Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: uPawNSRPItqurX9x+Xrzme5+suocneDVhe1YIz7YhtA=
Subject key identifier: DD:DD:1E:13:B3:64:1B:48:34:8E:8B:06:34:5A:15:15:D6:54:64:A0
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 019D2A3BAC7FEB5692D342B46CFD011AD16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 151C
Signing time: Thu 26 Mar 2026 13:00:47 +0000
Manifest this update: Thu 26 Mar 2026 13:00:47 +0000
Manifest next update: Fri 27 Mar 2026 13:00:47 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: D4pESK9z/4OdMbJK3MW1vqyDW5d0rM0/QKmT3FaH0z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ac:7f:eb:56:92:d3:42:b4:6c:fd:01:1a:d1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Mar 26 13:00:47 2026 GMT
Not After : Mar 27 13:00:47 2026 GMT
Subject: CN=dddd1e13b3641b48348e8b06345a1515d65464a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:5d:fb:b7:3d:ac:6b:05:2f:a3:dd:a5:4a:
6c:ea:bc:14:03:db:0e:35:23:79:9b:a0:1e:e1:7a:
8d:99:a2:4a:de:08:de:eb:93:cd:e2:ff:9a:63:a7:
05:f5:66:e7:cc:f6:1b:e2:a7:fe:5f:a1:01:0b:98:
9e:67:98:a5:b0:21:3b:8d:1c:87:4c:ef:63:91:77:
f8:17:62:8d:16:06:c8:f6:e9:51:44:23:3a:b3:f1:
f3:e3:d0:86:d6:ca:10:7b:11:2d:ea:9b:41:6a:da:
35:d3:bc:17:2d:43:cb:d8:9f:20:b4:1b:cb:b1:48:
04:03:3c:d3:37:e5:98:e0:23:b2:e6:57:cc:13:ec:
07:18:b7:65:ad:29:a5:5b:8b:d6:76:b5:7d:c4:13:
96:a3:6b:67:85:65:b5:f5:ed:33:b5:d2:d7:c0:1f:
5b:a1:d6:0f:f3:5a:c1:bf:d9:35:88:e6:f6:a7:dc:
5b:be:79:59:12:52:38:f3:a1:c9:7f:7a:61:2a:d7:
1c:16:43:b9:b2:4b:e1:9f:9d:8f:9f:a2:1d:ec:b1:
15:24:9d:09:bb:a1:f3:1c:c6:dc:dd:d8:ac:8a:64:
c5:1b:a9:c7:71:9e:90:88:93:b2:95:7c:d3:1d:77:
03:7e:57:f4:8b:bd:dc:bc:62:e5:e2:a5:86:ab:0c:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:1E:13:B3:64:1B:48:34:8E:8B:06:34:5A:15:15:D6:54:64:A0
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ff:8e:10:49:09:4e:20:fd:0e:f3:c7:3d:ae:67:99:90:72:
fb:b8:ff:d1:d1:27:48:5e:bc:73:f8:73:d6:c3:b3:db:d0:6c:
6c:63:a0:89:2a:db:89:a5:44:ed:91:a3:f6:e2:e0:25:7c:34:
aa:10:bb:4b:32:03:15:f1:1a:6a:60:ff:c8:a4:f7:1e:26:51:
f2:7a:90:c3:d9:f5:2d:44:7a:96:e0:f0:df:2c:38:12:76:46:
f9:c7:a9:fa:2e:2a:58:42:3f:99:fa:60:6d:da:64:33:0a:a5:
1f:ac:67:16:25:3b:f7:84:59:c6:18:ec:5c:44:28:ba:ea:4d:
9e:32:6b:46:4e:c1:d0:0f:48:7d:a4:fc:a6:f4:5a:8d:95:e9:
c5:01:a3:4a:2f:7d:b6:d2:73:e8:50:cb:19:dd:2b:3c:48:43:
39:94:2e:42:ab:9d:3c:c2:47:ac:d0:f9:78:5a:0b:41:3c:7f:
05:1a:a7:c4:57:0c:38:f5:55:3c:f3:68:5c:45:58:70:1a:8a:
c2:53:74:c3:65:43:d5:bc:04:c2:cd:7e:4a:f6:37:17:db:f5:
96:f1:ae:81:d4:70:38:ba:63:66:39:66:c8:7d:5e:8f:29:2c:
91:c9:75:d4:9a:1b:1c:71:e0:4b:d7:2e:9f:2a:4e:23:01:ab:
17:26:76:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO6x/61aS00K0bP0BGtFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5
Mjk3MjEwHhcNMjYwMzI2MTMwMDQ3WhcNMjYwMzI3MTMwMDQ3WjAzMTEwLwYDVQQD
EyhkZGRkMWUxM2IzNjQxYjQ4MzQ4ZThiMDYzNDVhMTUxNWQ2NTQ2NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQtd+7c9rGsFL6PdpUps6rwUA9sO
NSN5m6Ae4XqNmaJK3gje65PN4v+aY6cF9WbnzPYb4qf+X6EBC5ieZ5ilsCE7jRyH
TO9jkXf4F2KNFgbI9ulRRCM6s/Hz49CG1soQexEt6ptBato107wXLUPL2J8gtBvL
sUgEAzzTN+WY4COy5lfME+wHGLdlrSmlW4vWdrV9xBOWo2tnhWW19e0ztdLXwB9b
odYP81rBv9k1iOb2p9xbvnlZElI486HJf3phKtccFkO5skvhn52Pn6Id7LEVJJ0J
u6HzHMbc3disimTFG6nHcZ6QiJOylXzTHXcDflf0i73cvGLl4qWGqwzIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3dHhOzZBtINI6LBjRaFRXWVGSgMB8GA1UdIwQY
MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt
ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3
LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/+OEEkJ
TiD9DvPHPa5nmZBy+7j/0dEnSF68c/hz1sOz29BsbGOgiSrbiaVE7ZGj9uLgJXw0
qhC7SzIDFfEaamD/yKT3HiZR8nqQw9n1LUR6luDw3yw4EnZG+cep+i4qWEI/mfpg
bdpkMwqlH6xnFiU794RZxhjsXEQouupNnjJrRk7B0A9IfaT8pvRajZXpxQGjSi99
ttJz6FDLGd0rPEhDOZQuQqudPMJHrND5eFoLQTx/BRqnxFcMOPVVPPNoXEVYcBqK
wlN0w2VD1bwEws1+SvY3F9v1lvGugdRwOLpjZjlmyH1ejykskcl11JobHHHgS9cu
nypOIwGrFyZ2OQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:57 2026 by rpki-client