Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: pDeHXGHY9Gp9m4xBPBzX4VwORl3G44lVrvEFBF/dcOU=
Subject key identifier: 9A:43:4E:6A:0D:2E:91:83:51:4D:49:21:23:BB:66:77:65:A6:51:7C
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 019D27E0196F49651102F7B2A6766FC355BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0C74
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: QaQXyt1JUOdGAiMPwz_506zawSw.roa (hash: E1jcvO//eEWdMES9KtTK7xOBQZ3PG7iMEerQv3LjsUk=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: d/WSx2kEu7HPJnhLmMI44flf/PFF+vdbZM+1TaizYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:19:6f:49:65:11:02:f7:b2:a6:76:6f:c3:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=9a434e6a0d2e9183514d492123bb667765a6517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:3b:fe:dd:05:fd:85:b9:48:76:54:7e:32:
49:eb:ab:d2:71:99:53:60:96:90:b6:ea:e5:6d:b3:
af:12:e8:6e:ff:ae:7d:0c:61:93:9f:87:89:4f:4e:
b5:4e:16:b0:ee:63:19:93:0f:2b:6e:fc:86:44:73:
70:bf:0f:18:70:13:50:cc:d8:c9:56:5c:89:b7:b4:
1d:8d:be:43:75:81:ef:9e:c5:f0:16:d3:b3:04:ea:
fb:69:88:48:1c:83:f0:a3:7b:d0:ac:0e:67:ea:a4:
8a:15:07:7f:95:8d:c5:0d:39:dc:3f:33:51:a9:ff:
bc:3e:07:76:b8:b7:95:70:a2:0f:8e:d4:33:54:62:
d2:85:5b:ef:a1:0a:43:80:49:e5:5f:3d:2f:aa:0d:
50:25:9b:37:c5:82:7a:9e:58:76:9c:b7:40:8f:31:
42:67:42:0c:f7:43:12:ac:f2:21:3e:d7:4d:66:aa:
26:1c:67:2c:c3:f9:1e:f9:fc:67:91:02:cb:07:ed:
24:45:34:9d:75:1d:a6:8a:bd:79:43:bb:9d:58:9b:
71:43:6f:80:4a:7c:9c:d4:e4:56:98:c6:61:89:eb:
3c:ba:88:37:02:39:2e:10:f5:29:b8:b5:b1:48:0f:
47:b4:26:a4:70:1c:7f:05:7c:cc:99:a5:b5:c3:05:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:4E:6A:0D:2E:91:83:51:4D:49:21:23:BB:66:77:65:A6:51:7C
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:dd:66:bf:ae:87:d7:c3:37:a0:df:42:e9:1b:08:5e:96:
5e:25:8c:bf:02:10:f8:17:0d:0b:9d:b8:92:2c:cd:b3:f3:30:
60:d9:ce:29:12:62:f9:99:e3:d7:c3:ff:76:28:d2:54:4b:bc:
d1:dc:02:86:e6:14:52:77:53:db:9c:50:85:a0:14:03:66:bc:
7d:65:4a:21:35:cd:25:ca:a9:d6:26:84:f8:e1:93:be:cb:e8:
3d:08:90:1e:f4:50:9c:81:a0:bd:f8:43:a8:14:fd:88:04:c2:
b7:7b:2a:e5:0e:f2:ae:23:a2:53:6e:44:5a:4e:61:30:58:4c:
e9:5d:81:4c:6c:03:8e:30:20:9c:09:59:5d:1f:dd:66:e0:56:
71:78:35:37:08:d3:dd:71:12:d2:a7:8b:cc:a2:16:a6:9a:50:
0f:49:55:ed:dd:93:40:94:f0:66:90:95:00:4b:b3:5b:cd:d1:
0b:ba:64:33:50:22:15:31:25:3d:62:cd:c5:ba:78:25:a7:7a:
58:09:88:b9:a3:a4:86:ea:cf:1d:1a:84:fb:ec:05:e1:aa:7f:
fd:e2:6e:68:5e:45:4c:a2:88:50:01:8e:fd:7e:62:2f:41:b5:
9e:31:35:81:d2:e3:94:a7:b8:ff:f5:78:e9:0c:c0:f2:c7:db:
cd:7e:fe:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BlvSWURAveypnZvw1W+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4
NmY3ODEwHhcNMjYwMzI2MDIwMTMxWhcNMjYwMzI3MDIwMTMxWjAzMTEwLwYDVQQD
Eyg5YTQzNGU2YTBkMmU5MTgzNTE0ZDQ5MjEyM2JiNjY3NzY1YTY1MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/47/t0F/YW5SHZUfjJJ66vScZlT
YJaQturlbbOvEuhu/659DGGTn4eJT061Thaw7mMZkw8rbvyGRHNwvw8YcBNQzNjJ
VlyJt7Qdjb5DdYHvnsXwFtOzBOr7aYhIHIPwo3vQrA5n6qSKFQd/lY3FDTncPzNR
qf+8Pgd2uLeVcKIPjtQzVGLShVvvoQpDgEnlXz0vqg1QJZs3xYJ6nlh2nLdAjzFC
Z0IM90MSrPIhPtdNZqomHGcsw/ke+fxnkQLLB+0kRTSddR2mir15Q7udWJtxQ2+A
Snyc1ORWmMZhies8uog3AjkuEPUpuLWxSA9HtCakcBx/BXzMmaW1wwUA9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpDTmoNLpGDUU1JISO7ZndlplF8MB8GA1UdIwQY
MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt
NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy
LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe73dZr+u
h9fDN6DfQukbCF6WXiWMvwIQ+BcNC524kizNs/MwYNnOKRJi+Znj18P/dijSVEu8
0dwChuYUUndT25xQhaAUA2a8fWVKITXNJcqp1iaE+OGTvsvoPQiQHvRQnIGgvfhD
qBT9iATCt3sq5Q7yriOiU25EWk5hMFhM6V2BTGwDjjAgnAlZXR/dZuBWcXg1NwjT
3XES0qeLzKIWpppQD0lV7d2TQJTwZpCVAEuzW83RC7pkM1AiFTElPWLNxbp4Jad6
WAmIuaOkhurPHRqE++wF4ap//eJuaF5FTKKIUAGO/X5iL0G1njE1gdLjlKe4//V4
6QzA8sfbzX7+LA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:34 2026 by rpki-client