Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: VBUkSzbZ6DB1EKGwGHaP2nYNFf+cnaD5VhuDNcD9JHY=
Subject key identifier: E7:13:83:BA:24:CB:54:9B:91:BE:3E:67:E7:A0:46:09:EC:E5:7C:4B
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019D27047FA15C7774C0A890A91EBB215002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0BA3
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: AedgcNL8Ig_vUhjnBiaFjptK-_w.roa (hash: MX7QqsHI59rsb+txANol5zSV6ybo4HBl4AZOtA8MFPQ=)
2: RH-_P69EnY_CfaPrSpeX5TNaUIk.roa (hash: Kh8dA74PAzmGIT95EUvW7CM2vVdmLwl1/1xo5k7UCuA=)
3: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: +9wWz9E6vQb3ah8PdfgvcA4aKgr289lPJc/h6BwqJTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7f:a1:5c:77:74:c0:a8:90:a9:1e:bb:21:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=e71383ba24cb549b91be3e67e7a04609ece57c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:ae:3e:45:af:6d:3a:1f:c9:57:cf:30:96:
63:74:20:ea:df:b3:ff:ce:5c:11:c7:a3:ef:31:b3:
7d:82:6e:38:c9:8a:23:04:b3:03:5e:c1:f0:07:62:
6e:c4:cc:ac:c0:94:87:10:dd:84:d0:53:fe:78:16:
f2:eb:50:75:8a:4d:b9:48:a2:9b:aa:9f:54:d7:8a:
06:d2:fe:f8:1f:5a:c8:8a:ee:43:b4:bd:32:7c:94:
1c:ac:89:ff:34:01:4a:43:ac:b2:9a:5c:2f:a1:6a:
0d:9e:0b:fa:76:ca:53:06:f3:ac:f9:d4:60:64:e2:
af:5e:c4:53:d2:19:1f:de:f8:ee:b4:4f:68:90:e2:
c9:9f:c7:1e:04:c2:7c:14:9d:4d:6c:06:b6:8a:cb:
0d:55:0f:94:f9:ab:c9:56:b0:24:50:e8:a1:2e:9f:
52:6f:77:9b:f8:fb:91:9e:77:54:f8:2b:83:cb:14:
69:47:d1:26:30:88:0a:a9:06:86:0b:cd:b8:e3:4a:
9c:12:7a:ec:49:ac:89:69:28:89:45:f6:53:1c:7f:
7b:fe:bb:ee:f7:50:a1:25:f0:91:69:8d:41:59:a1:
a0:56:16:42:37:ea:30:5d:35:14:7b:58:77:22:16:
c8:17:9c:8a:48:7f:47:aa:87:18:0d:ae:41:1c:aa:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:83:BA:24:CB:54:9B:91:BE:3E:67:E7:A0:46:09:EC:E5:7C:4B
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d4:29:f6:a4:53:7e:4d:52:b0:bb:6e:40:f9:2c:01:68:45:
ae:a5:67:5d:61:c9:9a:80:31:16:48:ed:05:8a:82:40:19:da:
16:7c:15:36:79:44:51:ce:59:d6:3a:cf:b7:a3:70:23:ce:39:
0b:f4:ae:aa:e7:94:fe:87:2e:25:da:17:ec:49:ff:36:e7:d9:
eb:85:ad:c0:85:8b:bb:b1:bf:75:ed:7a:db:a5:e7:de:ce:30:
72:1b:07:5a:f8:8e:a7:6c:2c:8c:d2:4d:1c:e2:cd:3d:c2:76:
d7:d6:5e:2c:54:74:91:4f:81:e9:6b:4e:58:04:ae:60:1a:ad:
a1:00:73:02:d0:31:25:af:c1:1d:48:a2:90:82:7f:32:2c:26:
9a:06:c7:a1:4c:ee:4e:22:ac:3c:92:dc:de:c2:17:8d:4a:60:
2d:3b:01:29:08:42:c4:62:a3:3d:07:34:6e:9c:81:fd:9c:90:
95:a9:b8:2b:05:4a:e3:de:10:a8:b8:cb:f5:be:4a:f0:41:bd:
9e:88:5c:c3:c0:e1:62:22:85:b1:29:b8:ac:d0:df:5c:3a:0e:
0d:b5:ed:9e:28:51:17:38:c0:c7:0c:5b:0e:ce:30:b6:16:fc:
5b:4c:8a:85:c4:91:03:d4:07:0c:11:1a:c4:b3:18:9d:5c:e5:
ac:1d:ed:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBH+hXHd0wKiQqR67IVACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjllNzBhZjJmN2UxOGNiYzE5Zjk3Y2NhOGZkNmMwNTA5
OTc0MWQwHhcNMjYwMzI1MjIwMTM5WhcNMjYwMzI2MjIwMTM5WjAzMTEwLwYDVQQD
EyhlNzEzODNiYTI0Y2I1NDliOTFiZTNlNjdlN2EwNDYwOWVjZTU3YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB6uPkWvbTofyVfPMJZjdCDq37P/
zlwRx6PvMbN9gm44yYojBLMDXsHwB2JuxMyswJSHEN2E0FP+eBby61B1ik25SKKb
qp9U14oG0v74H1rIiu5DtL0yfJQcrIn/NAFKQ6yymlwvoWoNngv6dspTBvOs+dRg
ZOKvXsRT0hkf3vjutE9okOLJn8ceBMJ8FJ1NbAa2issNVQ+U+avJVrAkUOihLp9S
b3eb+PuRnndU+CuDyxRpR9EmMIgKqQaGC82440qcEnrsSayJaSiJRfZTHH97/rvu
91ChJfCRaY1BWaGgVhZCN+owXTUUe1h3IhbIF5yKSH9HqocYDa5BHKqQWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcTg7oky1Sbkb4+Z+egRgns5XxLMB8GA1UdIwQY
MBaAFP8p5wry9+GMvBn5fMqP1sBQmXQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2Et
Y2YyMGU1YjY3ZmM4LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2EtY2YyMGU1YjY3ZmM4
LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNQp9qRT
fk1SsLtuQPksAWhFrqVnXWHJmoAxFkjtBYqCQBnaFnwVNnlEUc5Z1jrPt6NwI845
C/SuqueU/ocuJdoX7En/NufZ64WtwIWLu7G/de1626Xn3s4wchsHWviOp2wsjNJN
HOLNPcJ219ZeLFR0kU+B6WtOWASuYBqtoQBzAtAxJa/BHUiikIJ/MiwmmgbHoUzu
TiKsPJLc3sIXjUpgLTsBKQhCxGKjPQc0bpyB/ZyQlam4KwVK494QqLjL9b5K8EG9
nohcw8DhYiKFsSm4rNDfXDoODbXtnihRFzjAxwxbDs4wthb8W0yKhcSRA9QHDBEa
xLMYnVzlrB3tYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:08 2026 by rpki-client