Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: hwY9vzTceG/a2h7WDYW92F3lTCJt+lESbJTQYz9QqOs=
Subject key identifier: 1F:F0:37:7E:FF:38:2B:BE:BE:2A:92:21:FE:60:C6:DC:73:99:7B:59
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 019D28BB109C0880EB2BED4C2F6C0D848F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 1807
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: Q1i1i1A5Ui6K8xWYOMC8b2cLIys.roa (hash: K5UU540aeacTeWENSm+dTa5dIuRJreM1pon8ZgCMcE8=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: V9bbG0+VnGGu2MjArL2rMWciAGtF4DXAj3tWkELNbrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:10:9c:08:80:eb:2b:ed:4c:2f:6c:0d:84:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=1ff0377eff382bbebe2a9221fe60c6dc73997b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:d7:f7:05:0f:67:7f:44:b4:db:96:b8:0a:
01:9c:98:6d:87:7c:7e:43:87:e6:7c:b8:0a:a5:00:
12:c5:8b:2d:3c:b2:88:df:72:d7:8f:0a:73:1b:19:
fe:6e:f4:6e:66:0b:00:1e:14:ee:c8:c4:fc:81:30:
da:dc:1c:04:29:33:a8:2e:6f:2b:8f:2d:87:0f:ff:
32:a6:fe:8a:e6:10:b2:51:49:af:24:3c:fd:56:db:
6a:ca:66:70:66:7f:3e:92:3b:d7:25:7d:9e:eb:12:
c2:bd:47:ca:86:1d:3d:46:af:18:c9:e1:d6:86:c1:
14:66:2a:7f:3f:e1:74:c4:04:ab:ec:39:d6:34:a1:
6b:8d:0c:72:65:48:e6:4c:70:34:c6:19:c3:d1:2d:
4a:71:f0:ea:88:78:46:bc:39:a8:ad:63:c6:00:88:
d4:15:cc:47:4d:70:27:19:50:96:08:ec:bf:b1:62:
bc:12:dc:36:4b:57:53:06:5e:e4:4f:3c:c1:60:2b:
fe:67:2f:bd:d5:76:88:90:79:51:fe:5e:cf:8e:70:
96:f0:7c:4e:9b:26:8d:f1:4e:1d:80:bf:c8:59:ab:
c6:be:ec:11:ee:e8:a1:c6:2c:05:e5:94:ee:9e:86:
ff:e7:30:9e:2c:1d:2f:6b:dd:79:3f:e1:f3:55:d3:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:37:7E:FF:38:2B:BE:BE:2A:92:21:FE:60:C6:DC:73:99:7B:59
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:2a:76:13:cf:09:cc:7b:69:fd:d0:90:5f:39:16:fb:94:
23:b8:3e:ab:67:14:01:73:fa:98:0c:c8:56:b3:79:07:b4:cd:
22:73:e1:bb:04:91:87:79:c5:8a:9b:d5:c0:0a:a9:12:0f:34:
4b:34:01:ba:33:4c:f5:b0:f4:92:77:76:2b:45:0e:ce:40:31:
ef:f2:df:70:6a:71:78:9f:d6:4e:5e:8a:2c:89:41:cf:53:a0:
20:83:7d:9d:a7:5c:b2:78:54:4f:01:c6:fb:da:d9:81:4f:ab:
ba:d0:25:75:6f:33:ae:f9:7c:50:6e:a9:ab:82:5e:86:a0:d2:
cc:13:07:5d:24:46:7e:2b:65:08:25:81:fc:01:b6:20:55:93:
d3:bd:8e:ac:a4:42:a4:de:ba:23:d9:3f:f1:6c:35:2e:9d:20:
01:4c:94:46:8a:19:33:3f:cd:0f:4f:20:dc:2b:af:5d:ea:79:
c9:71:16:bc:c2:03:93:bf:3f:12:57:4c:d3:7e:a1:13:e7:2c:
4e:9a:30:2f:44:40:cd:57:bf:88:87:3a:66:a5:9e:54:96:b0:
84:f8:fa:be:b6:dd:b8:15:5e:ff:f6:4b:5f:1e:b5:af:49:6d:
9c:8b:15:65:10:34:93:c8:bf:7c:5f:e9:38:3f:17:0d:fc:b5:
17:4d:40:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxCcCIDrK+1ML2wNhI8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjI0ZWEzODU3MmVhMGRhMDJmNDljZjRkNjdhM2NiYjdj
NmUxNDAwHhcNMjYwMzI2MDYwMDQxWhcNMjYwMzI3MDYwMDQxWjAzMTEwLwYDVQQD
EygxZmYwMzc3ZWZmMzgyYmJlYmUyYTkyMjFmZTYwYzZkYzczOTk3YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybjX9wUPZ39EtNuWuAoBnJhth3x+
Q4fmfLgKpQASxYstPLKI33LXjwpzGxn+bvRuZgsAHhTuyMT8gTDa3BwEKTOoLm8r
jy2HD/8ypv6K5hCyUUmvJDz9VttqymZwZn8+kjvXJX2e6xLCvUfKhh09Rq8YyeHW
hsEUZip/P+F0xASr7DnWNKFrjQxyZUjmTHA0xhnD0S1KcfDqiHhGvDmorWPGAIjU
FcxHTXAnGVCWCOy/sWK8Etw2S1dTBl7kTzzBYCv+Zy+91XaIkHlR/l7PjnCW8HxO
myaN8U4dgL/IWavGvuwR7uihxiwF5ZTunob/5zCeLB0va915P+HzVdNLxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/wN37/OCu+viqSIf5gxtxzmXtZMB8GA1UdIwQY
MBaAFMsiTqOFcuoNoC9Jz01no8u3xuFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2Et
MWZkMjliMTA4YTIxLzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNTAzZWUtNWI4Mi00MjMxLWI1N2EtMWZkMjliMTA4YTIx
LzEveXlKT280Vnk2ZzJnTDBuUFRXZWp5N2ZHNFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoIqdhPP
Ccx7af3QkF85FvuUI7g+q2cUAXP6mAzIVrN5B7TNInPhuwSRh3nFipvVwAqpEg80
SzQBujNM9bD0knd2K0UOzkAx7/LfcGpxeJ/WTl6KLIlBz1OgIIN9nadcsnhUTwHG
+9rZgU+rutAldW8zrvl8UG6pq4JehqDSzBMHXSRGfitlCCWB/AG2IFWT072OrKRC
pN66I9k/8Ww1Lp0gAUyURooZMz/ND08g3CuvXep5yXEWvMIDk78/EldM036hE+cs
TpowL0RAzVe/iIc6ZqWeVJawhPj6vrbduBVe//ZLXx61r0ltnIsVZRA0k8i/fF/p
OD8XDfy1F01AHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:33 2026 by rpki-client