Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: a4iDCsROjTy3igyR6EkyfrYYz/c/iwBdnJ2T+zrDk5s=
Subject key identifier: 02:1E:C0:D3:D1:92:55:93:AB:30:4A:06:C6:09:9D:64:2B:FF:12:38
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019D2816CAB0B4172FDA77F7D02C33843DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 16CE
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: mQyKtAAimk43SmENVtahjB/Mxxk4rR66iH0sJ9PvNgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:b0:b4:17:2f:da:77:f7:d0:2c:33:84:3d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=021ec0d3d1925593ab304a06c6099d642bff1238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:4e:3a:d9:49:be:67:95:90:ba:f5:ea:54:
33:6e:41:3d:62:96:55:6f:e0:8c:62:c3:3f:1c:93:
cc:e6:f3:80:66:3a:15:cf:32:17:fa:e9:f8:aa:9e:
65:6d:e0:59:ac:af:b7:01:8b:74:f9:f3:8f:f5:4c:
87:9f:8c:df:0d:a7:bf:6b:dc:52:62:ac:91:29:01:
34:a9:98:75:12:47:06:6f:63:05:6e:0a:ee:06:9e:
5a:87:26:ee:74:b0:53:ba:d4:ad:0c:fd:5d:e3:46:
4e:04:bb:dd:a4:8f:e7:1c:9b:d9:bf:44:7b:bb:10:
e7:69:4e:85:21:d7:cd:e1:6c:1f:31:fe:71:ec:12:
18:00:83:72:8a:f9:e3:19:38:3c:b2:6a:7d:f5:18:
0b:31:6c:4a:82:7d:b9:c6:a1:c7:cd:99:2c:20:9e:
f2:b9:a5:c8:3b:37:20:86:c9:76:22:84:f5:28:9b:
a0:87:01:45:63:4f:9f:2f:59:a3:6c:87:74:7f:a6:
38:31:a7:10:b1:db:ca:cc:76:8c:9d:5b:55:68:ce:
5e:d5:a2:f4:08:b9:22:27:90:37:40:52:9c:b2:75:
50:26:cf:25:2f:05:22:7f:40:11:40:21:55:6d:a0:
21:d8:65:33:fc:d4:a7:66:da:4c:bb:69:84:be:74:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:C0:D3:D1:92:55:93:AB:30:4A:06:C6:09:9D:64:2B:FF:12:38
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:a0:dc:2f:b3:fe:3d:16:81:1b:86:4a:5e:22:86:ba:b6:
b1:4c:06:44:e8:6c:92:42:91:61:ed:7c:68:cb:0a:1a:f0:de:
74:d9:dd:6d:d2:bb:f6:3d:19:63:85:d0:19:a9:1d:0e:63:a6:
f6:21:f2:07:5d:12:7a:84:ec:f2:ac:a8:ec:f9:4d:dd:71:44:
ca:05:a1:30:f7:eb:ac:aa:e1:1b:d3:0a:aa:4b:52:43:4b:f9:
b9:7d:c4:6c:4c:f3:b5:c2:24:93:03:de:ee:11:b1:8c:50:19:
76:6b:01:94:13:84:90:e8:41:42:19:7b:97:e7:c3:9b:e7:f5:
97:2f:5b:90:24:b0:84:a0:27:b6:d4:f8:4a:54:66:8d:6f:de:
c4:bb:1e:89:99:aa:e7:6b:70:5a:9b:df:d6:91:93:64:2c:5f:
43:92:6a:35:25:84:90:ab:8a:39:62:e0:02:67:ea:d2:47:fa:
7f:54:41:3f:e1:21:fa:20:41:69:ac:b6:48:30:13:1f:8b:21:
58:ad:12:a3:24:1d:d7:ee:cc:2d:d8:41:bf:f1:4a:c2:d1:da:
8f:12:c1:30:3d:04:8c:2d:ad:a9:94:82:7e:fb:2e:d2:ce:ac:
30:50:1b:d8:4a:2e:4b:07:74:b6:58:d7:25:34:e7:8c:ba:22:
61:94:c0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsqwtBcv2nf30CwzhD2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2
Y2UyNjQwHhcNMjYwMzI2MDMwMTE1WhcNMjYwMzI3MDMwMTE1WjAzMTEwLwYDVQQD
EygwMjFlYzBkM2QxOTI1NTkzYWIzMDRhMDZjNjA5OWQ2NDJiZmYxMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuJOOtlJvmeVkLr16lQzbkE9YpZV
b+CMYsM/HJPM5vOAZjoVzzIX+un4qp5lbeBZrK+3AYt0+fOP9UyHn4zfDae/a9xS
YqyRKQE0qZh1EkcGb2MFbgruBp5ahybudLBTutStDP1d40ZOBLvdpI/nHJvZv0R7
uxDnaU6FIdfN4WwfMf5x7BIYAINyivnjGTg8smp99RgLMWxKgn25xqHHzZksIJ7y
uaXIOzcghsl2IoT1KJughwFFY0+fL1mjbId0f6Y4MacQsdvKzHaMnVtVaM5e1aL0
CLkiJ5A3QFKcsnVQJs8lLwUif0ARQCFVbaAh2GUz/NSnZtpMu2mEvnQdnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIewNPRklWTqzBKBsYJnWQr/xI4MB8GA1UdIwQY
MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt
NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2
LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEveg3C+z
/j0WgRuGSl4ihrq2sUwGROhskkKRYe18aMsKGvDedNndbdK79j0ZY4XQGakdDmOm
9iHyB10SeoTs8qyo7PlN3XFEygWhMPfrrKrhG9MKqktSQ0v5uX3EbEzztcIkkwPe
7hGxjFAZdmsBlBOEkOhBQhl7l+fDm+f1ly9bkCSwhKAnttT4SlRmjW/exLseiZmq
52twWpvf1pGTZCxfQ5JqNSWEkKuKOWLgAmfq0kf6f1RBP+Eh+iBBaay2SDATH4sh
WK0SoyQd1+7MLdhBv/FKwtHajxLBMD0EjC2tqZSCfvsu0s6sMFAb2EouSwd0tljX
JTTnjLoiYZTAIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:47 2026 by rpki-client