Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: /eSU4DQtLPV4DS5zpdyS2HNFdo+F9bJnpJ93pvd3jVY=
Subject key identifier: E2:2E:6E:DB:A9:17:A1:A8:9C:AC:E9:08:4C:DD:CF:F1:79:3D:05:D1
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 019D28BB8172E7D63237684CDD6F7F6C0DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 05D8
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: NmILLaZO13ylxBiJtXCUuUjLxwc.roa (hash: ouwe61Qw3KErUT8wYroof+WiBVltIWBJpKDg8a/XyWg=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: maSq59AuMdc8rdoCIxGUgwtAhZgSFxenIs2FdCIZb0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:81:72:e7:d6:32:37:68:4c:dd:6f:7f:6c:0d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=e22e6edba917a1a89cace9084cddcff1793d05d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:6b:29:79:e7:7f:ce:70:69:f7:ec:80:41:
10:eb:66:55:4f:aa:92:62:61:d1:da:f4:a9:f8:d2:
a3:65:a7:a0:9c:0d:d9:6a:bb:43:53:df:f9:d4:3c:
76:d8:40:3b:73:a9:a4:af:5b:3f:ca:09:61:de:f7:
3d:57:a9:91:fc:d3:5a:49:93:66:76:5d:b3:28:88:
e0:5c:bd:ea:2e:e8:25:8c:76:64:87:fe:1e:91:7b:
5d:c6:51:f2:84:84:97:c5:00:54:f0:f2:61:9c:58:
7e:80:27:8e:b7:b0:cc:3b:fc:70:2d:f9:f4:fa:e3:
6e:a7:11:9e:a9:c0:58:2c:05:35:b2:c4:0e:bd:e8:
fd:b9:c8:ab:19:eb:57:b6:d4:5a:c4:d1:97:0e:73:
cd:a7:8f:22:6a:60:48:2c:95:87:bf:3a:63:87:db:
bf:40:00:ff:11:25:8c:cc:d3:bd:36:c8:2c:4b:d7:
1f:ba:d4:c1:e6:63:af:b2:c0:1e:20:53:09:29:c3:
0f:2f:0a:80:1a:fa:1b:4c:45:8a:23:de:e1:20:5b:
8e:5b:5f:2f:18:55:04:c4:6f:36:e8:b5:f4:4d:f6:
55:fb:bf:ab:3f:bd:31:8d:af:5a:89:8b:09:a8:63:
47:47:33:45:5c:07:69:8e:17:80:06:5e:20:a9:97:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:6E:DB:A9:17:A1:A8:9C:AC:E9:08:4C:DD:CF:F1:79:3D:05:D1
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:c7:b8:de:2b:a2:02:7f:5a:84:1b:0a:e6:76:b0:2e:58:
5d:dd:a4:65:5d:6f:9e:1d:fe:53:34:48:52:d4:37:52:20:92:
35:7d:00:8e:2a:84:7d:03:9e:6c:00:9f:ea:9a:43:ac:6a:09:
ab:91:57:70:fb:e8:86:c4:cb:35:0d:78:5d:5e:05:b6:de:67:
f1:ae:b5:fe:6b:df:36:0c:0f:1a:16:bf:4d:c5:5c:98:9e:73:
9a:86:5f:d9:cd:a7:6e:eb:48:e9:b1:0d:01:c2:85:ad:ac:b2:
0c:4c:c9:e3:17:81:0d:a8:ae:8f:3b:21:57:ad:3f:c2:cf:15:
44:47:c5:de:2f:c4:78:64:e5:c5:d7:29:00:9c:7e:8a:0f:53:
85:49:bf:b8:70:ae:fe:1a:c0:f3:60:c2:59:96:38:b5:34:2a:
28:ae:c1:80:4e:05:88:e2:82:e7:b4:91:2b:d4:95:84:d7:ed:
dc:56:50:38:6a:30:dd:98:41:be:58:c5:a5:16:d9:92:54:50:
b9:5a:02:84:b9:2c:32:fc:32:c9:da:f3:b6:88:6c:97:95:dd:
84:cf:49:5c:e4:84:b0:0e:4b:88:66:89:11:9f:0f:58:23:b0:
dd:87:cd:8e:4d:c3:d9:d8:af:2a:f0:0e:e5:0a:ef:f8:2d:83:
c7:ce:3e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4Fy59YyN2hM3W9/bA3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzhhYTdlMzE2YjIxZjg0M2NmYjk1ODEwYzY4MGNkZGJm
YTZlNmYwHhcNMjYwMzI2MDYwMTEwWhcNMjYwMzI3MDYwMTEwWjAzMTEwLwYDVQQD
EyhlMjJlNmVkYmE5MTdhMWE4OWNhY2U5MDg0Y2RkY2ZmMTc5M2QwNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRlrKXnnf85waffsgEEQ62ZVT6qS
YmHR2vSp+NKjZaegnA3ZartDU9/51Dx22EA7c6mkr1s/yglh3vc9V6mR/NNaSZNm
dl2zKIjgXL3qLugljHZkh/4ekXtdxlHyhISXxQBU8PJhnFh+gCeOt7DMO/xwLfn0
+uNupxGeqcBYLAU1ssQOvej9ucirGetXttRaxNGXDnPNp48iamBILJWHvzpjh9u/
QAD/ESWMzNO9NsgsS9cfutTB5mOvssAeIFMJKcMPLwqAGvobTEWKI97hIFuOW18v
GFUExG826LX0TfZV+7+rP70xja9aiYsJqGNHRzNFXAdpjheABl4gqZeURQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIubtupF6GonKzpCEzdz/F5PQXRMB8GA1UdIwQY
MBaAFMp4qn4xayH4Q8+5WBDGgM3b+m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYt
ZTMxMzhmZjFlODk5LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83ZGEzNGMtMzk4NC00NDQyLWI2NDYtZTMxMzhmZjFlODk5
LzEveW5pcWZqRnJJZmhEejdsWUVNYUF6ZHY2Ym04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBbHuN4r
ogJ/WoQbCuZ2sC5YXd2kZV1vnh3+UzRIUtQ3UiCSNX0AjiqEfQOebACf6ppDrGoJ
q5FXcPvohsTLNQ14XV4Ftt5n8a61/mvfNgwPGha/TcVcmJ5zmoZf2c2nbutI6bEN
AcKFrayyDEzJ4xeBDaiujzshV60/ws8VREfF3i/EeGTlxdcpAJx+ig9ThUm/uHCu
/hrA82DCWZY4tTQqKK7BgE4FiOKC57SRK9SVhNft3FZQOGow3ZhBvljFpRbZklRQ
uVoChLksMvwyydrztohsl5XdhM9JXOSEsA5LiGaJEZ8PWCOw3YfNjk3D2divKvAO
5Qrv+C2Dx84+uA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:07 2026 by rpki-client