Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: llLquA1AZwwzlUBAZuR27P8Guu1q81jWTnDjaQwq5fc=
Subject key identifier: CC:6C:3D:85:97:63:6B:E0:3D:CD:4E:0F:ED:3A:8C:51:5E:27:46:25
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019D27721892383D2B431D2B39392026F4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: 5o6k6rNuid97Qh-4yx5_yoP0grk.roa (hash: fdMkIWOquD1CiccVguV8cwles53g42rbkdlJp+WKaT4=)
2: mB7yGysqxM2w0BSJMz4SqdiHSZI.roa (hash: bdgkO9DwF+uIpDi10Iec80EoHKPGBrSErUC5CnGEJa8=)
3: v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa (hash: R4mBNHuUDg1/Cm7AUx43PJr/9fmdUhHVc5FWE7aFrnc=)
4: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: ZqqfKyqp1PniK3DSQ7SjrNJBxvYvXmnXLmtGkKlj1ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:18:92:38:3d:2b:43:1d:2b:39:39:20:26:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=cc6c3d8597636be03dcd4e0fed3a8c515e274625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:02:1f:64:13:86:30:13:8b:b0:17:1e:6a:
ef:77:a1:bf:03:d0:8e:01:63:80:2a:4b:f4:75:d2:
e0:91:87:65:86:4e:7d:43:d6:d6:ea:59:8b:9f:c8:
66:e8:fc:c7:ed:08:87:0c:9f:8e:1b:65:7b:30:08:
38:a9:d9:c0:54:40:a8:70:4d:d6:78:b3:5d:23:cd:
aa:a3:41:a8:55:d7:3e:8c:02:63:d1:10:a2:f5:f8:
2b:26:a8:0f:ff:60:a4:1e:e9:b0:28:d4:f2:3f:f4:
a5:8a:9a:04:e5:04:1c:5e:23:a9:50:5e:02:57:49:
df:21:03:e3:2d:6a:21:ff:b1:50:5f:77:14:75:23:
ed:07:bb:c6:68:20:83:3b:e3:ff:eb:c2:61:6e:09:
18:96:01:56:3d:65:75:25:ca:88:8f:b6:c1:5d:c1:
2e:e7:89:5b:dd:89:e6:b8:07:11:56:8e:86:3a:2f:
66:45:10:42:62:86:7c:c7:05:bc:91:bd:84:1c:72:
74:7c:92:14:bb:df:2f:3f:e1:a0:fa:10:95:0f:70:
73:e1:f7:28:33:d4:c1:08:45:07:71:59:2a:51:83:
30:61:12:eb:0e:b4:66:aa:f3:6e:98:ac:0a:5e:84:
f4:b2:aa:09:b0:15:4d:99:0e:8b:2a:d8:10:c0:2e:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:3D:85:97:63:6B:E0:3D:CD:4E:0F:ED:3A:8C:51:5E:27:46:25
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:ec:64:2a:3d:1f:89:d9:98:82:86:cc:0a:0d:d4:c9:da:
7b:6e:75:5f:d1:f1:27:6b:5f:f1:13:36:25:ce:b4:e5:a6:2d:
4c:90:88:5f:f0:00:b3:b0:e3:ba:a8:c7:74:f0:54:74:d0:01:
07:d3:e7:07:96:c5:85:7d:d9:06:77:7e:8a:cd:d6:28:1a:fb:
bb:8a:27:33:c4:39:d5:32:07:bc:18:f0:83:9c:fa:bd:93:ed:
d9:49:4d:9b:a9:d4:b4:b2:db:d9:3c:6a:8d:51:41:0a:40:9f:
15:6d:50:e8:ee:e9:7b:5c:5e:2f:37:20:67:e4:b2:7d:43:27:
54:f9:5c:78:d2:e8:f8:e7:b5:b7:86:85:97:b1:18:3f:15:c0:
62:0b:c9:e0:b3:b7:36:11:69:1c:42:38:d7:b7:7b:1c:82:67:
d8:cb:af:b4:d7:36:08:be:65:28:f7:b3:15:19:99:5a:9f:1e:
23:2e:2a:4e:dd:ba:81:7f:3d:84:3d:32:bf:c8:aa:41:9f:34:
1a:5f:71:ee:fb:0f:f5:82:f4:1d:0f:d4:7d:45:6c:59:d7:00:
61:b3:c4:65:19:41:b7:58:9d:d0:45:1e:6b:2b:ef:21:b4:ad:
0a:17:6c:3b:f6:51:88:ff:fc:e8:df:38:a7:33:54:91:dc:7e:
92:27:28:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nchiSOD0rQx0rOTkgJvTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjYwMzI2MDAwMTIxWhcNMjYwMzI3MDAwMTIxWjAzMTEwLwYDVQQD
EyhjYzZjM2Q4NTk3NjM2YmUwM2RjZDRlMGZlZDNhOGM1MTVlMjc0NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv8CH2QThjATi7AXHmrvd6G/A9CO
AWOAKkv0ddLgkYdlhk59Q9bW6lmLn8hm6PzH7QiHDJ+OG2V7MAg4qdnAVECocE3W
eLNdI82qo0GoVdc+jAJj0RCi9fgrJqgP/2CkHumwKNTyP/SlipoE5QQcXiOpUF4C
V0nfIQPjLWoh/7FQX3cUdSPtB7vGaCCDO+P/68JhbgkYlgFWPWV1JcqIj7bBXcEu
54lb3YnmuAcRVo6GOi9mRRBCYoZ8xwW8kb2EHHJ0fJIUu98vP+Gg+hCVD3Bz4fco
M9TBCEUHcVkqUYMwYRLrDrRmqvNumKwKXoT0sqoJsBVNmQ6LKtgQwC5RvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxsPYWXY2vgPc1OD+06jFFeJ0YlMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqK/sZCo9
H4nZmIKGzAoN1Mnae251X9HxJ2tf8RM2Jc605aYtTJCIX/AAs7DjuqjHdPBUdNAB
B9PnB5bFhX3ZBnd+is3WKBr7u4onM8Q51TIHvBjwg5z6vZPt2UlNm6nUtLLb2Txq
jVFBCkCfFW1Q6O7pe1xeLzcgZ+SyfUMnVPlceNLo+Oe1t4aFl7EYPxXAYgvJ4LO3
NhFpHEI417d7HIJn2MuvtNc2CL5lKPezFRmZWp8eIy4qTt26gX89hD0yv8iqQZ80
Gl9x7vsP9YL0HQ/UfUVsWdcAYbPEZRlBt1id0EUeayvvIbStChdsO/ZRiP/86N84
pzNUkdx+kicoyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:22 2026 by rpki-client