Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: Nh/joM7hLGHHSdLxsoTKygPdwwvllsei89LRVJyluVI=
Subject key identifier: B7:91:D4:26:56:4F:EB:AE:71:45:C9:2F:E8:35:0D:73:F2:79:04:3B
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 019D26600593CFE69ECF0D6CB15269412013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:02:00 +0000
Manifest this update: Wed 25 Mar 2026 19:02:00 +0000
Manifest next update: Thu 26 Mar 2026 19:02:00 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: 7vWhpJc4nAh4Yr7+t/BS2nPhjXslwoq95IlOKl3qPFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:05:93:cf:e6:9e:cf:0d:6c:b1:52:69:41:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Mar 25 19:02:00 2026 GMT
Not After : Mar 26 19:02:00 2026 GMT
Subject: CN=b791d426564febae7145c92fe8350d73f279043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:8b:4c:4a:ec:80:3d:c9:fb:fd:1f:fa:83:
ec:0e:8c:f7:cb:87:ef:23:9a:97:26:2a:4c:1a:57:
d4:ce:48:45:b7:e8:32:d2:84:f7:18:df:44:d5:18:
ef:33:41:78:66:3c:42:77:a0:66:d3:89:bc:4e:ad:
c7:fe:5a:c6:53:37:61:cc:0b:22:92:1d:59:fc:c2:
41:1b:ec:73:96:51:ec:e7:5a:ed:f4:47:55:d2:9d:
7b:c7:81:b6:a3:57:15:96:a8:8b:f8:64:b2:34:a7:
c3:a4:01:38:0f:89:60:b1:35:7a:7a:02:08:04:84:
47:34:48:62:fb:b8:fd:3d:9f:02:a6:36:1b:69:5c:
57:d2:ff:70:c7:df:f8:44:a7:f7:28:30:c4:cb:7f:
52:95:68:53:04:4d:6f:af:ef:cb:41:53:2c:be:c3:
1c:f7:b8:df:c9:0c:e1:5b:e8:31:37:be:35:01:c9:
74:ec:7e:dd:eb:28:f8:ce:58:d9:21:ef:45:57:dc:
e4:16:bf:b1:6f:f9:9e:d6:bc:66:54:ad:0f:63:25:
4e:13:15:56:69:2e:3b:11:48:25:d8:02:40:36:0f:
62:0b:6e:0c:e4:95:5f:d0:d4:ca:6d:45:fc:ae:79:
2f:93:94:c3:92:4f:20:80:7e:04:ba:6d:df:5d:74:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:D4:26:56:4F:EB:AE:71:45:C9:2F:E8:35:0D:73:F2:79:04:3B
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:73:b0:db:7c:67:d9:87:09:f1:8a:a0:c5:81:5d:d6:68:
be:cf:d9:f9:32:d6:9e:4a:01:65:16:0d:9e:af:21:9b:cc:07:
e8:9b:f6:ba:07:26:fe:37:f1:90:35:9d:a3:2a:0a:09:d3:f4:
29:92:df:c0:1b:e7:e8:b5:2e:3b:c0:77:11:7a:f1:5c:fb:18:
f6:cc:94:89:07:94:be:8f:11:c2:b9:17:05:ad:6c:07:df:8f:
6b:8b:f2:b1:f4:2c:4c:f0:05:20:87:09:19:cd:bb:91:93:fe:
fd:07:83:ed:0d:39:1b:47:1f:14:71:37:12:bc:79:ea:fa:f8:
a9:7b:b2:62:12:b1:83:a7:24:c9:34:38:ed:cd:40:0e:7c:51:
7b:fa:36:0d:e6:3f:5f:dc:af:fc:fc:4d:28:aa:a1:2a:f9:e5:
d3:f8:c2:4e:28:77:88:8e:d4:fb:ef:81:73:ed:79:c6:e0:fc:
82:04:e3:36:4d:d0:9a:8f:1e:26:7c:fd:b0:22:b8:4f:f3:89:
b3:d4:da:f9:7e:3c:ef:00:a3:e2:1b:b6:80:bc:a8:6c:7e:b7:
11:50:87:49:40:86:38:6a:ca:7e:a0:ef:e4:db:7f:07:6f:68:
fb:98:fd:3b:cb:ef:f7:40:15:27:1b:4e:15:5d:e4:4e:6f:59:
c8:76:8d:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mYAWTz+aezw1ssVJpQSATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjYwMzI1MTkwMjAwWhcNMjYwMzI2MTkwMjAwWjAzMTEwLwYDVQQD
EyhiNzkxZDQyNjU2NGZlYmFlNzE0NWM5MmZlODM1MGQ3M2YyNzkwNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LmLTErsgD3J+/0f+oPsDoz3y4fv
I5qXJipMGlfUzkhFt+gy0oT3GN9E1RjvM0F4ZjxCd6Bm04m8Tq3H/lrGUzdhzAsi
kh1Z/MJBG+xzllHs51rt9EdV0p17x4G2o1cVlqiL+GSyNKfDpAE4D4lgsTV6egII
BIRHNEhi+7j9PZ8CpjYbaVxX0v9wx9/4RKf3KDDEy39SlWhTBE1vr+/LQVMsvsMc
97jfyQzhW+gxN741Acl07H7d6yj4zljZIe9FV9zkFr+xb/me1rxmVK0PYyVOExVW
aS47EUgl2AJANg9iC24M5JVf0NTKbUX8rnkvk5TDkk8ggH4Eum3fXXQEQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeR1CZWT+uucUXJL+g1DXPyeQQ7MB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcxzsNt8
Z9mHCfGKoMWBXdZovs/Z+TLWnkoBZRYNnq8hm8wH6Jv2ugcm/jfxkDWdoyoKCdP0
KZLfwBvn6LUuO8B3EXrxXPsY9syUiQeUvo8RwrkXBa1sB9+Pa4vysfQsTPAFIIcJ
Gc27kZP+/QeD7Q05G0cfFHE3Erx56vr4qXuyYhKxg6ckyTQ47c1ADnxRe/o2DeY/
X9yv/PxNKKqhKvnl0/jCTih3iI7U+++Bc+15xuD8ggTjNk3Qmo8eJnz9sCK4T/OJ
s9Ta+X487wCj4hu2gLyobH63EVCHSUCGOGrKfqDv5Nt/B29o+5j9O8vv90AVJxtO
FV3kTm9ZyHaNWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:53 2026 by rpki-client