
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: zYELfP8fUtmPXmxFKu/p1lwJ9fIiXRJsDX8bDHQ13PQ=
Subject key identifier: 41:BA:D1:55:52:87:08:9B:63:80:51:6B:01:36:62:FA:C6:1F:AB:A9
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019D28BBD15CE21F519A3E9A53281B89397C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0AB5
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: NL-GZ6A5efHdGaOTzp86clCa2uc.roa (hash: ncgag6cx1L4BB9efkwTYVUbJ2MuFxWCJXY1VLSVWtpU=)
2: UADZ4YVn7TSGISo3JiXNjBmBm_s.roa (hash: N3tP1R0iLr7HsiUesHdYEFoZ03zveLr6qDLnn0E6Gpg=)
3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 8vL5TjEbzZYk77KKzQYKbNG0g4RsT5tUutMaNJv3aGg=)
4: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (hash: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8=)
5: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (hash: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d1:5c:e2:1f:51:9a:3e:9a:53:28:1b:89:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=41bad1555287089b6380516b013662fac61faba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:e0:48:bd:d1:d5:9f:2f:c4:a1:75:f3:e2:
82:a9:93:46:f4:ba:7a:b5:02:69:00:44:2d:49:72:
2c:39:81:8a:a7:30:c1:7d:4f:3d:06:05:1a:62:25:
04:e4:2c:2e:37:8b:b9:be:b4:bc:49:73:ee:df:ed:
c5:cd:ee:9e:25:a6:38:83:d9:7c:67:1d:9f:d7:3f:
c3:72:d9:ea:49:ca:3b:d5:f0:6f:6d:5f:6d:c2:2d:
55:84:c0:3f:47:12:9a:7e:fd:15:d3:76:b6:40:5a:
45:af:ea:bf:bf:19:df:ac:43:62:cb:87:3f:22:2c:
fd:f4:59:e3:e4:37:9e:46:5a:bf:f9:48:2d:6d:74:
bc:d4:b4:06:d0:c8:27:73:ef:dd:af:7a:56:f3:6c:
4e:d8:ed:40:93:d0:b6:df:cc:8e:7e:d7:95:94:48:
2b:6d:41:23:d8:c5:b7:e6:9b:d7:7f:f1:d0:86:f3:
54:2a:12:43:3e:c0:97:a3:79:22:7f:01:17:c7:4f:
f1:e7:bb:f3:73:f2:90:70:21:c7:ad:9b:93:79:a3:
e2:99:87:6b:fa:e1:e7:bd:8a:d7:28:85:01:9d:e3:
ac:f1:ee:40:6d:70:34:2c:96:5b:6f:63:3a:97:6c:
83:79:15:8e:11:8e:48:2a:f9:cc:ec:d3:4e:17:a8:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:D1:55:52:87:08:9B:63:80:51:6B:01:36:62:FA:C6:1F:AB:A9
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ab:a2:fc:e5:02:f5:f2:1e:2f:05:4c:db:6c:43:94:b0:88:
0a:6c:2c:a2:11:f9:9e:ef:e7:ed:0d:45:bd:74:39:bb:4d:e8:
e1:12:43:52:17:ed:76:3e:ff:68:d4:81:6c:ff:13:ed:73:a8:
c1:e0:83:f0:98:d2:31:d1:d6:18:7b:3f:d8:26:dd:f7:b9:c6:
33:fd:18:23:97:a6:9f:6b:8b:b4:2a:8c:54:7d:5a:2e:18:70:
ec:9b:eb:5f:02:fc:05:a8:ff:7b:37:0e:a1:6e:da:00:f7:2b:
40:cf:06:af:06:38:98:2a:ba:a5:59:94:10:89:56:ea:73:47:
6f:79:bc:88:77:dc:c6:36:de:14:cb:08:1b:b2:0c:fd:ef:9b:
50:0b:8d:21:79:90:c6:42:98:b4:94:2c:f3:6f:ae:86:55:f2:
b0:a9:95:b7:27:38:82:bd:c1:f6:00:ef:2e:e8:77:ea:e8:75:
60:6b:3e:72:9c:a3:92:da:d6:f2:ea:b9:81:fc:05:a1:42:5a:
00:51:be:d7:cf:54:76:fb:fb:d4:b0:fd:d8:b8:21:27:e2:7c:
71:34:8b:b6:fc:51:d0:1c:6f:8f:6d:a9:7c:64:f7:61:23:dd:
e5:3c:4c:03:91:71:53:13:98:33:28:36:85:3d:3d:fb:bf:6a:
f4:1a:ef:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9Fc4h9Rmj6aUygbiTl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjYwMzI2MDYwMTMwWhcNMjYwMzI3MDYwMTMwWjAzMTEwLwYDVQQD
Eyg0MWJhZDE1NTUyODcwODliNjM4MDUxNmIwMTM2NjJmYWM2MWZhYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ongSL3R1Z8vxKF18+KCqZNG9Lp6
tQJpAEQtSXIsOYGKpzDBfU89BgUaYiUE5CwuN4u5vrS8SXPu3+3Fze6eJaY4g9l8
Zx2f1z/DctnqSco71fBvbV9twi1VhMA/RxKafv0V03a2QFpFr+q/vxnfrENiy4c/
Iiz99Fnj5DeeRlq/+UgtbXS81LQG0Mgnc+/dr3pW82xO2O1Ak9C238yOfteVlEgr
bUEj2MW35pvXf/HQhvNUKhJDPsCXo3kifwEXx0/x57vzc/KQcCHHrZuTeaPimYdr
+uHnvYrXKIUBneOs8e5AbXA0LJZbb2M6l2yDeRWOEY5IKvnM7NNOF6iLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG60VVShwibY4BRawE2YvrGH6upMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKui/OUC
9fIeLwVM22xDlLCICmwsohH5nu/n7Q1FvXQ5u03o4RJDUhftdj7/aNSBbP8T7XOo
weCD8JjSMdHWGHs/2Cbd97nGM/0YI5emn2uLtCqMVH1aLhhw7JvrXwL8Baj/ezcO
oW7aAPcrQM8GrwY4mCq6pVmUEIlW6nNHb3m8iHfcxjbeFMsIG7IM/e+bUAuNIXmQ
xkKYtJQs82+uhlXysKmVtyc4gr3B9gDvLuh36uh1YGs+cpyjktrW8uq5gfwFoUJa
AFG+189Udvv71LD92LghJ+J8cTSLtvxR0Bxvj22pfGT3YSPd5TxMA5FxUxOYMyg2
hT09+79q9BrvSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:54 2026 by rpki-client