Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: QtrvorulTtfaTVKeO1A37uU8X3DiVoZAMp5dL9DkqtQ=
Subject key identifier: 4C:07:D8:4A:AF:6F:5A:79:1A:F5:6D:17:9B:4B:30:EE:FE:4E:88:FB
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 019D26CCE6EA622C292B5FBD5463087611FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 06DA
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: 97B8Hc4bCQZgRuJkPCMl4qPb1Ok.roa (hash: xJ7Id6kjvXsULsQ/zceu4XIQnNvHcYudEa21JYWOH88=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: pRNgj2m/5vHViM1nTzE+y5bH/JpS/KjLjUcJmxAsY4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e6:ea:62:2c:29:2b:5f:bd:54:63:08:76:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=4c07d84aaf6f5a791af56d179b4b30eefe4e88fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:4b:fb:44:94:21:c9:7e:bc:1b:15:ac:29:
16:f0:d4:de:0e:1f:42:07:49:0b:d2:cd:9f:92:f6:
81:5e:fb:94:24:9e:57:77:49:25:0e:d3:1e:a3:25:
e2:50:ed:01:68:fc:b1:b9:73:9e:f0:84:28:ef:0d:
28:dd:39:90:da:22:a3:94:82:d1:16:9c:4c:57:47:
95:d0:fa:55:30:98:46:5c:f7:b3:08:9a:7e:73:f7:
1d:97:62:56:bf:0a:e1:03:52:78:3c:c7:ed:d3:2c:
85:a9:98:35:88:20:c0:1c:a0:25:0a:d6:ff:4f:ff:
92:f5:ec:14:6a:9e:73:d1:b3:62:b2:67:fd:30:31:
6a:6b:37:e0:a6:73:0d:56:cd:d1:6a:96:b2:b2:08:
7d:42:5c:be:ca:01:0c:5c:27:69:7b:26:ab:ee:dd:
ce:12:06:5d:a5:c1:fc:09:22:5b:80:93:b2:70:33:
6f:2c:c9:bc:49:ad:ee:74:f2:31:ea:69:70:99:96:
66:20:e9:6e:7e:c6:2c:f5:c6:4e:57:ab:fd:87:51:
07:06:a5:e5:fc:12:34:02:a9:b2:5f:ca:e5:46:e9:
de:d8:3c:01:70:7e:0d:0c:e4:4a:10:b7:6f:ee:72:
80:38:d5:d3:d8:7b:8d:de:41:ac:b1:b7:2a:c7:df:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:07:D8:4A:AF:6F:5A:79:1A:F5:6D:17:9B:4B:30:EE:FE:4E:88:FB
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:51:64:46:fc:3a:05:49:eb:c7:ab:2a:2e:c2:bc:00:60:
92:d4:e4:d4:8c:71:36:cd:2a:61:b8:90:81:dd:97:04:f0:19:
58:4b:fb:33:bf:c5:2b:07:5d:64:b6:7b:12:5e:90:ab:30:e6:
6f:2a:df:be:c7:92:ee:df:3a:dd:d4:89:f9:47:e7:db:d2:14:
ba:8b:07:c1:1e:42:76:bb:df:62:c0:94:5f:1a:6e:12:20:92:
a4:18:ef:b2:96:f4:c0:3c:f2:df:98:0b:36:f4:73:a4:c4:76:
7c:2b:c8:e0:a0:2b:f0:74:97:d8:52:3d:16:29:21:bb:9d:52:
57:38:07:ab:51:75:3e:b5:a0:94:eb:31:c5:5a:c6:f9:89:75:
72:75:5f:68:aa:11:8c:01:93:ff:c2:56:95:26:02:50:18:70:
87:86:da:d5:0f:e7:08:f9:86:ea:ee:df:b5:1b:47:21:54:eb:
54:6c:b2:6a:95:ef:ab:9e:46:7d:65:c4:8d:6c:82:40:93:31:
4a:cf:bb:7e:bd:4c:2f:09:4f:05:35:8f:90:32:61:68:ff:06:
f3:0a:15:ee:6f:87:0a:0a:ec:ac:06:37:9d:9c:94:bd:36:bd:
6c:92:25:65:70:96:e4:16:2d:c6:1b:1e:8d:1b:ef:00:67:73:
3b:18:7d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzObqYiwpK1+9VGMIdhH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5
OTYzNzkwHhcNMjYwMzI1MjEwMDU1WhcNMjYwMzI2MjEwMDU1WjAzMTEwLwYDVQQD
Eyg0YzA3ZDg0YWFmNmY1YTc5MWFmNTZkMTc5YjRiMzBlZWZlNGU4OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJRL+0SUIcl+vBsVrCkW8NTeDh9C
B0kL0s2fkvaBXvuUJJ5Xd0klDtMeoyXiUO0BaPyxuXOe8IQo7w0o3TmQ2iKjlILR
FpxMV0eV0PpVMJhGXPezCJp+c/cdl2JWvwrhA1J4PMft0yyFqZg1iCDAHKAlCtb/
T/+S9ewUap5z0bNismf9MDFqazfgpnMNVs3Rapaysgh9Qly+ygEMXCdpeyar7t3O
EgZdpcH8CSJbgJOycDNvLMm8Sa3udPIx6mlwmZZmIOlufsYs9cZOV6v9h1EHBqXl
/BI0AqmyX8rlRune2DwBcH4NDORKELdv7nKAONXT2HuN3kGssbcqx98c+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwH2Eqvb1p5GvVtF5tLMO7+Toj7MB8GA1UdIwQY
MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt
MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2
LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEApRZEb8
OgVJ68erKi7CvABgktTk1IxxNs0qYbiQgd2XBPAZWEv7M7/FKwddZLZ7El6QqzDm
byrfvseS7t863dSJ+Ufn29IUuosHwR5CdrvfYsCUXxpuEiCSpBjvspb0wDzy35gL
NvRzpMR2fCvI4KAr8HSX2FI9Fikhu51SVzgHq1F1PrWglOsxxVrG+Yl1cnVfaKoR
jAGT/8JWlSYCUBhwh4ba1Q/nCPmG6u7ftRtHIVTrVGyyapXvq55GfWXEjWyCQJMx
Ss+7fr1MLwlPBTWPkDJhaP8G8woV7m+HCgrsrAY3nZyUvTa9bJIlZXCW5BYtxhse
jRvvAGdzOxh9Gg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:17 2026 by rpki-client