Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: XIkgkbD/yyb/0loM6F/TKX95R5ATgRMI8R35xuddRpg=
Subject key identifier: A2:38:DF:46:2C:E5:80:BF:2F:46:FA:EC:6F:2F:1A:78:08:11:4F:61
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019D29CE687616877585B392C41CE2BB90CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:26 +0000
Manifest this update: Thu 26 Mar 2026 11:01:26 +0000
Manifest next update: Fri 27 Mar 2026 11:01:26 +0000
Files and hashes: 1: VpTcnmIdu1or70NVdb7KksBG0mY.roa (hash: X4YGR6I4Wi0PqQvq++rW4nssY1qKMiMmata2S9zHF98=)
2: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: SzLNtaJgOAKg9G3RWo82t1nDaJ7w1+kIDEHLrOw9i0k=)
3: cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa (hash: SUSOfIvJ0FegXPx9bBr1JRLYC/VJEW0GnploXLv94LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:68:76:16:87:75:85:b3:92:c4:1c:e2:bb:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Mar 26 11:01:26 2026 GMT
Not After : Mar 27 11:01:26 2026 GMT
Subject: CN=a238df462ce580bf2f46faec6f2f1a7808114f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:8a:a7:3b:65:37:06:d6:9e:bf:60:c1:4c:
49:f2:40:32:8b:a3:5d:4f:92:01:8b:ce:f1:bd:a0:
43:71:9e:d9:44:c3:17:50:20:cc:d8:eb:76:93:32:
44:52:f3:22:ce:4d:75:a8:fb:97:b2:b3:92:4a:da:
3c:52:25:19:7b:23:d6:12:aa:87:36:30:c6:65:14:
68:c6:eb:32:df:e8:07:7d:c9:34:bd:e2:5b:c0:88:
94:7c:59:d6:ad:2a:ef:ef:b0:31:aa:4a:fb:bf:c3:
ea:60:42:6b:fc:93:76:d1:9f:6d:54:d9:37:81:1b:
e5:89:37:71:d3:f3:61:09:83:1f:9e:95:a6:50:82:
a2:7f:af:d4:59:21:8e:d6:70:3f:57:0a:8e:ed:5f:
42:b2:85:fe:51:b7:c9:59:77:d5:71:79:58:bb:ae:
a5:09:68:af:57:97:37:f6:1e:f4:11:57:1e:1a:53:
89:fb:3d:54:c5:72:f0:3e:b7:88:b9:1b:29:5a:9f:
2d:0f:ba:33:70:54:4a:8b:d5:ac:49:0d:60:6a:f9:
f6:1b:47:49:2f:37:90:04:88:d3:40:67:16:0d:a5:
c7:cf:17:6f:46:6a:79:79:8f:e9:fc:2d:bf:7f:d8:
74:cb:bd:87:cd:ac:41:74:b3:ec:4b:ab:1a:b3:6f:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:DF:46:2C:E5:80:BF:2F:46:FA:EC:6F:2F:1A:78:08:11:4F:61
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:92:e1:13:cb:4a:b8:c2:e7:27:cd:99:e0:b2:db:69:4b:
8d:83:3a:f9:39:4a:ab:c2:4b:a4:da:2b:66:5a:ca:82:67:19:
dc:fd:a1:54:09:2b:1d:7b:e6:54:ef:e8:cc:41:df:e5:91:ac:
ef:d8:a7:16:87:64:4f:c2:c9:f3:60:13:18:3b:bb:02:23:a4:
a2:e0:a2:48:bd:9a:cc:4e:73:45:d2:67:ab:f9:86:97:bf:e2:
c7:9f:51:79:e7:7a:8a:82:f8:03:d7:38:02:37:4f:ef:a6:19:
c4:77:fc:a5:43:d5:c7:2b:bf:cf:34:91:cd:bb:85:1d:4a:44:
82:b6:26:0e:d7:f2:e0:2d:ca:3d:f5:7d:18:d7:2b:3e:76:e1:
af:2b:28:a3:79:da:ef:d2:ae:aa:2d:98:71:c8:b6:53:54:b3:
01:b3:ed:ba:31:65:be:0f:65:24:de:f3:f2:68:3b:26:2a:54:
e9:97:f6:16:fc:ba:6a:6a:f4:d9:d8:8e:04:ce:16:90:17:3d:
56:dd:00:7f:30:21:9f:2f:22:07:63:5e:c7:97:7e:33:eb:87:
84:0b:fa:f7:45:56:dd:f7:2c:44:2a:ad:6f:a7:1a:1d:d8:90:
72:77:e2:16:84:ed:99:76:ba:36:83:08:f0:7e:2f:7e:2a:54:
85:5b:9c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzmh2Fod1hbOSxBziu5DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy
NjRkYzAwHhcNMjYwMzI2MTEwMTI2WhcNMjYwMzI3MTEwMTI2WjAzMTEwLwYDVQQD
EyhhMjM4ZGY0NjJjZTU4MGJmMmY0NmZhZWM2ZjJmMWE3ODA4MTE0ZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7qKpztlNwbWnr9gwUxJ8kAyi6Nd
T5IBi87xvaBDcZ7ZRMMXUCDM2Ot2kzJEUvMizk11qPuXsrOSSto8UiUZeyPWEqqH
NjDGZRRoxusy3+gHfck0veJbwIiUfFnWrSrv77Axqkr7v8PqYEJr/JN20Z9tVNk3
gRvliTdx0/NhCYMfnpWmUIKif6/UWSGO1nA/VwqO7V9CsoX+UbfJWXfVcXlYu66l
CWivV5c39h70EVceGlOJ+z1UxXLwPreIuRspWp8tD7ozcFRKi9WsSQ1gavn2G0dJ
LzeQBIjTQGcWDaXHzxdvRmp5eY/p/C2/f9h0y72HzaxBdLPsS6sas2/RawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI430Ys5YC/L0b67G8vGngIEU9hMB8GA1UdIwQY
MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt
ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk
LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFWS4RPL
SrjC5yfNmeCy22lLjYM6+TlKq8JLpNorZlrKgmcZ3P2hVAkrHXvmVO/ozEHf5ZGs
79inFodkT8LJ82ATGDu7AiOkouCiSL2azE5zRdJnq/mGl7/ix59Reed6ioL4A9c4
AjdP76YZxHf8pUPVxyu/zzSRzbuFHUpEgrYmDtfy4C3KPfV9GNcrPnbhrysoo3na
79Kuqi2Ycci2U1SzAbPtujFlvg9lJN7z8mg7JipU6Zf2Fvy6amr02diOBM4WkBc9
Vt0AfzAhny8iB2Nex5d+M+uHhAv690VW3fcsRCqtb6caHdiQcnfiFoTtmXa6NoMI
8H4vfipUhVucFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:19 2026 by rpki-client