Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: 9GCMeaKsFgj84MYHRy/m3SXvh5IVmNFv9UVphoV4los=
Subject key identifier: E1:A5:33:83:48:D3:52:56:81:EC:A8:77:DF:9C:E5:C3:05:2E:4C:3C
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019D28BB426DE5C0B2D2555BF9C15A1EA05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 063B
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa (hash: fCpVVld0L94vFLqVKGMCfHN/hOXwKxcQlDEoGOWDUFo=)
2: XExavfpXuaZ3MydZbyDnyFn5ni0.roa (hash: WQdTsTZhStmdezt2VotpAadyLft0mMYrZPTmmKNNRro=)
3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: pO4H3/KoTtmh2/LY9xz1H5DMbIPq3w0ESEAb0+1XjZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:42:6d:e5:c0:b2:d2:55:5b:f9:c1:5a:1e:a0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=e1a5338348d3525681eca877df9ce5c3052e4c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:f1:c4:53:ac:f8:a7:f5:5f:1d:7b:5e:0c:
37:f4:7e:37:0c:d6:96:3b:dc:b4:fc:41:14:ff:b8:
b6:17:47:c8:cb:3a:ea:06:84:a9:4c:5c:7b:3d:63:
a3:68:c6:09:97:4d:70:7d:4d:af:96:b7:4b:16:e3:
89:1a:9f:c8:cd:1d:bf:72:eb:d9:0b:92:d3:c6:0e:
15:93:26:96:82:95:af:9b:d4:2e:99:f7:e9:88:51:
96:14:64:e8:a7:2d:62:d4:10:e2:7f:99:60:a2:1b:
db:67:ab:35:07:cc:b8:02:86:0c:00:b4:da:7c:17:
b3:07:f1:a5:19:f2:10:54:80:6f:a3:18:29:22:1c:
e8:99:d5:ff:04:b0:fb:85:37:f8:cd:39:e1:a2:76:
b8:13:56:b1:c9:84:75:31:ef:55:91:57:0f:33:95:
7e:f2:be:29:bb:2e:ee:63:94:89:47:4c:8a:89:46:
65:f1:0d:bb:7f:8e:25:f8:27:35:2d:f2:91:51:28:
02:9b:23:4e:77:2d:cf:51:12:a1:2d:dc:cf:8b:88:
a5:f2:f1:c2:62:1a:25:f0:4a:60:68:2c:20:be:75:
47:e9:16:66:29:ae:5f:22:0f:ed:7e:af:16:36:1f:
cf:64:e3:cb:0b:15:be:d2:b2:6a:0e:46:18:65:e6:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:33:83:48:D3:52:56:81:EC:A8:77:DF:9C:E5:C3:05:2E:4C:3C
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:00:f6:64:2a:fe:47:09:d5:3a:d6:b3:d7:a5:27:e9:9e:c8:
84:a1:8d:29:b9:e2:bd:8e:e4:4e:bc:21:04:12:a4:dd:9a:b9:
48:74:02:72:9d:b3:60:0e:ba:9a:42:22:b6:2d:e8:c3:1f:7e:
cd:7f:c4:fa:68:f0:6e:28:08:3e:32:28:12:a6:57:9c:73:7f:
be:d7:61:6e:05:db:e0:ee:4b:7d:4c:c0:94:8a:89:ae:e5:ac:
09:35:5f:03:a9:25:7e:77:85:30:07:07:2b:0c:05:b2:d7:ff:
b3:c0:52:6f:59:98:ba:72:93:00:77:d4:eb:7f:36:16:26:15:
85:4b:ca:7d:cd:b3:c9:ef:ae:44:24:65:a9:c9:c1:8f:05:37:
ce:fc:86:28:a6:a0:a1:dc:cd:71:a4:96:70:8d:d2:a5:8b:e0:
40:a6:b1:21:45:cc:b7:48:c8:c9:b0:2d:37:6e:f0:84:71:f5:
e3:8c:d2:d6:d7:f6:7b:4d:4b:c0:ab:41:87:0a:a3:f0:ec:69:
87:05:d8:18:39:52:81:8a:c2:58:79:a8:3a:90:3d:09:f1:99:
14:be:a2:49:89:c0:7a:f0:4a:4a:4a:3c:75:53:db:3a:b0:9b:
43:f5:e8:06:21:2e:9d:4f:81:85:0e:3e:24:2c:5a:78:9f:ad:
fc:9b:26:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0Jt5cCy0lVb+cFaHqBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy
ODE2OGQwHhcNMjYwMzI2MDYwMDUzWhcNMjYwMzI3MDYwMDUzWjAzMTEwLwYDVQQD
EyhlMWE1MzM4MzQ4ZDM1MjU2ODFlY2E4NzdkZjljZTVjMzA1MmU0YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUvxxFOs+Kf1Xx17Xgw39H43DNaW
O9y0/EEU/7i2F0fIyzrqBoSpTFx7PWOjaMYJl01wfU2vlrdLFuOJGp/IzR2/cuvZ
C5LTxg4VkyaWgpWvm9QumffpiFGWFGTopy1i1BDif5lgohvbZ6s1B8y4AoYMALTa
fBezB/GlGfIQVIBvoxgpIhzomdX/BLD7hTf4zTnhona4E1axyYR1Me9VkVcPM5V+
8r4puy7uY5SJR0yKiUZl8Q27f44l+Cc1LfKRUSgCmyNOdy3PURKhLdzPi4il8vHC
Yhol8EpgaCwgvnVH6RZmKa5fIg/tfq8WNh/PZOPLCxW+0rJqDkYYZeYQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGlM4NI01JWgeyod9+c5cMFLkw8MB8GA1UdIwQY
MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt
YzdlMjUyMGM0Y2VhLzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh
LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgD2ZCr+
RwnVOtaz16Un6Z7IhKGNKbnivY7kTrwhBBKk3Zq5SHQCcp2zYA66mkIiti3owx9+
zX/E+mjwbigIPjIoEqZXnHN/vtdhbgXb4O5LfUzAlIqJruWsCTVfA6klfneFMAcH
KwwFstf/s8BSb1mYunKTAHfU6382FiYVhUvKfc2zye+uRCRlqcnBjwU3zvyGKKag
odzNcaSWcI3SpYvgQKaxIUXMt0jIybAtN27whHH144zS1tf2e01LwKtBhwqj8Oxp
hwXYGDlSgYrCWHmoOpA9CfGZFL6iSYnAevBKSko8dVPbOrCbQ/XoBiEunU+BhQ4+
JCxaeJ+t/Jsmpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:03 2026 by rpki-client