Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: Ng8VIaaNHROXcvUWedzX5BxdfrhmL8Cq8YZnbuncO7E=
Subject key identifier: 1D:24:9B:18:34:A4:24:B5:71:BF:41:AA:6F:B5:F2:B5:AB:C5:B1:72
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019D2771F940904D131180108C7FB39C7F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: 1I5pS-KyF91INpSvz4UTgvSLQM0.roa (hash: kUre6FGJxo0oVZmAH7QT5SEnqBChJ7h9HJs3PKswLaY=)
2: E2f-QrvVPeeVaSg1kFFd2ljgv_U.roa (hash: z/R9QyEuD/1u1pxIWlMmu6tFOTJDdDVTMoz5pzQhZoo=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: P3PMjX+eTj8xHvQSAbrLyfMhWG9jFQAhECHNd609WT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f9:40:90:4d:13:11:80:10:8c:7f:b3:9c:7f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=1d249b1834a424b571bf41aa6fb5f2b5abc5b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:eb:d9:5a:10:08:a1:41:a1:33:9e:ed:e1:
c0:59:0c:b5:db:aa:db:8f:75:09:bd:4b:79:0a:88:
82:35:d2:e7:8a:2b:93:28:eb:8c:42:8d:bf:cb:79:
5c:42:13:1e:b6:bb:4f:77:b8:43:d2:00:09:43:20:
96:24:88:a6:9a:30:2f:58:6e:0d:f9:63:ce:93:35:
3e:a2:2d:fb:f9:50:a2:35:ff:99:18:80:78:5a:ba:
1c:9e:c2:2c:a6:e9:c6:2d:86:b0:08:be:94:61:eb:
23:47:df:0d:56:50:53:a6:cb:43:72:7d:8d:c4:90:
6e:65:1c:1b:e5:93:33:03:8c:67:72:f2:0d:f6:46:
90:8c:9f:3a:03:11:6e:49:c0:e6:fe:b7:ad:ea:dd:
22:9a:98:15:e4:f0:33:40:e0:d3:0d:9d:ec:14:e1:
72:48:e9:97:6c:ab:96:c0:c9:84:9e:48:95:1d:69:
fb:5b:93:6e:bb:fc:1b:d9:ba:af:0d:16:bc:e2:62:
13:7c:31:e9:5d:05:dd:d0:6b:3b:e9:29:31:9e:bd:
69:f7:b4:78:87:14:c7:e9:eb:d1:47:e1:a0:6f:95:
6f:b2:33:06:df:1e:4e:80:7d:36:5b:49:2c:fc:cb:
28:b4:6b:7c:d6:8c:12:a9:3a:81:55:76:ba:f7:c3:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:9B:18:34:A4:24:B5:71:BF:41:AA:6F:B5:F2:B5:AB:C5:B1:72
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:35:99:dc:14:e5:f2:d9:43:26:61:68:2f:5f:29:c2:ea:85:
ad:bd:8c:99:3b:3f:79:da:3d:32:d1:1e:c5:e6:b6:b3:78:1e:
00:1e:a9:85:3b:49:d2:60:44:ad:9b:2d:e5:4f:00:6e:f4:96:
27:db:2c:ba:10:a4:77:6a:b4:ad:74:be:2c:9a:cc:98:fc:35:
fc:ef:42:79:dc:cc:f7:69:aa:ef:96:6e:62:ed:3e:d5:00:75:
36:b1:9a:6a:2e:57:f3:96:59:93:f9:92:ed:c9:cd:2e:17:db:
d5:02:67:6c:44:d1:ff:e2:9c:fc:22:d9:94:7b:66:66:f2:01:
79:4d:b8:c7:1b:c7:5e:9f:49:81:cc:83:07:39:5b:f7:6c:a9:
ac:b3:dd:b0:5e:53:44:c5:7e:fe:1a:02:59:81:48:57:20:b3:
b4:f5:8d:51:dc:94:e5:af:9f:b5:d1:fa:21:a4:3d:e8:37:ba:
f0:01:ad:d3:67:6b:52:e8:4a:14:16:b4:39:8e:f2:17:19:24:
a1:f3:95:a8:bf:7e:55:ba:c3:2a:37:3f:04:a9:ce:6c:30:c8:
81:c7:11:12:91:d5:4b:d8:a0:06:b1:3d:9d:20:5e:b3:8f:52:
f8:48:f0:5b:f5:3d:76:64:be:be:dc:a6:c5:f5:58:03:2a:56:
92:41:ae:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncflAkE0TEYAQjH+znH9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4
YTIxYTkwHhcNMjYwMzI2MDAwMTEzWhcNMjYwMzI3MDAwMTEzWjAzMTEwLwYDVQQD
EygxZDI0OWIxODM0YTQyNGI1NzFiZjQxYWE2ZmI1ZjJiNWFiYzViMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCHr2VoQCKFBoTOe7eHAWQy126rb
j3UJvUt5CoiCNdLniiuTKOuMQo2/y3lcQhMetrtPd7hD0gAJQyCWJIimmjAvWG4N
+WPOkzU+oi37+VCiNf+ZGIB4WrocnsIspunGLYawCL6UYesjR98NVlBTpstDcn2N
xJBuZRwb5ZMzA4xncvIN9kaQjJ86AxFuScDm/ret6t0impgV5PAzQODTDZ3sFOFy
SOmXbKuWwMmEnkiVHWn7W5Nuu/wb2bqvDRa84mITfDHpXQXd0Gs76Skxnr1p97R4
hxTH6evRR+Ggb5VvsjMG3x5OgH02W0ks/MsotGt81owSqTqBVXa698MtiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0kmxg0pCS1cb9Bqm+18rWrxbFyMB8GA1UdIwQY
MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt
ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1
LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDWZ3BTl
8tlDJmFoL18pwuqFrb2MmTs/edo9MtEexea2s3geAB6phTtJ0mBErZst5U8AbvSW
J9ssuhCkd2q0rXS+LJrMmPw1/O9CedzM92mq75ZuYu0+1QB1NrGaai5X85ZZk/mS
7cnNLhfb1QJnbETR/+Kc/CLZlHtmZvIBeU24xxvHXp9JgcyDBzlb92yprLPdsF5T
RMV+/hoCWYFIVyCztPWNUdyU5a+ftdH6IaQ96De68AGt02drUuhKFBa0OY7yFxkk
ofOVqL9+VbrDKjc/BKnObDDIgccREpHVS9igBrE9nSBes49S+EjwW/U9dmS+vtym
xfVYAypWkkGuWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:01 2026 by rpki-client