Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: sIjxscTpJdNr0M1gBu0NCqYl5QsWSVjsbigw+XSCSJc=
Subject key identifier: 13:A8:97:19:CE:6F:51:FA:E8:D8:9F:D5:EC:C8:CB:E0:15:48:7F:23
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019D26CCC4F769E4201D5ADE286C35E5DC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: PUyIsqmNtUQGfBwNcC713+eUx0NUGJ6QrTylOyrn9m8=)
2: lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa (hash: Chowr6YW7ZD6NeZH4t2rIlYB6mz3gu7Q1zTWhZm5/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c4:f7:69:e4:20:1d:5a:de:28:6c:35:e5:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=13a89719ce6f51fae8d89fd5ecc8cbe015487f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:7c:08:8e:34:fd:94:5f:50:9f:6b:e9:fe:
98:8d:cf:0a:b0:70:c2:e8:64:6c:34:ac:e7:57:5e:
13:74:c8:b4:6b:cd:a7:d2:cd:65:60:0a:b0:32:49:
17:6b:6d:84:8f:39:f4:b5:02:be:ca:14:5b:35:37:
51:f2:64:c8:0d:e2:3c:9a:d5:cc:06:5f:30:73:b2:
b7:d1:21:91:4f:d8:29:fb:e7:9f:b3:fc:25:ec:43:
f4:e0:4c:7d:f8:fa:0d:a9:bf:00:3d:66:2e:f1:1e:
73:70:a5:5f:3d:b3:e2:68:5d:46:31:99:1e:be:53:
cc:00:c7:a2:7c:cf:6a:4a:b8:37:b1:1b:97:ce:d6:
33:b2:c8:d1:15:5f:53:e0:28:04:a5:71:2e:f9:c2:
54:ff:7b:31:67:ed:d0:9a:a1:72:3b:e6:13:90:bb:
27:dc:ba:20:d6:8b:88:5c:fd:65:60:cf:22:13:9e:
d5:6b:94:f5:8d:0c:4e:3c:42:98:26:a9:56:6f:19:
dc:05:cf:dc:92:f6:d6:7b:06:00:70:b4:3c:55:59:
aa:a1:eb:c0:e2:ca:2b:55:2e:b9:8f:ea:a2:8e:31:
c8:35:89:5d:9b:31:d9:50:80:be:b1:94:8b:77:35:
3c:5f:08:e3:f2:c9:b8:45:58:7a:2d:9e:28:3d:b3:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:97:19:CE:6F:51:FA:E8:D8:9F:D5:EC:C8:CB:E0:15:48:7F:23
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:8a:17:b7:37:88:9c:f2:70:7c:3f:cc:6c:0f:67:09:9e:
dc:ca:32:9d:c0:ca:5c:81:88:3f:c2:6f:c3:bc:68:ef:ce:3c:
06:29:33:c7:fc:60:57:11:e1:49:d8:38:67:a2:7b:5d:ab:af:
24:b5:90:bc:b4:58:13:e9:1b:ae:22:97:e6:3d:63:8a:f5:ec:
ca:f7:1a:af:37:3b:51:f3:ab:e1:d9:3b:61:69:d7:fd:c5:43:
8e:50:d5:3f:b2:98:87:54:a9:c6:69:09:23:ab:e8:e2:0e:63:
6f:12:a7:9f:75:36:b6:ae:fa:eb:50:23:1c:85:b5:0c:82:73:
60:b5:df:e6:9a:b2:14:88:42:34:05:3c:33:5d:8b:65:83:6b:
34:1a:fd:fa:c5:07:6f:93:e4:78:40:3b:2d:98:7f:a4:d6:aa:
40:5f:21:11:e1:70:39:11:b1:69:a9:f4:55:47:ed:67:b0:c2:
02:35:d7:4d:a6:7e:e7:d1:d1:3c:88:f5:ce:d6:a4:01:12:37:
dd:86:52:ec:98:df:e3:e3:00:e9:d4:fd:45:1e:09:0d:20:77:
8c:6a:8d:0f:6e:78:86:84:8f:b8:29:74:79:d9:81:41:32:d3:
03:f3:10:46:e1:a7:82:ac:96:0e:89:dc:82:aa:1c:af:d4:89:
e2:f7:02:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMT3aeQgHVreKGw15dx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm
YjI0NzAwHhcNMjYwMzI1MjEwMDQ3WhcNMjYwMzI2MjEwMDQ3WjAzMTEwLwYDVQQD
EygxM2E4OTcxOWNlNmY1MWZhZThkODlmZDVlY2M4Y2JlMDE1NDg3ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx98CI40/ZRfUJ9r6f6Yjc8KsHDC
6GRsNKznV14TdMi0a82n0s1lYAqwMkkXa22Ejzn0tQK+yhRbNTdR8mTIDeI8mtXM
Bl8wc7K30SGRT9gp++efs/wl7EP04Ex9+PoNqb8APWYu8R5zcKVfPbPiaF1GMZke
vlPMAMeifM9qSrg3sRuXztYzssjRFV9T4CgEpXEu+cJU/3sxZ+3QmqFyO+YTkLsn
3Log1ouIXP1lYM8iE57Va5T1jQxOPEKYJqlWbxncBc/ckvbWewYAcLQ8VVmqoevA
4sorVS65j+qijjHINYldmzHZUIC+sZSLdzU8Xwjj8sm4RVh6LZ4oPbMhjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOolxnOb1H66Nif1ezIy+AVSH8jMB8GA1UdIwQY
MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt
ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk
LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUyKF7c3
iJzycHw/zGwPZwme3MoyncDKXIGIP8Jvw7xo7848Bikzx/xgVxHhSdg4Z6J7Xauv
JLWQvLRYE+kbriKX5j1jivXsyvcarzc7UfOr4dk7YWnX/cVDjlDVP7KYh1SpxmkJ
I6vo4g5jbxKnn3U2tq7661AjHIW1DIJzYLXf5pqyFIhCNAU8M12LZYNrNBr9+sUH
b5PkeEA7LZh/pNaqQF8hEeFwORGxaan0VUftZ7DCAjXXTaZ+59HRPIj1ztakARI3
3YZS7Jjf4+MA6dT9RR4JDSB3jGqND254hoSPuCl0edmBQTLTA/MQRuGngqyWDonc
gqocr9SJ4vcCsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:46 2026 by rpki-client