Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: nz/wB3J/65Q7ES8wOdIAgcPvf6tA9kVmxFWNTeYjroc=
Subject key identifier: 7A:CF:F0:E5:24:B7:40:F3:31:B5:AE:18:4E:B6:AF:D6:D1:94:49:62
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 019D265F623D6065D1C106B3D9621D35A93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0CB0
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: CitEHd6r_CsQSgbionGA1eBcMLU.roa (hash: 1rANra1AzVxMgl8VcJaThBHrC2EUS4bUsTwEZ+EKh0w=)
2: GcvVWNFfgF0wu0Nfjs_BudGQw9Y.roa (hash: KB0pqrvO6Erz4/rIYGhqqlfhiTfb86tI38IPNb7s0Ow=)
3: WubjxHCSaP4QHue8QiWJLn9wu24.roa (hash: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc=)
4: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (hash: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A=)
5: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (hash: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ=)
6: mYlVHFIkWhjce6SZlz3waAY66A8.roa (hash: 4EmaIQp2LaV/4WUzCFLlD6HjVOOnifTa9SWdZEfSqzY=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: SjAXXMoqFVBNnOlOlYu6PVzJVNmHcOVrwY4+v1WtuM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:62:3d:60:65:d1:c1:06:b3:d9:62:1d:35:a9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=7acff0e524b740f331b5ae184eb6afd6d1944962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:4d:ea:5f:c3:7a:b6:6f:54:e6:5d:55:03:
5a:cf:5d:65:a2:f6:64:37:35:75:c0:bc:ff:b0:f3:
d9:1b:c3:5a:46:dc:e9:4f:2f:d0:61:72:e4:40:b3:
6d:39:c2:38:48:3c:ee:d1:76:a7:c6:f5:d8:01:69:
7e:53:7f:39:84:7e:3a:9b:f8:54:80:df:7b:e1:ef:
d9:f9:b9:31:73:5f:39:94:9e:81:db:e7:6a:cc:86:
ac:37:6b:d9:2c:34:da:cd:de:7b:77:25:f5:ee:cc:
99:39:7a:98:a3:5b:cb:a3:25:33:0c:be:fd:ad:75:
96:33:10:49:09:e8:d6:94:f4:bf:1a:43:62:96:cd:
8e:d7:f7:e7:a6:2a:5d:c2:2e:c8:09:68:4f:57:77:
56:58:7d:16:aa:97:51:82:d5:89:55:90:88:d7:12:
2a:8b:a8:78:e0:24:85:70:f7:25:8b:1f:7a:50:c5:
ef:b0:37:fc:5a:73:d8:b0:16:a0:b7:82:02:f2:f9:
15:28:dc:cd:b4:51:62:3d:6c:4e:18:1d:4e:1a:86:
2e:19:f0:6e:24:e7:88:f7:4b:2f:b8:f5:1b:9f:9f:
8d:21:ac:3e:45:c2:a5:cc:fe:48:cf:80:96:a9:5c:
e7:ed:81:b9:47:6e:0f:28:e7:a6:a6:03:fb:f5:86:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:F0:E5:24:B7:40:F3:31:B5:AE:18:4E:B6:AF:D6:D1:94:49:62
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d4:79:bf:95:d7:03:32:39:5f:d6:77:28:d5:28:7f:f3:29:
3d:81:a6:1b:7f:71:c9:d2:45:a2:fc:1c:16:42:c1:a1:1e:4a:
ab:bf:ef:c6:40:81:9d:75:98:6a:b0:d6:d4:b4:62:df:54:b5:
b6:03:f0:4b:96:f4:4f:87:34:f0:4e:73:5c:7f:44:34:2b:1c:
aa:fd:34:50:36:bc:43:80:ec:c4:3d:18:e7:18:37:aa:4b:b9:
df:59:bf:92:77:56:2d:ca:99:64:f6:40:d1:63:93:67:cc:de:
30:82:00:bf:a9:67:c6:eb:e6:ff:a7:3d:03:a8:eb:d0:4b:1d:
78:ae:e2:9d:25:c0:df:29:84:c6:78:32:26:0c:ef:32:bf:d9:
b4:de:93:f8:e8:f0:27:34:e9:2f:d1:d6:46:e6:d9:d5:79:7d:
06:b5:40:54:42:a2:6d:01:43:85:03:55:3b:ae:46:5f:cd:ae:
2e:fc:92:9e:19:97:d0:4c:77:de:07:c4:d6:0f:58:67:63:4d:
ee:38:2b:bb:13:ad:3a:5e:93:3f:10:c5:c3:ff:fa:b9:91:6f:
54:3c:10:37:45:b2:b9:cf:af:76:5d:d4:9d:a8:fa:96:d4:84:
6b:fa:ee:be:fb:58:1a:26:bf:ea:4a:df:a5:e2:13:2a:9f:a0:
5f:df:61:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2I9YGXRwQaz2WIdNak9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk
MTdiYWMwHhcNMjYwMzI1MTkwMTE4WhcNMjYwMzI2MTkwMTE4WjAzMTEwLwYDVQQD
Eyg3YWNmZjBlNTI0Yjc0MGYzMzFiNWFlMTg0ZWI2YWZkNmQxOTQ0OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhN6l/DerZvVOZdVQNaz11lovZk
NzV1wLz/sPPZG8NaRtzpTy/QYXLkQLNtOcI4SDzu0XanxvXYAWl+U385hH46m/hU
gN974e/Z+bkxc185lJ6B2+dqzIasN2vZLDTazd57dyX17syZOXqYo1vLoyUzDL79
rXWWMxBJCejWlPS/GkNils2O1/fnpipdwi7ICWhPV3dWWH0WqpdRgtWJVZCI1xIq
i6h44CSFcPclix96UMXvsDf8WnPYsBagt4IC8vkVKNzNtFFiPWxOGB1OGoYuGfBu
JOeI90svuPUbn5+NIaw+RcKlzP5Iz4CWqVzn7YG5R24PKOempgP79Ya5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrP8OUkt0DzMbWuGE62r9bRlEliMB8GA1UdIwQY
MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadR5v5XX
AzI5X9Z3KNUof/MpPYGmG39xydJFovwcFkLBoR5Kq7/vxkCBnXWYarDW1LRi31S1
tgPwS5b0T4c08E5zXH9ENCscqv00UDa8Q4DsxD0Y5xg3qku531m/kndWLcqZZPZA
0WOTZ8zeMIIAv6lnxuvm/6c9A6jr0EsdeK7inSXA3ymExngyJgzvMr/ZtN6T+Ojw
JzTpL9HWRubZ1Xl9BrVAVEKibQFDhQNVO65GX82uLvySnhmX0Ex33gfE1g9YZ2NN
7jgruxOtOl6TPxDFw//6uZFvVDwQN0Wyuc+vdl3Unaj6ltSEa/ruvvtYGia/6krf
peITKp+gX99heg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:20 2026 by rpki-client