Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier: twcnjGzmx14WIjFv2SbOMccvnf3epcuCo4cq31ATHUI=
Subject key identifier: F8:6C:16:76:9B:EB:B6:FD:A4:79:79:1F:6F:07:84:BB:E7:4A:B1:FE
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial: 019D270433B437A1A8F83E64E5507480BD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number: 0BA1
Signing time: Wed 25 Mar 2026 22:01:19 +0000
Manifest this update: Wed 25 Mar 2026 22:01:19 +0000
Manifest next update: Thu 26 Mar 2026 22:01:19 +0000
Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: Q1UNmE6izqAXa+yqvDqlWZP5Cx7wx4e21ArIQNuJHpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:33:b4:37:a1:a8:f8:3e:64:e5:50:74:80:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
Validity
Not Before: Mar 25 22:01:19 2026 GMT
Not After : Mar 26 22:01:19 2026 GMT
Subject: CN=f86c16769bebb6fda479791f6f0784bbe74ab1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:63:3a:90:fa:88:c1:7f:a7:86:23:f6:44:
d6:c1:83:02:6c:43:95:d3:cb:01:b8:8f:c8:8c:1b:
c8:88:27:4c:46:26:66:0e:81:44:ff:9f:72:3c:7b:
30:43:9c:d8:50:a7:bb:54:79:aa:69:f3:e7:e7:54:
19:e1:27:cd:9e:8b:28:64:f7:57:4a:66:7d:ff:e6:
7d:48:eb:38:61:22:f1:07:b1:5b:e0:33:a2:bd:c0:
20:15:c9:f5:4a:fc:00:b5:fc:b0:d5:06:b0:15:9e:
33:de:85:d1:80:33:9a:27:64:9b:4d:e2:9e:54:19:
ee:5a:64:41:19:ad:12:bb:38:ec:39:30:fe:6e:e2:
25:9b:9b:12:17:d4:6a:50:ec:7f:03:ae:3d:b1:2e:
fb:80:ff:be:a8:4a:90:03:cf:dd:fa:10:ad:39:f9:
2f:44:f8:cc:d3:bb:c0:4b:cc:89:ca:ad:d9:0b:94:
98:2b:4a:95:bc:ce:0a:1e:30:7f:d6:5b:df:4c:f5:
8b:90:b6:52:ca:7d:9a:86:f5:41:19:62:ad:2b:6e:
81:db:2e:b1:23:30:ed:b8:e9:b1:77:f6:93:d1:eb:
33:7f:27:78:c3:4d:8e:3b:a9:d0:18:bf:44:2f:c8:
a2:ab:1a:3f:86:58:2c:d9:04:d4:97:20:a0:1e:f6:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6C:16:76:9B:EB:B6:FD:A4:79:79:1F:6F:07:84:BB:E7:4A:B1:FE
X509v3 Authority Key Identifier:
keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e6:5e:52:84:4a:2e:dd:2b:88:28:6f:b8:58:1e:70:f0:6b:
76:14:0f:db:e8:39:0e:dc:11:ce:59:9b:e9:40:de:9d:f3:b6:
19:3e:2c:5a:37:7e:4d:d9:97:8b:d3:61:28:79:3c:aa:dd:0b:
19:1e:85:ca:83:86:3b:dd:b3:3e:8b:e3:7f:99:51:3d:b5:cc:
ab:00:6e:8c:fd:fb:c0:d6:03:e1:61:12:7d:64:a3:aa:76:f0:
4b:89:00:73:39:35:60:db:db:ee:e1:dc:ef:44:f6:ed:82:42:
0d:c6:e5:71:31:0b:12:45:6b:88:76:3c:1b:90:bd:b8:8b:a6:
b5:bc:a6:37:cd:f0:ab:23:74:d5:f8:92:fd:b5:5f:ad:bc:27:
df:e3:07:99:2a:8b:5c:19:26:98:c3:92:bd:39:e9:69:e0:fd:
3c:65:f4:d9:73:bb:d7:c5:3b:1f:b2:f4:b4:c6:08:81:f8:9e:
93:87:81:1f:df:92:f7:c9:85:af:29:f0:d0:a2:73:1b:9b:8c:
b4:58:ce:a4:c6:af:9b:a7:00:23:ba:4f:f4:d7:fc:b6:9b:0c:
74:9f:af:8e:3a:49:72:41:8f:04:ce:17:cc:af:cc:3d:0e:c2:
6c:75:07:d2:cd:16:24:d8:1f:f5:d4:cb:ea:8a:c0:0d:db:0b:
15:d5:d1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDO0N6Go+D5k5VB0gL1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODBkMTljM2JmY2M0MDQ3MTU2Nzc2ZjAyYTM0OTg5OGU0
NmI5MGQwHhcNMjYwMzI1MjIwMTE5WhcNMjYwMzI2MjIwMTE5WjAzMTEwLwYDVQQD
EyhmODZjMTY3NjliZWJiNmZkYTQ3OTc5MWY2ZjA3ODRiYmU3NGFiMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcVjOpD6iMF/p4Yj9kTWwYMCbEOV
08sBuI/IjBvIiCdMRiZmDoFE/59yPHswQ5zYUKe7VHmqafPn51QZ4SfNnosoZPdX
SmZ9/+Z9SOs4YSLxB7Fb4DOivcAgFcn1SvwAtfyw1QawFZ4z3oXRgDOaJ2SbTeKe
VBnuWmRBGa0SuzjsOTD+buIlm5sSF9RqUOx/A649sS77gP++qEqQA8/d+hCtOfkv
RPjM07vAS8yJyq3ZC5SYK0qVvM4KHjB/1lvfTPWLkLZSyn2ahvVBGWKtK26B2y6x
IzDtuOmxd/aT0eszfyd4w02OO6nQGL9EL8iiqxo/hlgs2QTUlyCgHvZVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhsFnab67b9pHl5H28HhLvnSrH+MB8GA1UdIwQY
MBaAFMmA0Zw7/MQEcVZ3bwKjSYmORrkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYt
Yjg2NjE5NzUyMDM5LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYtYjg2NjE5NzUyMDM5
LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeZeUoRK
Lt0riChvuFgecPBrdhQP2+g5DtwRzlmb6UDenfO2GT4sWjd+TdmXi9NhKHk8qt0L
GR6FyoOGO92zPovjf5lRPbXMqwBujP37wNYD4WESfWSjqnbwS4kAczk1YNvb7uHc
70T27YJCDcblcTELEkVriHY8G5C9uIumtbymN83wqyN01fiS/bVfrbwn3+MHmSqL
XBkmmMOSvTnpaeD9PGX02XO718U7H7L0tMYIgfiek4eBH9+S98mFrynw0KJzG5uM
tFjOpMavm6cAI7pP9Nf8tpsMdJ+vjjpJckGPBM4XzK/MPQ7CbHUH0s0WJNgf9dTL
6orADdsLFdXRig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:46 2026 by rpki-client