Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: jmV59ryOhkDvI0xvfmY67F9RQagK+s3b9jgl20ebars=
Subject key identifier: 57:BF:F1:CB:A6:7E:E3:6E:72:B6:64:D1:55:0B:EA:02:DB:B0:3F:B3
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 019D2A72C03D0EBCDB5D5616BA50BBF5D8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (hash: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI=)
2: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (hash: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g=)
3: PJSHdZS95adkLNWcV4sGR1iLw40.roa (hash: 6w7h78uytxCAdBP54QlwzbmDu/qnNv60V+P+VcQ00lk=)
4: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: R0FCsIErgAYG4CuoxGk1Q1BvhNsj4GEKxxyYizhBQLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c0:3d:0e:bc:db:5d:56:16:ba:50:bb:f5:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=57bff1cba67ee36e72b664d1550bea02dbb03fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:f1:73:49:a0:81:8b:99:04:cf:09:b2:35:
f9:55:cf:af:dc:a4:97:9a:a4:75:ca:2c:02:a4:32:
7f:3f:1c:30:3b:a3:89:0d:2c:c7:0f:fa:1b:05:24:
de:f1:34:b8:76:9f:54:3f:61:ea:bb:8c:90:53:49:
94:03:28:b7:fc:2e:79:b9:d2:c4:76:65:9c:d0:cb:
d4:a9:41:c3:d1:da:4a:66:4e:40:c0:bc:ed:c4:fb:
25:99:8f:82:3f:30:ec:fd:5c:54:d5:75:ec:e3:47:
fc:74:2f:18:21:da:72:00:a1:f8:39:f7:f3:9a:8a:
0c:70:18:43:ce:d1:43:6f:7b:ca:a9:f7:80:fd:a0:
96:0a:26:71:28:99:43:d3:0c:25:0f:c8:94:70:ca:
90:a6:d8:8d:d1:04:fb:7e:df:19:94:e4:fb:a7:2c:
8d:c1:03:1e:3b:b2:9d:d6:b5:60:cb:c4:87:4e:6e:
6a:15:5e:97:eb:a9:e8:b2:4d:39:aa:d9:5f:97:50:
87:66:79:03:cf:fe:2b:b6:b7:09:07:4d:7e:f9:63:
4d:56:dc:70:b4:2b:ab:39:24:f0:d0:fc:e3:2b:49:
ba:8b:a9:c2:9c:10:a0:7a:db:35:df:df:b6:39:7f:
e2:7a:0e:55:f2:2d:f3:d0:c6:d8:44:f4:4a:83:46:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:F1:CB:A6:7E:E3:6E:72:B6:64:D1:55:0B:EA:02:DB:B0:3F:B3
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:43:e7:36:12:b1:6d:ec:61:4e:0a:1b:8e:70:49:f1:a8:75:
4d:e4:c8:df:aa:3e:15:b9:44:89:66:aa:3e:de:ec:ec:43:87:
7b:a0:31:60:c3:81:7e:fd:8d:28:30:25:d8:d0:9d:ac:0a:65:
9b:02:74:24:8b:de:5f:51:54:7d:fb:95:76:fc:35:9f:ac:6a:
0e:9b:fa:c2:28:33:d9:19:ea:df:ac:de:0c:40:1d:01:83:04:
6f:5e:88:42:20:aa:61:a0:2b:29:12:81:f4:13:53:ae:45:7c:
b3:a6:aa:f0:f9:59:7d:03:54:48:7a:6e:f0:39:b4:01:43:7e:
9f:1c:d3:aa:97:ac:2a:34:d1:bb:10:3c:7a:b6:e0:9f:68:bf:
5f:1c:a7:a2:82:b2:56:ca:86:a5:2c:c4:0d:49:b1:bd:df:ba:
d7:3b:81:7c:a8:6f:b5:df:cc:34:cc:bf:6b:70:06:c6:70:41:
47:a4:b4:f8:9a:6f:07:b6:cd:0f:4e:79:ac:16:20:86:2d:6f:
12:d9:1b:90:2c:e5:b1:6e:08:46:6e:6b:88:0c:0e:0b:dc:2f:
c7:44:ee:1c:91:50:1f:92:c1:5e:2d:07:fc:57:a1:ac:27:e8:
8c:4f:ac:58:98:6b:c7:eb:6a:e8:ce:91:c3:e2:c0:17:71:b8:
b3:3c:ed:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcsA9DrzbXVYWulC79djbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjYwMzI2MTQwMDU2WhcNMjYwMzI3MTQwMDU2WjAzMTEwLwYDVQQD
Eyg1N2JmZjFjYmE2N2VlMzZlNzJiNjY0ZDE1NTBiZWEwMmRiYjAzZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm7xc0mggYuZBM8JsjX5Vc+v3KSX
mqR1yiwCpDJ/PxwwO6OJDSzHD/obBSTe8TS4dp9UP2Hqu4yQU0mUAyi3/C55udLE
dmWc0MvUqUHD0dpKZk5AwLztxPslmY+CPzDs/VxU1XXs40f8dC8YIdpyAKH4Offz
mooMcBhDztFDb3vKqfeA/aCWCiZxKJlD0wwlD8iUcMqQptiN0QT7ft8ZlOT7pyyN
wQMeO7Kd1rVgy8SHTm5qFV6X66nosk05qtlfl1CHZnkDz/4rtrcJB01++WNNVtxw
tCurOSTw0PzjK0m6i6nCnBCgets139+2OX/ieg5V8i3z0MbYRPRKg0aWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe/8cumfuNucrZk0VUL6gLbsD+zMB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkPnNhKx
bexhTgobjnBJ8ah1TeTI36o+FblEiWaqPt7s7EOHe6AxYMOBfv2NKDAl2NCdrApl
mwJ0JIveX1FUffuVdvw1n6xqDpv6wigz2Rnq36zeDEAdAYMEb16IQiCqYaArKRKB
9BNTrkV8s6aq8PlZfQNUSHpu8Dm0AUN+nxzTqpesKjTRuxA8erbgn2i/XxynooKy
VsqGpSzEDUmxvd+61zuBfKhvtd/MNMy/a3AGxnBBR6S0+JpvB7bND055rBYghi1v
EtkbkCzlsW4IRm5riAwOC9wvx0TuHJFQH5LBXi0H/FehrCfojE+sWJhrx+tq6M6R
w+LAF3G4szztog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:56 2026 by rpki-client