Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: PCsyTm/Gpw0M67sPS1qVyLw11hJMjMbI/wQvxSuS4ns=
Subject key identifier: 54:B5:3F:70:B8:16:C3:2E:FC:E0:61:5E:F0:13:89:02:70:F7:50:F8
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 019D2704CE3B0C1F06A8E9EE704ADF0DAE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 0567
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: PvCgDhF7NMwisHTGu6gMJAQYao8.roa (hash: iU0qJG0gVhiOE7d2EF+iy3h3MwEr90mkXIIvaKDVia4=)
2: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: JMpQcLYrD5NQcrIr1Ly6nj/bvmjd7g+ktzWeUgyKG8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ce:3b:0c:1f:06:a8:e9:ee:70:4a:df:0d:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=54b53f70b816c32efce0615ef013890270f750f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:99:50:63:c8:5e:06:bc:c9:d7:69:fc:a0:
aa:d5:da:d7:d0:0a:a0:98:15:42:28:e7:76:ff:8a:
9c:57:dc:ec:86:45:e2:75:17:ff:00:96:72:d6:82:
00:b1:68:ad:1a:80:4f:ba:ad:35:ab:bd:2b:aa:59:
2b:25:80:fb:1f:21:f1:10:95:8c:17:5a:06:00:ff:
6a:02:f6:4a:03:df:04:8f:c9:63:69:04:38:69:ec:
2c:8c:1a:f3:d8:e7:1e:b3:77:1b:ec:d7:e6:0f:54:
33:80:80:ae:48:c9:8c:f0:fa:94:ea:1e:b9:2c:71:
0f:03:3f:c9:c7:b1:55:5c:3b:88:c5:16:84:88:ce:
c7:c0:b6:4b:77:ae:1d:1c:1c:75:c1:96:0d:9f:27:
76:fa:cc:35:1d:f2:18:ba:4b:f8:dc:ae:53:a4:bd:
47:55:73:3c:d8:ae:6c:9c:39:29:6e:57:c6:0d:15:
e0:74:a4:74:a1:69:8e:2d:64:19:a4:f8:64:df:5f:
9c:1b:5d:d2:e1:f4:da:3a:2e:86:0e:83:fd:8b:51:
76:3d:ca:3f:8a:fe:92:ba:f3:ff:8b:43:14:b4:c0:
35:09:c8:c4:8c:40:80:a0:f0:c5:a8:48:3c:7b:b5:
40:89:af:a5:de:50:57:ac:e5:3d:8c:42:7f:85:7e:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:3F:70:B8:16:C3:2E:FC:E0:61:5E:F0:13:89:02:70:F7:50:F8
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:90:de:69:52:9e:d4:0b:6b:ec:9b:28:60:19:49:de:e9:
3e:87:df:dc:eb:dd:e9:3d:e9:32:d0:2f:43:ba:e4:6e:7b:12:
01:99:de:39:65:4e:74:ee:3b:6f:c3:62:8a:ef:6b:c6:9c:36:
ec:2b:59:9a:ca:86:ae:fe:bb:34:fa:1b:1c:dc:25:80:db:b5:
98:f6:4d:e7:57:c0:04:6d:44:c1:ad:70:d6:9d:c5:b4:2a:38:
69:ba:7a:6e:77:e4:4b:96:6e:4b:a7:c3:e2:8d:37:40:6c:68:
3d:18:4c:c0:a8:ea:6e:e2:aa:72:b8:bf:be:3d:a2:07:c7:82:
ea:09:97:a5:52:9a:f3:90:8f:f9:66:83:83:e1:71:74:28:cb:
74:81:4b:11:9c:15:c0:74:cf:0f:af:9e:b9:d5:34:f8:30:85:
0a:05:9e:c6:07:ca:16:7c:d5:74:2a:2c:8b:39:8a:0f:77:65:
f4:4c:27:6f:51:d6:04:90:2c:2c:50:8e:4b:48:96:ff:3e:e9:
19:6f:0e:13:2c:6c:76:e5:68:f0:4f:6d:ab:3b:63:b0:e5:d8:
62:ad:d4:3c:0c:f0:c7:66:17:16:67:6d:6d:03:af:59:30:d4:
62:18:18:fc:2a:22:dd:69:9c:4f:63:ed:a8:3e:01:a7:56:40:
06:ae:e8:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBM47DB8GqOnucErfDa4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjFhNGRhYTdkY2Y0YTRjYjA4YWM0NzQ3Mzc1ZjY5OGFh
ZTg2NDMwHhcNMjYwMzI1MjIwMTU5WhcNMjYwMzI2MjIwMTU5WjAzMTEwLwYDVQQD
Eyg1NGI1M2Y3MGI4MTZjMzJlZmNlMDYxNWVmMDEzODkwMjcwZjc1MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiaZUGPIXga8yddp/KCq1drX0Aqg
mBVCKOd2/4qcV9zshkXidRf/AJZy1oIAsWitGoBPuq01q70rqlkrJYD7HyHxEJWM
F1oGAP9qAvZKA98Ej8ljaQQ4aewsjBrz2Oces3cb7NfmD1QzgICuSMmM8PqU6h65
LHEPAz/Jx7FVXDuIxRaEiM7HwLZLd64dHBx1wZYNnyd2+sw1HfIYukv43K5TpL1H
VXM82K5snDkpblfGDRXgdKR0oWmOLWQZpPhk31+cG13S4fTaOi6GDoP9i1F2Pco/
iv6SuvP/i0MUtMA1CcjEjECAoPDFqEg8e7VAia+l3lBXrOU9jEJ/hX69JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS1P3C4FsMu/OBhXvATiQJw91D4MB8GA1UdIwQY
MBaAFGAhpNqn3PSkywisR0c3X2mKroZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDct
NGQyYTYzMzRkZTc3LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDctNGQyYTYzMzRkZTc3
LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanuQ3mlS
ntQLa+ybKGAZSd7pPoff3Ovd6T3pMtAvQ7rkbnsSAZneOWVOdO47b8Niiu9rxpw2
7CtZmsqGrv67NPobHNwlgNu1mPZN51fABG1Ewa1w1p3FtCo4abp6bnfkS5ZuS6fD
4o03QGxoPRhMwKjqbuKqcri/vj2iB8eC6gmXpVKa85CP+WaDg+FxdCjLdIFLEZwV
wHTPD6+eudU0+DCFCgWexgfKFnzVdCosizmKD3dl9Ewnb1HWBJAsLFCOS0iW/z7p
GW8OEyxsduVo8E9tqztjsOXYYq3UPAzwx2YXFmdtbQOvWTDUYhgY/Coi3WmcT2Pt
qD4Bp1ZABq7o5g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:32 2026 by rpki-client