Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: bjhCsqQQGXNhHfV1mvFXK2IVIU4mczFAbkIMd71ZWyI=
Subject key identifier: DD:76:30:09:11:D7:E2:E7:91:8B:EF:60:34:99:3C:98:D2:1D:D9:FC
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 019D28F2EBD1DFB789B0EA1D2416D661921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 0743
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: VXLKpCXn6+dNpvuGaFjob4RZeUHDcEF19wS3rcEZP+0=)
2: vkinxgiyd_YGCc2FvXGXlifXXZw.roa (hash: ae69pULyWQhzs8GCwJJ69Rg2AhZZDsijjjtqdA5+8Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:eb:d1:df:b7:89:b0:ea:1d:24:16:d6:61:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=dd76300911d7e2e7918bef6034993c98d21dd9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:24:c1:ca:58:fb:62:92:2d:71:29:e2:1d:
8a:70:1b:c6:7c:e6:21:cf:1d:43:d1:e4:35:bf:d3:
4f:fe:09:29:30:1f:20:21:da:f7:11:e7:91:4a:32:
22:4a:48:9e:67:2f:6b:c5:f9:72:24:d0:eb:ba:4b:
d1:f5:d0:24:86:a1:fb:2f:96:a8:14:67:57:12:00:
2d:dc:b8:5b:68:09:b5:19:9b:f2:05:23:cb:de:b4:
bc:3c:bb:50:5d:ba:f7:05:94:c7:0f:4d:ca:c1:5e:
e9:c6:cd:c9:6c:b8:2e:d1:b3:fd:e4:34:ad:35:06:
90:3d:ef:bc:3b:fc:8b:52:33:37:bf:7a:b2:f9:e2:
1e:51:b4:21:47:99:29:27:ff:27:d2:37:f9:8a:b5:
fc:14:ef:b8:c6:f5:b2:35:8d:0c:16:62:b8:f9:ce:
8d:3e:0c:7a:f8:6d:08:09:bc:2c:8c:84:fc:45:17:
99:6b:48:e5:f1:b9:72:2c:bd:ee:cf:6b:ba:21:08:
2a:b9:15:00:c9:bb:1e:80:20:44:a9:98:fb:58:3e:
66:bc:51:08:fa:47:d7:09:39:86:cc:72:a6:80:00:
d7:92:3e:7d:4f:3b:ca:35:3f:e8:df:09:5f:8d:47:
53:5a:fc:e1:c6:8e:17:3d:c2:bd:c5:aa:00:03:57:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:30:09:11:D7:E2:E7:91:8B:EF:60:34:99:3C:98:D2:1D:D9:FC
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:1b:74:88:28:0f:0e:9c:2c:c5:dc:86:8f:c7:11:2e:17:
58:ae:15:5f:f8:df:cd:0d:80:be:7d:85:c6:5a:c9:bc:4a:a8:
61:f2:52:b6:d9:1f:5f:33:3b:e4:e3:b9:74:c7:da:fb:ec:91:
8d:41:d6:e6:ec:52:03:ad:81:41:a0:48:aa:4d:1e:65:28:6e:
20:56:06:dd:76:ae:08:a6:4a:35:31:de:a4:52:94:30:e1:23:
f6:14:bc:17:0f:6b:54:b5:60:bf:34:2b:f6:64:13:d7:c2:9d:
2f:a7:83:1d:7e:e7:f8:e4:84:d5:8b:66:45:d8:43:45:1b:3f:
48:6d:e2:90:6b:c2:52:b3:57:b0:8c:ef:4f:6d:10:90:3c:bb:
05:90:3d:ef:39:2a:e6:7e:c9:c0:4f:d9:3b:04:55:75:ba:6b:
ba:11:6e:c1:24:de:74:f3:61:21:b6:76:73:a7:1d:51:49:fa:
85:d3:cc:f1:7e:4f:e3:71:5d:d8:21:07:cf:98:c6:3f:10:91:
3c:fd:da:96:21:ca:13:93:d2:e4:69:a6:01:53:53:38:2e:ea:
c5:2f:fd:b2:fc:12:71:5d:0a:e2:e8:71:25:cf:42:cd:b6:b9:
82:6c:50:c5:73:4a:aa:9f:be:c2:f3:1f:ea:af:33:4c:5d:a6:
a4:9c:91:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8uvR37eJsOodJBbWYZIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmRmMjk3ZGIxYWYwMzc2YTVhMmE3MmU2OThhN2ViMjg3
YWYzYWYwHhcNMjYwMzI2MDcwMTQxWhcNMjYwMzI3MDcwMTQxWjAzMTEwLwYDVQQD
EyhkZDc2MzAwOTExZDdlMmU3OTE4YmVmNjAzNDk5M2M5OGQyMWRkOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYwkwcpY+2KSLXEp4h2KcBvGfOYh
zx1D0eQ1v9NP/gkpMB8gIdr3EeeRSjIiSkieZy9rxflyJNDrukvR9dAkhqH7L5ao
FGdXEgAt3LhbaAm1GZvyBSPL3rS8PLtQXbr3BZTHD03KwV7pxs3JbLgu0bP95DSt
NQaQPe+8O/yLUjM3v3qy+eIeUbQhR5kpJ/8n0jf5irX8FO+4xvWyNY0MFmK4+c6N
Pgx6+G0ICbwsjIT8RReZa0jl8blyLL3uz2u6IQgquRUAybsegCBEqZj7WD5mvFEI
+kfXCTmGzHKmgADXkj59TzvKNT/o3wlfjUdTWvzhxo4XPcK9xaoAA1fw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN12MAkR1+LnkYvvYDSZPJjSHdn8MB8GA1UdIwQY
MBaAFP8t8pfbGvA3aloqcuaYp+soevOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTct
MDFmMjhmNGQ0OWY2LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jZDUxZTgtNjU5NC00YTU4LWJkNTctMDFmMjhmNGQ0OWY2
LzEvX3kzeWw5c2E4RGRxV2lweTVwaW42eWg2ODY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFYbdIgo
Dw6cLMXcho/HES4XWK4VX/jfzQ2Avn2FxlrJvEqoYfJSttkfXzM75OO5dMfa++yR
jUHW5uxSA62BQaBIqk0eZShuIFYG3XauCKZKNTHepFKUMOEj9hS8Fw9rVLVgvzQr
9mQT18KdL6eDHX7n+OSE1YtmRdhDRRs/SG3ikGvCUrNXsIzvT20QkDy7BZA97zkq
5n7JwE/ZOwRVdbpruhFuwSTedPNhIbZ2c6cdUUn6hdPM8X5P43Fd2CEHz5jGPxCR
PP3aliHKE5PS5GmmAVNTOC7qxS/9svwScV0K4uhxJc9Czba5gmxQxXNKqp++wvMf
6q8zTF2mpJyRFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:52 2026 by rpki-client