Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: JUIKoMs9pbTVlwSf+Gj/00UwVYPbN6XowYuo/289OdY=
Subject key identifier: DE:A3:C1:FE:C5:88:1E:4C:5B:92:B2:75:31:E2:D1:AC:52:3C:DF:5F
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019D39AE74B5B4A871F71ACD9DB172A5AAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: 2Y0vePsYMdGLC2k19HfRsz12tcc.roa (hash: 9OMDv7NsOhqDHoVNou730t3Tke6hQqKOi0fzyySfDqc=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: LHJxaUCajwR9niMvnDiZ4+rw1zxbeiXS0YgIvZ6Bq+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:74:b5:b4:a8:71:f7:1a:cd:9d:b1:72:a5:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=dea3c1fec5881e4c5b92b27531e2d1ac523cdf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:98:15:a1:90:d7:7a:0d:fd:3a:90:67:92:
ed:fd:02:23:db:87:71:03:b5:af:d1:5f:b3:ec:95:
c7:45:f6:20:55:76:cb:ab:68:3f:ed:90:18:b3:fd:
f6:4d:89:68:15:f2:f8:3b:7d:a5:58:66:f4:2b:02:
8b:dd:40:a8:eb:48:b2:3a:60:15:02:fd:a0:d5:a8:
70:7a:2f:a0:89:72:4f:45:e4:7f:90:90:b2:71:a8:
5d:44:a0:49:eb:cd:5d:32:0c:88:45:5f:35:8d:47:
7b:0b:00:17:7f:d9:52:ab:56:96:ba:cd:54:6b:db:
2c:d3:c3:7c:7c:c2:a0:e5:27:5f:e3:ae:28:ce:51:
b0:5f:61:32:8e:f4:7a:22:5a:5f:d6:5e:47:c8:4c:
0d:b8:39:89:7d:9a:bc:bd:fc:44:f9:d5:74:b7:8f:
1f:e5:e2:59:00:83:48:d0:68:38:17:ae:20:e9:30:
fb:f3:a7:4d:6f:ff:be:91:e1:6b:ee:2d:71:79:32:
6f:30:e0:6a:79:a5:86:e0:51:8e:3a:ae:fa:ca:2d:
8d:8c:5d:43:6e:e9:ff:51:9b:ee:0b:77:c5:8d:ce:
41:0e:47:0a:92:f8:34:c0:07:d2:71:55:5a:24:73:
67:05:d4:c4:2f:36:c4:c0:ee:57:1e:5d:4c:20:75:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:C1:FE:C5:88:1E:4C:5B:92:B2:75:31:E2:D1:AC:52:3C:DF:5F
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:e0:3d:b7:9c:8f:70:78:61:2f:58:0a:a9:52:2a:9e:9b:
30:e7:18:a9:d4:ab:a2:dc:3a:20:e4:cc:9e:cd:1c:05:31:38:
93:ad:80:3a:3c:ee:b5:55:9c:31:67:a3:41:22:6e:60:87:38:
52:e9:28:4b:5f:a1:cf:f5:65:11:7f:ec:88:6b:77:7b:2f:14:
10:dc:f5:8e:8c:38:c5:ac:98:cb:8b:a7:f8:08:45:2c:dd:37:
b2:b3:5d:84:42:c1:e7:a1:38:1d:85:25:80:9f:f8:c9:ad:10:
bb:47:a4:e5:be:9d:70:21:aa:b8:5f:4c:06:da:10:50:bc:0f:
41:b4:18:17:4a:22:94:43:f5:bc:fe:c8:6c:45:6a:6c:01:23:
dc:96:cb:e7:b6:42:28:60:c6:3b:49:50:51:02:4a:b8:c9:84:
31:5b:7e:35:cd:18:e2:4a:28:d8:4f:20:00:d4:60:bf:e2:b2:
d5:2c:87:c0:c4:de:e5:09:04:58:92:d9:e1:39:4c:2b:11:c5:
26:2c:35:87:d4:14:87:0c:de:48:ae:06:a0:04:a5:4d:2f:34:
fa:96:7b:27:f9:d6:a6:26:a0:11:11:7e:22:10:0e:a0:88:12:
92:74:b3:5e:27:6d:45:f8:ae:f8:09:e3:02:6c:3a:04:d1:03:
84:20:f9:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnS1tKhx9xrNnbFyparWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjYwMzI5MTMwMDI3WhcNMjYwMzMwMTMwMDI3WjAzMTEwLwYDVQQD
EyhkZWEzYzFmZWM1ODgxZTRjNWI5MmIyNzUzMWUyZDFhYzUyM2NkZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxOYFaGQ13oN/TqQZ5Lt/QIj24dx
A7Wv0V+z7JXHRfYgVXbLq2g/7ZAYs/32TYloFfL4O32lWGb0KwKL3UCo60iyOmAV
Av2g1ahwei+giXJPReR/kJCycahdRKBJ681dMgyIRV81jUd7CwAXf9lSq1aWus1U
a9ss08N8fMKg5Sdf464ozlGwX2EyjvR6Ilpf1l5HyEwNuDmJfZq8vfxE+dV0t48f
5eJZAINI0Gg4F64g6TD786dNb/++keFr7i1xeTJvMOBqeaWG4FGOOq76yi2NjF1D
bun/UZvuC3fFjc5BDkcKkvg0wAfScVVaJHNnBdTELzbEwO5XHl1MIHV/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6jwf7FiB5MW5KydTHi0axSPN9fMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR/gPbec
j3B4YS9YCqlSKp6bMOcYqdSrotw6IOTMns0cBTE4k62AOjzutVWcMWejQSJuYIc4
UukoS1+hz/VlEX/siGt3ey8UENz1jow4xayYy4un+AhFLN03srNdhELB56E4HYUl
gJ/4ya0Qu0ek5b6dcCGquF9MBtoQULwPQbQYF0oilEP1vP7IbEVqbAEj3JbL57ZC
KGDGO0lQUQJKuMmEMVt+Nc0Y4koo2E8gANRgv+Ky1SyHwMTe5QkEWJLZ4TlMKxHF
Jiw1h9QUhwzeSK4GoASlTS80+pZ7J/nWpiagERF+IhAOoIgSknSzXidtRfiu+Anj
Amw6BNEDhCD5VA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:07 2026 by rpki-client