Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: qWT4+R4YgG9c9gAghOPkMSayRcBZVnSSByw+megm/TM=
Subject key identifier: 66:9A:60:7D:DB:38:5B:17:B0:7E:8F:32:A2:BC:83:88:6D:12:6C:14
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019D2704CA2F601E5BEC1093EE0C2CC52B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 065A
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa (hash: jpEDe24rlUn3pxTT1qasWKlz+X8T9bS0HUXdOUhAmHA=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: WMsmp9bZkYhygVLyVo/aPp8dWeE2o+X+MgX4I67HpkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ca:2f:60:1e:5b:ec:10:93:ee:0c:2c:c5:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=669a607ddb385b17b07e8f32a2bc83886d126c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:6f:12:f4:1c:0e:cf:cd:42:79:8d:01:87:
98:cf:a0:a8:cd:47:da:78:6c:ba:8e:e3:fe:a5:81:
56:c5:10:5b:34:49:83:e1:6b:1b:8e:55:ec:91:e6:
0a:21:ff:b0:d0:6f:0a:02:94:25:3f:ad:e9:97:4a:
70:09:8d:05:c9:ea:66:89:97:3d:bf:74:f6:19:b6:
d7:9f:ec:76:ce:1a:a4:70:87:f3:2c:a1:35:75:0c:
48:60:7f:01:18:d0:06:6f:3d:93:5f:8d:93:c4:56:
2d:9f:45:40:b6:b7:12:f7:95:2b:54:15:c3:f1:33:
61:dc:93:d5:8f:40:81:97:ee:2d:29:38:c2:b6:63:
77:97:31:0b:31:a6:6f:72:39:7f:56:af:c8:4e:1c:
74:e5:76:13:db:91:38:f5:b3:da:a0:b4:c5:f3:55:
0e:86:9a:b9:bf:d9:f4:f9:19:a7:61:6c:80:08:35:
c2:68:ac:ef:a8:bc:4e:b3:07:b6:8c:d3:d1:e0:d5:
78:73:2e:fb:f8:7a:fa:9f:5b:67:49:06:f3:23:78:
39:b7:60:d9:53:d6:c5:b2:e5:dd:95:56:8d:03:31:
b3:53:d4:64:2f:90:a7:b3:24:41:e4:14:81:b8:4c:
40:d6:c5:a3:e2:03:ee:f9:2f:37:04:e6:33:b7:c9:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:60:7D:DB:38:5B:17:B0:7E:8F:32:A2:BC:83:88:6D:12:6C:14
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5b:51:cd:82:10:49:09:13:ef:9b:92:04:a9:33:08:df:e1:
44:ba:87:13:1f:20:24:4f:94:5a:5c:42:96:41:7b:7d:b3:d1:
9c:f2:5f:5a:c5:c9:1f:bf:e8:13:6f:51:6e:80:3b:1e:ad:9b:
73:bc:c0:79:c3:83:e9:eb:cb:cd:16:eb:f6:68:b0:29:c5:98:
cd:1e:ba:72:9b:a5:c1:07:3e:6f:f7:9e:0f:51:63:6b:e4:6b:
46:c9:7e:fd:28:39:00:8a:6b:28:db:be:89:00:63:07:6d:b6:
ec:82:59:97:46:28:53:f9:5e:6a:c6:f1:46:d6:e8:ce:73:bb:
01:b0:9c:f9:7c:d7:b6:11:32:f0:be:8b:ae:8a:78:ce:07:f1:
63:d5:e7:b4:5a:a5:a1:b9:7e:a1:16:b7:67:f0:cd:3d:97:c1:
e4:2e:09:2d:9a:69:d2:92:33:ae:de:64:2b:ad:d2:49:f2:58:
fb:c3:64:f1:1e:d5:3c:31:69:83:a3:2d:8f:77:8a:50:8a:13:
51:0b:04:db:fe:38:b3:a0:fe:e3:0d:29:61:8b:f1:39:c8:94:
7c:b8:c8:4b:cd:7d:fe:5c:64:69:10:08:5e:2e:40:a8:3f:8c:
5a:4e:4a:fe:1a:36:80:76:76:e7:21:f4:93:00:1c:92:a1:57:
60:14:23:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMovYB5b7BCT7gwsxSuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy
MjEyNDAwHhcNMjYwMzI1MjIwMTU4WhcNMjYwMzI2MjIwMTU4WjAzMTEwLwYDVQQD
Eyg2NjlhNjA3ZGRiMzg1YjE3YjA3ZThmMzJhMmJjODM4ODZkMTI2YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpvEvQcDs/NQnmNAYeYz6CozUfa
eGy6juP+pYFWxRBbNEmD4WsbjlXskeYKIf+w0G8KApQlP63pl0pwCY0FyepmiZc9
v3T2GbbXn+x2zhqkcIfzLKE1dQxIYH8BGNAGbz2TX42TxFYtn0VAtrcS95UrVBXD
8TNh3JPVj0CBl+4tKTjCtmN3lzELMaZvcjl/Vq/IThx05XYT25E49bPaoLTF81UO
hpq5v9n0+RmnYWyACDXCaKzvqLxOswe2jNPR4NV4cy77+Hr6n1tnSQbzI3g5t2DZ
U9bFsuXdlVaNAzGzU9RkL5CnsyRB5BSBuExA1sWj4gPu+S83BOYzt8n3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaaYH3bOFsXsH6PMqK8g4htEmwUMB8GA1UdIwQY
MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt
MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm
LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOltRzYIQ
SQkT75uSBKkzCN/hRLqHEx8gJE+UWlxClkF7fbPRnPJfWsXJH7/oE29RboA7Hq2b
c7zAecOD6evLzRbr9miwKcWYzR66cpulwQc+b/eeD1Fja+RrRsl+/Sg5AIprKNu+
iQBjB2227IJZl0YoU/leasbxRtboznO7AbCc+XzXthEy8L6Lrop4zgfxY9XntFql
obl+oRa3Z/DNPZfB5C4JLZpp0pIzrt5kK63SSfJY+8Nk8R7VPDFpg6Mtj3eKUIoT
UQsE2/44s6D+4w0pYYvxOciUfLjIS819/lxkaRAIXi5AqD+MWk5K/ho2gHZ25yH0
kwAckqFXYBQjBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client