Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: OpnkdeEbI90pmJk9CXHlJBLlTH9JrOFXSQliK7Yir8k=
Subject key identifier: C5:72:EE:4E:7B:9A:3B:D5:4C:FD:63:8F:3E:7C:2C:BB:59:49:65:A1
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019D28F2A1857F7048D691645B80B70B9621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 156F
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: gWPXb045oOn2+Ussmi6F8ik+j1cIJr6KGT8FR87SPd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a1:85:7f:70:48:d6:91:64:5b:80:b7:0b:96:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=c572ee4e7b9a3bd54cfd638f3e7c2cbb594965a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:4a:87:84:84:b2:d4:d7:d1:7f:dd:84:7d:
88:20:7b:29:48:ce:26:07:89:b3:ac:4d:02:d3:5c:
52:47:40:a1:7c:75:30:83:5b:78:ff:ae:1f:82:ad:
02:f2:cd:d3:47:c0:3e:ea:1d:55:b1:45:aa:c9:8d:
7a:75:b4:42:cb:c8:2c:87:cf:8a:9f:78:5e:0e:75:
93:56:e8:0c:76:f0:e8:4f:42:f5:e1:59:f9:4a:93:
94:2b:1a:fa:93:61:c5:9d:01:79:7f:33:be:00:1b:
4b:83:4f:10:2b:d3:57:98:cf:35:d5:9e:10:6b:13:
82:67:06:91:cb:c7:63:87:15:f2:7c:a9:d9:c5:d7:
58:93:02:40:ba:3d:b7:6d:65:03:dc:14:22:51:6c:
f1:9b:2f:44:f0:2a:5c:97:7b:9d:94:b5:31:e4:02:
81:5a:7f:c7:2a:84:d2:33:ac:14:3e:bc:d8:f7:07:
11:1b:aa:25:7e:25:7e:35:cc:c1:f7:d5:58:80:15:
db:6a:b7:c6:9d:a3:74:a3:7f:b8:69:ca:50:a1:9c:
e0:b7:67:a1:8e:3f:1e:a9:9e:87:c4:21:a1:d3:1a:
29:3b:33:31:5a:c9:f8:64:ac:69:5b:85:c4:23:4f:
ff:e6:0b:c0:58:8d:75:82:69:c1:bc:1d:2f:f6:c8:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:EE:4E:7B:9A:3B:D5:4C:FD:63:8F:3E:7C:2C:BB:59:49:65:A1
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:34:72:45:5a:47:57:f3:30:23:a0:0e:17:86:7f:c2:25:c1:
4e:25:fc:85:1c:d4:d9:c4:61:58:ae:31:25:37:fd:66:9e:b3:
a5:b6:54:af:fc:f0:53:a7:f2:49:a5:89:bc:b2:c0:b3:64:f4:
24:f1:32:41:be:11:62:cb:53:83:21:1c:74:7a:7b:db:97:23:
3b:26:c2:94:35:6b:16:36:65:01:fe:e6:a4:a2:94:e5:96:7b:
f1:97:e7:14:5f:31:66:49:da:a2:81:0b:fe:43:5e:80:18:f9:
d6:db:6c:21:fd:c4:f1:a0:2b:31:14:4a:fc:b0:71:54:99:86:
6d:cb:91:21:f1:5c:e8:5c:e7:9f:e1:09:2c:68:ec:6f:66:fc:
91:09:1c:15:b4:87:14:98:9b:c3:6d:89:6f:60:62:d7:d5:f3:
b7:10:e2:bd:eb:5f:04:1a:cc:7f:25:a3:52:1a:22:1b:a3:78:
90:d1:95:b6:20:d7:cf:c3:31:1d:65:f8:7a:57:f1:c5:fe:5d:
a1:17:5c:38:35:7d:98:c5:fa:f1:1f:27:3b:68:34:0f:da:7e:
02:b5:de:89:89:7e:70:4e:b6:3b:0a:c0:0b:55:30:50:ac:a1:
76:87:74:bb:79:81:aa:7e:5d:84:4c:2a:ea:61:0c:12:9c:3c:
50:69:e4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8qGFf3BI1pFkW4C3C5YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk
NTE5ZGEwHhcNMjYwMzI2MDcwMTIyWhcNMjYwMzI3MDcwMTIyWjAzMTEwLwYDVQQD
EyhjNTcyZWU0ZTdiOWEzYmQ1NGNmZDYzOGYzZTdjMmNiYjU5NDk2NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtKh4SEstTX0X/dhH2IIHspSM4m
B4mzrE0C01xSR0ChfHUwg1t4/64fgq0C8s3TR8A+6h1VsUWqyY16dbRCy8gsh8+K
n3heDnWTVugMdvDoT0L14Vn5SpOUKxr6k2HFnQF5fzO+ABtLg08QK9NXmM811Z4Q
axOCZwaRy8djhxXyfKnZxddYkwJAuj23bWUD3BQiUWzxmy9E8Cpcl3udlLUx5AKB
Wn/HKoTSM6wUPrzY9wcRG6olfiV+NczB99VYgBXbarfGnaN0o3+4acpQoZzgt2eh
jj8eqZ6HxCGh0xopOzMxWsn4ZKxpW4XEI0//5gvAWI11gmnBvB0v9sjJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVy7k57mjvVTP1jjz58LLtZSWWhMB8GA1UdIwQY
MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt
Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw
LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzRyRVpH
V/MwI6AOF4Z/wiXBTiX8hRzU2cRhWK4xJTf9Zp6zpbZUr/zwU6fySaWJvLLAs2T0
JPEyQb4RYstTgyEcdHp725cjOybClDVrFjZlAf7mpKKU5ZZ78ZfnFF8xZknaooEL
/kNegBj51ttsIf3E8aArMRRK/LBxVJmGbcuRIfFc6Fznn+EJLGjsb2b8kQkcFbSH
FJibw22Jb2Bi19XztxDivetfBBrMfyWjUhoiG6N4kNGVtiDXz8MxHWX4elfxxf5d
oRdcODV9mMX68R8nO2g0D9p+ArXeiYl+cE62OwrAC1UwUKyhdod0u3mBqn5dhEwq
6mEMEpw8UGnksg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:22 2026 by rpki-client