Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json)
Hash identifier: vTrGLm0SwNqvzNDCdW5MQw6K04Rgt7gs2C3jDs1OPzs=
Subject key identifier: A1:07:79:84:65:D9:3B:FB:06:E2:58:B9:29:E7:0D:CA:6D:C4:25:AC
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 019D265F5FF5DF5A40CED47996CDE0DBBA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
Manifest number: 022A
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: nSN_TxFmfcT8L5gLifH_p7D8Uow.roa (hash: f+VYcizYIR9tVcbLfUBSMkoEKluNmLVYbPCJ6VRSkPU=)
2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: MSp0BdUBhwm0baW1Pdy73HVB25vhPEqHlZK99lMVKNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:f5:df:5a:40:ce:d4:79:96:cd:e0:db:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=a107798465d93bfb06e258b929e70dca6dc425ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:ad:b6:3c:d4:dc:ca:37:ec:dd:0f:80:4a:
0a:44:bb:a7:db:b7:a7:06:31:b5:bf:fd:54:bc:cb:
83:5a:a7:0b:7b:50:f2:d8:95:11:f2:81:3c:d7:9a:
c3:2e:c5:80:9c:83:b4:cb:86:dc:f5:d7:dc:07:dd:
30:b8:65:b5:60:b3:16:f9:34:f1:04:16:07:5e:f8:
dc:85:1e:e3:b5:90:e0:ed:4e:5f:2f:66:53:ca:79:
ea:27:79:7b:31:d0:1c:49:65:40:dd:81:56:c4:6d:
93:fc:81:17:e2:f4:c6:76:22:72:39:84:f8:73:8c:
bb:39:df:5f:d5:43:6b:b5:ed:c7:ae:32:d1:b1:a9:
ae:ea:b1:2c:a8:1e:11:be:56:1c:2c:66:34:47:e1:
a3:1c:03:83:08:bf:9b:88:e7:1d:3a:00:2d:54:a8:
b0:3b:8f:30:49:83:f6:d5:1b:cf:04:24:60:c7:e7:
63:d1:cb:6b:74:96:07:0d:9d:f1:b1:ef:66:b1:46:
40:f2:ff:b1:33:65:51:5a:de:4a:51:5d:a5:50:38:
a7:b7:fa:00:9c:8b:b1:db:88:ce:da:2a:ee:86:02:
e6:d5:0e:5e:c7:4d:13:59:25:83:a2:3e:e1:d4:66:
dc:3f:d5:c9:e0:98:c4:68:a6:9a:61:36:4d:76:77:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:07:79:84:65:D9:3B:FB:06:E2:58:B9:29:E7:0D:CA:6D:C4:25:AC
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2a:68:27:90:73:f1:00:59:9b:70:2d:ca:88:0a:8d:1e:96:
74:3a:7a:34:ed:1b:21:2c:45:79:ac:57:4d:12:b0:d0:57:02:
26:21:01:a6:ca:a8:1d:84:54:06:cd:46:01:09:15:64:7f:4e:
94:47:da:60:63:45:41:bf:2b:94:37:12:d5:ca:fe:7f:1a:ee:
63:69:03:e9:00:90:5f:60:55:cb:5a:cc:3e:d7:04:d5:19:c4:
49:ac:23:2f:13:90:e7:a3:52:71:21:d6:dc:d0:0f:41:91:18:
57:08:b5:60:1e:89:70:97:93:f7:3f:36:7d:ae:f1:93:25:62:
af:a4:84:e6:c0:27:c8:01:32:04:a6:1e:c6:ad:2c:01:99:c1:
59:71:66:c1:41:a3:10:f2:a4:97:95:7e:7f:ee:0e:c0:c1:4e:
6f:40:85:25:67:45:17:f3:e1:71:3e:eb:03:c8:cb:3a:63:eb:
d8:f0:91:3e:04:48:42:b5:80:c2:f4:93:6b:70:0f:37:3b:2b:
ba:cf:00:1b:05:7b:2d:af:90:97:f1:5e:01:43:f3:37:de:b3:
5e:7f:32:41:35:05:cb:11:1a:5e:2d:a5:ab:42:a0:19:1b:d7:
e4:92:11:ec:73:cc:85:83:76:9a:ee:62:c5:8f:52:10:41:90:
1b:31:72:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1/131pAztR5ls3g27peMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzY0YzNlYTQxZTUyZGJmYWI2NDRkNzcwZjM1OGVkMDQ0
MDAzZjIwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EyhhMTA3Nzk4NDY1ZDkzYmZiMDZlMjU4YjkyOWU3MGRjYTZkYzQyNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vittjzU3Mo37N0PgEoKRLun27en
BjG1v/1UvMuDWqcLe1Dy2JUR8oE815rDLsWAnIO0y4bc9dfcB90wuGW1YLMW+TTx
BBYHXvjchR7jtZDg7U5fL2ZTynnqJ3l7MdAcSWVA3YFWxG2T/IEX4vTGdiJyOYT4
c4y7Od9f1UNrte3HrjLRsamu6rEsqB4RvlYcLGY0R+GjHAODCL+biOcdOgAtVKiw
O48wSYP21RvPBCRgx+dj0ctrdJYHDZ3xse9msUZA8v+xM2VRWt5KUV2lUDint/oA
nIux24jO2iruhgLm1Q5ex00TWSWDoj7h1GbcP9XJ4JjEaKaaYTZNdnfICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEHeYRl2Tv7BuJYuSnnDcptxCWsMB8GA1UdIwQY
MBaAFMnGTD6kHlLb+rZE13DzWO0EQAPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYt
OGNiYThjY2RmOTgxLzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYtOGNiYThjY2RmOTgx
LzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWypoJ5Bz
8QBZm3AtyogKjR6WdDp6NO0bISxFeaxXTRKw0FcCJiEBpsqoHYRUBs1GAQkVZH9O
lEfaYGNFQb8rlDcS1cr+fxruY2kD6QCQX2BVy1rMPtcE1RnESawjLxOQ56NScSHW
3NAPQZEYVwi1YB6JcJeT9z82fa7xkyVir6SE5sAnyAEyBKYexq0sAZnBWXFmwUGj
EPKkl5V+f+4OwMFOb0CFJWdFF/PhcT7rA8jLOmPr2PCRPgRIQrWAwvSTa3APNzsr
us8AGwV7La+Ql/FeAUPzN96zXn8yQTUFyxEaXi2lq0KgGRvX5JIR7HPMhYN2mu5i
xY9SEEGQGzFyzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:19 2026 by rpki-client