Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File: ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier: K1ckoVfngVXR8qpiEPdMcv61WSkK65VLqXVijC5SL94=
Subject key identifier: 2C:93:42:AE:15:1E:32:55:76:9F:90:C3:FE:92:D0:ED:23:EF:6A:B8
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 019D2772852C03288612B68CB349259A36A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number: 1829
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: kW4drk2LDPNcQ18FgzKd9iSfVfo.roa (hash: wnwxedVG+s68D4H1gWYhMG2g4d0oAegzbZPXw3fMM7c=)
2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: f/957sLWBuH92eFCY6GILlie9G1M/Dh+VpswjsIqTt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:85:2c:03:28:86:12:b6:8c:b3:49:25:9a:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=2c9342ae151e3255769f90c3fe92d0ed23ef6ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:ab:50:43:0e:9b:4c:b6:98:69:9f:ed:c2:
5b:a2:77:f9:d3:31:47:ba:d4:86:71:7f:15:ac:52:
2d:e7:a5:f2:19:6d:9a:03:2d:f4:51:ee:c1:74:fe:
c8:25:93:b3:b5:e2:a4:e0:6c:4c:44:84:70:c8:8e:
fd:e9:ad:f6:c5:ec:4a:77:52:87:69:10:2e:43:84:
41:11:0d:01:07:da:7e:eb:63:d2:21:74:fb:c9:e9:
fc:75:37:e2:f0:c3:9c:2b:31:a7:9c:1d:e0:16:0e:
90:10:b7:d1:e6:b5:73:21:01:4e:97:dd:8c:e8:6b:
ff:e0:94:ff:6f:5a:b0:a4:ff:19:14:d5:86:19:5a:
cb:c5:f3:2a:03:94:da:cc:47:7b:3c:6c:21:f7:27:
fe:cd:39:eb:3a:9f:cb:c5:21:b0:22:83:76:33:ee:
f4:8a:ba:bd:4c:2a:22:bb:35:bb:15:7f:80:9f:0d:
0e:67:f5:28:b6:fd:46:53:fe:3c:90:7f:3f:b7:9c:
07:4c:c1:b5:de:cb:c7:00:c3:7a:18:94:ec:13:83:
65:1e:4b:23:56:56:f9:99:79:a4:96:7b:ba:09:29:
50:96:65:8c:57:f8:4e:4c:59:5e:83:b4:d5:b1:04:
b4:1c:df:9a:14:8b:56:5d:97:42:01:93:08:20:12:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:42:AE:15:1E:32:55:76:9F:90:C3:FE:92:D0:ED:23:EF:6A:B8
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:59:11:a0:b0:63:56:b6:c2:0e:de:45:b0:89:04:7f:ef:
3c:11:fb:19:5a:2d:98:5f:f3:45:b3:ef:f3:39:aa:d8:4a:50:
83:1e:93:00:42:9b:ef:26:b9:a2:ab:0e:cf:1a:10:c6:17:eb:
a6:44:ee:32:79:d1:c3:6f:c9:5c:3f:7a:a2:07:92:10:8e:0f:
c4:e7:3c:54:7b:99:e0:9e:5b:16:ca:2d:d3:fc:6e:e7:3f:4f:
3a:90:8a:25:31:a7:3c:3f:95:0b:dd:a3:86:63:72:e8:a5:2a:
13:4b:a9:f4:6e:b5:e6:1d:9d:8f:fb:10:ba:8d:ab:d5:52:7c:
3d:f8:c4:43:06:90:08:fc:34:5b:b6:b7:01:5d:4a:bc:18:4e:
fd:2b:e4:6c:b2:04:c4:4d:67:b2:bc:4e:07:c8:f4:59:58:9f:
0e:bf:9c:c3:d1:4d:b3:ed:22:e8:ef:fc:c7:4d:04:fa:64:bc:
90:e4:f5:86:b7:14:43:70:dc:d7:48:76:14:8a:90:af:37:57:
2f:e3:cc:7a:63:44:73:61:dc:ef:5e:9e:b0:6e:aa:72:3f:e0:
77:24:53:01:43:f6:22:3f:43:37:5d:cb:3a:f4:80:52:60:c4:
b1:00:d3:1b:ad:37:75:6a:1a:88:a5:49:ce:92:58:ee:4c:f8:
42:24:f7:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoUsAyiGEraMs0klmjaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjFkN2MzYjRlZTg3MjMzMzZhNjU4NTM5YWE3MzQ2ZjIz
ZDY3NzIwHhcNMjYwMzI2MDAwMTQ5WhcNMjYwMzI3MDAwMTQ5WjAzMTEwLwYDVQQD
EygyYzkzNDJhZTE1MWUzMjU1NzY5ZjkwYzNmZTkyZDBlZDIzZWY2YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBOrUEMOm0y2mGmf7cJbonf50zFH
utSGcX8VrFIt56XyGW2aAy30Ue7BdP7IJZOzteKk4GxMRIRwyI796a32xexKd1KH
aRAuQ4RBEQ0BB9p+62PSIXT7yen8dTfi8MOcKzGnnB3gFg6QELfR5rVzIQFOl92M
6Gv/4JT/b1qwpP8ZFNWGGVrLxfMqA5TazEd7PGwh9yf+zTnrOp/LxSGwIoN2M+70
irq9TCoiuzW7FX+Anw0OZ/Uotv1GU/48kH8/t5wHTMG13svHAMN6GJTsE4NlHksj
Vlb5mXmklnu6CSlQlmWMV/hOTFleg7TVsQS0HN+aFItWXZdCAZMIIBLklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyTQq4VHjJVdp+Qw/6S0O0j72q4MB8GA1UdIwQY
MBaAFMmx18O07ocjM2plhTmqc0byPWdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgt
MTY0Y2M2YTRlZDFlLzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgtMTY0Y2M2YTRlZDFl
LzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRNZEaCw
Y1a2wg7eRbCJBH/vPBH7GVotmF/zRbPv8zmq2EpQgx6TAEKb7ya5oqsOzxoQxhfr
pkTuMnnRw2/JXD96ogeSEI4PxOc8VHuZ4J5bFsot0/xu5z9POpCKJTGnPD+VC92j
hmNy6KUqE0up9G615h2dj/sQuo2r1VJ8PfjEQwaQCPw0W7a3AV1KvBhO/SvkbLIE
xE1nsrxOB8j0WVifDr+cw9FNs+0i6O/8x00E+mS8kOT1hrcUQ3Dc10h2FIqQrzdX
L+PMemNEc2Hc716esG6qcj/gdyRTAUP2Ij9DN13LOvSAUmDEsQDTG603dWoaiKVJ
zpJY7kz4QiT3/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:40 2026 by rpki-client