
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier: rtMiLBXTbFksCRDt4j9vuyJi2gPd5OmSUi7VhDpdXS4=
Subject key identifier: 30:59:3A:DE:11:ED:E0:6B:B7:E7:25:2C:C9:A1:BD:4E:CE:4B:EB:53
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial: 019D299739C9AB286DAF0E804B3AC9588D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number: 0325
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: 5HKTJNsEif8AjcvPmVpCFZLfGxOcs6XyBhD2yG85a9Y=)
2: sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa (hash: SJvy+b4frEQGMy5gxf3VawAH0CiFxMKXegFK+YmGabE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:39:c9:ab:28:6d:af:0e:80:4b:3a:c9:58:8d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=30593ade11ede06bb7e7252cc9a1bd4ece4beb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:fa:8d:e9:d7:e4:cc:cd:23:b2:60:5b:79:
31:02:9c:8c:f1:34:35:dd:99:f8:52:34:b3:b0:b3:
d1:20:09:55:d4:1a:8f:9b:f4:ca:eb:a4:63:45:55:
20:0f:39:23:3c:63:b8:ce:47:d5:d0:13:85:62:b0:
85:ba:39:14:88:18:e3:2e:e0:78:df:d8:19:fe:ea:
d6:c1:7d:07:fe:da:ad:3b:bd:98:7e:e8:81:09:f6:
bd:3e:33:e7:b5:ce:7b:f2:ea:a6:36:40:7b:ee:9f:
28:87:47:a5:c9:d7:1b:21:64:9d:6f:71:c2:4a:0f:
79:00:e1:94:d4:03:97:90:d1:7e:e7:7b:65:53:2d:
27:c9:04:a0:18:10:cc:42:8c:2f:9e:58:ce:b5:02:
b7:c8:7d:e7:2b:5b:81:bb:f3:37:e0:b8:c0:40:c9:
5b:7a:44:6b:68:04:2b:33:44:81:63:95:a8:57:46:
3c:60:41:e3:46:df:87:9f:04:d4:90:6f:c5:97:b9:
32:01:0f:51:a4:55:b8:c5:29:e4:3b:e4:d2:26:ce:
47:f1:b9:a6:1d:c1:b2:52:02:c8:26:86:4f:f3:84:
56:b0:5a:9a:ae:d4:f1:c7:8c:02:42:5c:1e:88:1a:
9b:6c:a0:52:84:78:aa:9c:aa:b1:1a:20:04:2e:ed:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:59:3A:DE:11:ED:E0:6B:B7:E7:25:2C:C9:A1:BD:4E:CE:4B:EB:53
X509v3 Authority Key Identifier:
keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:13:3d:f1:54:f0:7d:10:3c:02:8b:98:e8:00:d1:c7:6b:
23:28:b7:29:8c:ad:8c:54:18:be:e8:6b:dc:1c:ce:c3:a2:59:
04:26:99:0e:7d:ba:ab:c2:3c:07:c7:75:41:67:6e:82:43:99:
63:96:6d:ad:a7:02:73:74:de:b0:07:d5:5d:03:5a:40:f3:28:
7b:10:b3:ff:09:70:9d:93:16:10:04:94:30:d8:83:9e:f4:e0:
7f:ba:69:3c:fb:d4:15:48:ad:77:64:ae:a6:ee:5d:83:5b:77:
42:8c:59:27:1c:89:1a:81:0a:3d:10:f4:d8:62:4f:d6:9f:67:
9c:3e:80:75:31:5f:8a:3d:95:09:af:27:69:e2:97:e8:02:75:
5c:81:e2:49:d0:16:af:23:7e:d5:48:9b:95:f4:79:a9:ac:2c:
aa:00:dd:9c:8a:a0:f8:bf:19:8c:cf:ab:0b:65:09:25:2b:ae:
69:a3:e1:11:84:aa:90:8d:0a:49:56:d3:82:84:2c:52:e6:64:
9e:f5:a1:77:52:f0:77:17:99:15:2f:7f:72:b5:0e:88:85:78:
e8:a3:34:ad:f7:fc:84:8e:71:13:f8:91:fb:0b:3b:9c:cc:dd:
31:1c:5b:38:d4:87:ef:12:fb:89:47:65:4d:64:35:9d:de:b0:
b9:bb:98:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plznJqyhtrw6ASzrJWI1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWU5Y2ZhMmQ2NWI0MTU0MmQzN2VlZmYxZDFjNmMzODdh
YWExYjUwHhcNMjYwMzI2MTAwMTA5WhcNMjYwMzI3MTAwMTA5WjAzMTEwLwYDVQQD
EygzMDU5M2FkZTExZWRlMDZiYjdlNzI1MmNjOWExYmQ0ZWNlNGJlYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofr6jenX5MzNI7JgW3kxApyM8TQ1
3Zn4UjSzsLPRIAlV1BqPm/TK66RjRVUgDzkjPGO4zkfV0BOFYrCFujkUiBjjLuB4
39gZ/urWwX0H/tqtO72YfuiBCfa9PjPntc578uqmNkB77p8oh0elydcbIWSdb3HC
Sg95AOGU1AOXkNF+53tlUy0nyQSgGBDMQowvnljOtQK3yH3nK1uBu/M34LjAQMlb
ekRraAQrM0SBY5WoV0Y8YEHjRt+HnwTUkG/Fl7kyAQ9RpFW4xSnkO+TSJs5H8bmm
HcGyUgLIJoZP84RWsFqartTxx4wCQlweiBqbbKBShHiqnKqxGiAELu1veQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBZOt4R7eBrt+clLMmhvU7OS+tTMB8GA1UdIwQY
MBaAFGGunPotZbQVQtN+7/HRxsOHqqG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEt
ZTkyOGVmNjQwZGY4LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEtZTkyOGVmNjQwZGY4
LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkUTPfFU
8H0QPAKLmOgA0cdrIyi3KYytjFQYvuhr3BzOw6JZBCaZDn26q8I8B8d1QWdugkOZ
Y5ZtracCc3TesAfVXQNaQPMoexCz/wlwnZMWEASUMNiDnvTgf7ppPPvUFUitd2Su
pu5dg1t3QoxZJxyJGoEKPRD02GJP1p9nnD6AdTFfij2VCa8naeKX6AJ1XIHiSdAW
ryN+1UiblfR5qawsqgDdnIqg+L8ZjM+rC2UJJSuuaaPhEYSqkI0KSVbTgoQsUuZk
nvWhd1LwdxeZFS9/crUOiIV46KM0rff8hI5xE/iR+ws7nMzdMRxbONSH7xL7iUdl
TWQ1nd6wubuYvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:40 2026 by rpki-client