Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: ifYeF5zgL8CDPp0f/PFXhrt6T6Gj0Uhp8j8ummNhkB4=
Subject key identifier: CF:58:C0:C9:2C:79:D7:F0:A5:57:EC:E4:C3:AB:DA:DC:90:57:5B:97
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019D24DED1BFDA6CDBD6F0CD28DEB65821FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 01D8
Signing time: Wed 25 Mar 2026 12:01:15 +0000
Manifest this update: Wed 25 Mar 2026 12:01:15 +0000
Manifest next update: Thu 26 Mar 2026 12:01:15 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: wyCYmHHo/Yi1XBPwpJ6CG0q664a8DNQwv4cYgDL67FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:d1:bf:da:6c:db:d6:f0:cd:28:de:b6:58:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Mar 25 12:01:15 2026 GMT
Not After : Mar 26 12:01:15 2026 GMT
Subject: CN=cf58c0c92c79d7f0a557ece4c3abdadc90575b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:ac:d0:38:cb:7a:b4:89:44:49:4f:e8:3e:
51:45:77:7f:90:e8:f0:b5:9f:32:21:e3:2b:1a:8e:
ce:6e:1d:d6:0e:58:c6:47:87:6f:6b:31:14:5e:69:
fa:54:80:8e:e4:da:3b:1c:22:29:67:4c:9a:ec:17:
df:6b:2a:f0:61:10:f3:2e:59:b3:1f:13:fe:4c:0e:
78:cd:5d:a6:8e:0e:a3:52:9b:20:9f:74:38:c9:cb:
2d:e9:85:41:31:19:6c:db:48:e6:55:83:3a:3c:f5:
c1:1a:7f:9e:0e:73:26:d7:b8:6a:80:dd:26:64:82:
39:dc:ed:a9:92:d2:4e:15:aa:19:7c:e2:e1:a7:d4:
d9:63:79:bb:b3:a1:0e:9a:d4:f1:28:db:fe:08:11:
ab:4f:76:e6:d0:1b:ad:d1:68:3b:83:4f:e2:61:2c:
ec:aa:1f:3c:da:4d:fd:e7:05:6d:02:c2:36:62:5b:
75:82:86:b6:6e:a6:1a:76:db:9e:74:8a:f0:7c:8f:
a1:c0:39:1d:60:5b:31:bc:03:07:78:f8:25:82:c5:
fb:b1:45:53:32:31:03:38:ce:ac:03:6d:3e:64:23:
de:6c:52:6f:32:f4:c9:d5:80:73:7f:0b:09:38:73:
35:19:37:62:98:9e:53:fd:8e:4b:61:ff:a8:cd:3b:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:C0:C9:2C:79:D7:F0:A5:57:EC:E4:C3:AB:DA:DC:90:57:5B:97
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3f:0c:09:40:29:07:32:04:2d:a9:dc:08:50:f1:7b:85:34:
47:af:14:dc:bf:0d:03:fb:b0:9b:60:c9:f1:cb:2c:06:9d:4d:
16:03:9c:4a:12:01:a0:0e:79:ef:01:11:41:36:ec:01:1a:49:
0f:7d:54:61:75:7e:cb:5d:80:63:e1:94:0d:81:c2:de:a1:00:
bb:04:ae:fa:ff:8b:bb:e2:5f:c7:e9:e1:62:3f:da:f9:cb:47:
0c:7a:cb:18:9a:99:19:6b:5e:6e:49:42:77:03:5d:a4:cb:66:
e1:33:87:cc:7d:fa:8f:f2:82:36:72:0d:f0:c0:00:30:42:b5:
cc:24:95:9e:5e:2d:8b:e7:ca:43:d3:a0:e7:37:2e:ef:75:75:
5a:e3:c1:1c:68:0b:df:98:75:eb:e4:d2:bd:5e:64:f2:00:b4:
2c:34:64:d7:fc:e1:4f:7d:45:4b:6c:d6:a2:52:64:60:b7:17:
39:06:a6:d8:6f:16:91:1c:64:4e:56:c9:7b:d6:91:90:db:f7:
fc:7c:08:0c:d5:04:a9:52:1e:b1:bc:ee:df:8f:32:a9:04:23:
34:64:a4:d5:3f:9d:bd:7e:18:22:0e:c5:ec:a2:98:57:05:77:
69:c6:5a:82:af:38:7c:99:d2:d7:38:fb:26:f2:47:a9:4b:17:
b6:0e:9c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3tG/2mzb1vDNKN62WCH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2Y2ZjZlMTUwYTYwNDNjYjIwOTNiMDhkZGQzYTJhNGFi
OTdhMzcwHhcNMjYwMzI1MTIwMTE1WhcNMjYwMzI2MTIwMTE1WjAzMTEwLwYDVQQD
EyhjZjU4YzBjOTJjNzlkN2YwYTU1N2VjZTRjM2FiZGFkYzkwNTc1Yjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot6s0DjLerSJRElP6D5RRXd/kOjw
tZ8yIeMrGo7Obh3WDljGR4dvazEUXmn6VICO5No7HCIpZ0ya7BffayrwYRDzLlmz
HxP+TA54zV2mjg6jUpsgn3Q4ycst6YVBMRls20jmVYM6PPXBGn+eDnMm17hqgN0m
ZII53O2pktJOFaoZfOLhp9TZY3m7s6EOmtTxKNv+CBGrT3bm0But0Wg7g0/iYSzs
qh882k395wVtAsI2Ylt1goa2bqYadtuedIrwfI+hwDkdYFsxvAMHePglgsX7sUVT
MjEDOM6sA20+ZCPebFJvMvTJ1YBzfwsJOHM1GTdimJ5T/Y5LYf+ozTsUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9YwMksedfwpVfs5MOr2tyQV1uXMB8GA1UdIwQY
MBaAFGF/b24VCmBDyyCTsI3dOipKuXo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMt
NzFjM2Q2YWEyODk5LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMtNzFjM2Q2YWEyODk5
LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcD8MCUAp
BzIELancCFDxe4U0R68U3L8NA/uwm2DJ8cssBp1NFgOcShIBoA557wERQTbsARpJ
D31UYXV+y12AY+GUDYHC3qEAuwSu+v+Lu+Jfx+nhYj/a+ctHDHrLGJqZGWtebklC
dwNdpMtm4TOHzH36j/KCNnIN8MAAMEK1zCSVnl4ti+fKQ9Og5zcu73V1WuPBHGgL
35h16+TSvV5k8gC0LDRk1/zhT31FS2zWolJkYLcXOQam2G8WkRxkTlbJe9aRkNv3
/HwIDNUEqVIesbzu348yqQQjNGSk1T+dvX4YIg7F7KKYVwV3acZagq84fJnS1zj7
JvJHqUsXtg6cXg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:17 2026 by rpki-client