Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier: 4a6v7DK8jg1veu8Kn/PlY0cg+R2ubMnauAw0rtwQp2k=
Subject key identifier: 8A:29:9C:EF:51:A7:07:2E:A9:75:66:3E:9C:1A:73:C5:66:27:41:43
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial: 019D28F2F29B4FF3CF77998B9BE8496FB561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number: 17DF
Signing time: Thu 26 Mar 2026 07:01:43 +0000
Manifest this update: Thu 26 Mar 2026 07:01:43 +0000
Manifest next update: Fri 27 Mar 2026 07:01:43 +0000
Files and hashes: 1: 1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa (hash: 8/0JD00W9iNEqIm7TkhD9o/ThL160i8acaV44zkpW3I=)
2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: EtgMEJQbEVurLWDzHbeBzbMxl1T4cUrF1g3tLwledj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f2:9b:4f:f3:cf:77:99:8b:9b:e8:49:6f:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
Validity
Not Before: Mar 26 07:01:43 2026 GMT
Not After : Mar 27 07:01:43 2026 GMT
Subject: CN=8a299cef51a7072ea975663e9c1a73c566274143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:b3:d5:08:26:4d:57:f5:25:9e:75:5d:35:
6c:7f:09:11:89:bf:46:27:0f:56:bf:55:06:bf:05:
27:23:73:00:f1:c1:d0:20:2e:ed:75:50:e3:cb:52:
a4:bf:67:47:26:81:8c:45:3e:fe:73:f8:41:b1:f3:
3d:a6:54:cb:c4:e5:e4:98:76:d8:d6:d9:3e:0e:10:
f9:a2:8c:a8:ba:0d:bd:d2:37:30:90:e0:ed:b8:51:
83:9a:c7:d8:1d:11:8c:3c:3e:fa:6a:e8:93:fa:bb:
31:53:64:0a:c6:cd:e2:19:6a:e0:d5:86:5a:17:6f:
41:24:94:9c:d5:60:c6:b2:92:52:18:98:58:e8:50:
41:45:bb:26:ae:f1:47:a5:b1:72:d3:52:50:f6:81:
ea:f0:45:f4:f9:90:9c:ad:32:2f:f0:fc:f6:53:7d:
e1:5f:db:0c:14:b5:71:d5:36:97:26:9a:a0:bb:7f:
ed:cc:ca:57:7f:53:ef:bc:64:b7:92:19:46:68:1d:
19:65:64:69:d3:0b:8e:06:78:cd:fd:ab:aa:85:87:
97:e1:dc:db:f3:f1:6a:7b:69:71:fa:15:36:db:2a:
74:3a:21:0c:4c:02:c4:0d:fe:af:44:02:ef:85:53:
bf:7f:a3:f0:92:d1:b3:49:24:4b:ac:17:75:92:7c:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:9C:EF:51:A7:07:2E:A9:75:66:3E:9C:1A:73:C5:66:27:41:43
X509v3 Authority Key Identifier:
keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:8d:dc:9c:d9:ca:39:e3:23:62:44:1f:7f:7f:b1:02:19:84:
0f:19:1f:cf:b6:8e:53:89:8a:70:45:1f:59:c3:4e:30:d8:de:
11:f5:ce:df:8d:4b:44:a7:d1:60:52:b7:2f:93:5a:f5:72:4b:
bf:e7:c2:97:ea:f3:12:05:8d:49:dc:6c:9a:68:3c:09:51:ae:
a0:8d:c0:00:81:e1:75:d8:d5:70:fc:f9:0b:22:a4:bd:96:e1:
c1:95:bd:92:b9:a1:95:bf:c3:0e:18:c4:15:82:32:b0:2e:a8:
ed:d3:c4:cf:bf:9c:7c:38:9f:77:c1:3d:5c:9a:04:9e:88:1f:
ce:2f:76:f1:10:7a:6e:f5:e6:85:26:90:1f:c0:a9:88:d9:af:
1b:3f:b0:a7:68:37:a3:c0:47:4b:e9:56:5a:8a:b0:b6:e3:ac:
89:06:e0:68:b0:41:6a:c8:c7:18:b3:ab:0e:75:15:bb:a5:13:
75:c4:47:0c:13:93:70:39:61:d6:4f:4a:7e:58:79:84:7f:b7:
ee:42:08:ae:fe:c6:ee:a8:0a:64:11:6f:9e:07:ee:da:d3:e8:
94:e9:84:01:41:2f:bd:cb:3b:85:2f:3f:87:71:f9:41:4b:1b:
3f:85:f1:e2:89:06:1c:2d:f0:74:5d:9b:af:4d:66:ad:1f:d4:
5e:30:84:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8vKbT/PPd5mLm+hJb7VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm
MjIyOGYwHhcNMjYwMzI2MDcwMTQzWhcNMjYwMzI3MDcwMTQzWjAzMTEwLwYDVQQD
Eyg4YTI5OWNlZjUxYTcwNzJlYTk3NTY2M2U5YzFhNzNjNTY2Mjc0MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD6z1QgmTVf1JZ51XTVsfwkRib9G
Jw9Wv1UGvwUnI3MA8cHQIC7tdVDjy1Kkv2dHJoGMRT7+c/hBsfM9plTLxOXkmHbY
1tk+DhD5ooyoug290jcwkODtuFGDmsfYHRGMPD76auiT+rsxU2QKxs3iGWrg1YZa
F29BJJSc1WDGspJSGJhY6FBBRbsmrvFHpbFy01JQ9oHq8EX0+ZCcrTIv8Pz2U33h
X9sMFLVx1TaXJpqgu3/tzMpXf1PvvGS3khlGaB0ZZWRp0wuOBnjN/auqhYeX4dzb
8/Fqe2lx+hU22yp0OiEMTALEDf6vRALvhVO/f6PwktGzSSRLrBd1knw9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIopnO9RpwcuqXVmPpwac8VmJ0FDMB8GA1UdIwQY
MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt
MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1
LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6I3cnNnK
OeMjYkQff3+xAhmEDxkfz7aOU4mKcEUfWcNOMNjeEfXO341LRKfRYFK3L5Na9XJL
v+fCl+rzEgWNSdxsmmg8CVGuoI3AAIHhddjVcPz5CyKkvZbhwZW9krmhlb/DDhjE
FYIysC6o7dPEz7+cfDifd8E9XJoEnogfzi928RB6bvXmhSaQH8CpiNmvGz+wp2g3
o8BHS+lWWoqwtuOsiQbgaLBBasjHGLOrDnUVu6UTdcRHDBOTcDlh1k9Kflh5hH+3
7kIIrv7G7qgKZBFvngfu2tPolOmEAUEvvcs7hS8/h3H5QUsbP4Xx4okGHC3wdF2b
r01mrR/UXjCEZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:39 2026 by rpki-client