:fd:81:fb:
5d:97:a1:52:61:88:79:68:fe:29:36:cf:dc:91:b4:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:86:8A:E1:5B:FF:A5:E0:79:E9:73:8F:98:6B:3D:28:57:12:18
X509v3 Authority Key Identifier:
keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0d:d5:05:2d:1c:77:5c:79:83:af:da:aa:4c:66:e6:c9:7f:
8b:a7:87:37:f3:72:04:7a:be:ed:22:94:aa:c8:38:3c:1d:a0:
4f:36:51:ff:2a:3b:25:25:d9:18:5d:0e:87:64:6c:35:34:74:
e9:d7:e2:b6:23:ae:78:4a:bd:c6:95:a0:4b:d9:ee:86:39:0a:
69:62:6a:ab:36:a5:ff:49:57:77:d9:fc:23:6d:91:2e:cc:88:
d2:4f:10:bb:2e:6d:dd:9c:5a:f2:ef:e3:44:22:66:82:10:8d:
56:68:49:5c:c5:25:9f:c1:46:01:21:42:9d:17:30:79:20:44:
33:ab:28:59:7b:58:45:90:d1:f3:65:5b:22:21:de:38:d7:d9:
60:4d:8a:92:5f:3a:7a:cc:f9:a7:cc:98:8d:10:0d:78:7e:8a:
6e:bf:5a:92:20:80:4f:40:0e:8b:e8:56:01:90:e1:fc:30:22:
f6:81:dc:d1:34:a4:07:8d:82:4e:5c:90:87:03:79:eb:ba:08:
39:4d:d0:5a:06:cf:99:3c:5a:b0:36:b8:43:d7:b1:6c:e0:05:
77:9a:61:d5:6e:51:58:9b:f9:7b:ff:07:93:04:13:f3:76:d7:
66:76:6c:17:70:42:46:aa:22:07:98:44:bb:67:e9:c9:0b:c2:
4d:9c:3f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTGMSScVLxInl9vd03QroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDI1NmVkMzhmYjFlOTY5NDQ5MjZkYjRjNjZjNGQwODhh
Y2ZiZDYwHhcNMjYwMzI1MTQwMDU2WhcNMjYwMzI2MTQwMDU2WjAzMTEwLwYDVQQD
EyhjNTYzODY4YWUxNWJmZmE1ZTA3OWU5NzM4Zjk4NmIzZDI4NTcxMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskvnJL1GTYT8UyN+vWS/3VaRpEzN
yDtygtW/BA/FhTDmz7MnHs+nF6ufH3i0slc8rZpGKgx7kllcdT5TXBonwHRb4/dj
FLJ0oHA0MDjwFB9RDNQ0aZBfL75vierYjCbiSefUtjTtYO2kMAYJG0la6irZWOyG
7HIuyT9TOUhj/8+r2nJHAXkE4TLEUFVmZ2EZ814USa/dysuI1kD0Uo2O2oJWuuuJ
C1k6tWwTcG1etA4FVwD/mwTFBqQveb7TNwAxhUuUDRn1CVw4dnThgrUqwym6htY6
06dk4gY6h51yvqvq46+g5Zx78prRhjr9gftdl6FSYYh5aP4pNs/ckbQu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVjhorhW/+l4Hnpc4+Yaz0oVxIYMB8GA1UdIwQY
MBaAFGFCVu04+x6WlEkm20xmxNCIrPvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt
NjhiYTZjNTRlZjlhLzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh
LzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmg3VBS0c
d1x5g6/aqkxm5sl/i6eHN/NyBHq+7SKUqsg4PB2gTzZR/yo7JSXZGF0Oh2RsNTR0
6dfitiOueEq9xpWgS9nuhjkKaWJqqzal/0lXd9n8I22RLsyI0k8Quy5t3Zxa8u/j
RCJmghCNVmhJXMUln8FGASFCnRcweSBEM6soWXtYRZDR82VbIiHeONfZYE2Kkl86
esz5p8yYjRANeH6Kbr9akiCAT0AOi+hWAZDh/DAi9oHc0TSkB42CTlyQhwN567oI
OU3QWgbPmTxasDa4Q9exbOAFd5ph1W5RWJv5e/8HkwQT83bXZnZsF3BCRqoiB5hE
u2fpyQvCTZw/yQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:24 2026 by rpki-client