Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: 6IxPFPP1bLwACwvrZLYn2PLinkBmnE2sWBrzWiOOjGQ=
Subject key identifier: D9:09:09:0E:FE:99:ED:16:FD:E0:28:30:E1:F8:C5:BE:FD:21:D1:18
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019D39E58CFFC5697854CCECB485787FB152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:38 +0000
Manifest this update: Sun 29 Mar 2026 14:00:38 +0000
Manifest next update: Mon 30 Mar 2026 14:00:38 +0000
Files and hashes: 1: LgvbuVV_52WynAHYpwvRHpZVnNI.roa (hash: 2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: rY1nS38ehB+QMkc6iVmeJKl3qbcogpxEit1ym4SXWts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:8c:ff:c5:69:78:54:cc:ec:b4:85:78:7f:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Mar 29 14:00:38 2026 GMT
Not After : Mar 30 14:00:38 2026 GMT
Subject: CN=d909090efe99ed16fde02830e1f8c5befd21d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:7a:48:d7:62:0d:c0:94:8f:32:74:77:90:
bb:4e:2a:9f:d9:e8:2f:5f:a1:4c:b8:5c:9d:7e:19:
d3:c7:d4:0e:61:1b:51:84:fd:d8:bd:c5:4a:f7:2a:
83:ac:3c:3f:cd:ab:9a:b0:48:74:3a:42:cb:67:6e:
83:f6:be:06:d8:4d:fb:cd:79:7b:ca:4f:44:61:11:
3f:67:61:ae:98:a3:a5:9e:bb:12:71:c9:57:25:27:
10:d8:e4:8b:98:f9:77:6d:55:21:a8:f5:d3:cb:22:
69:e1:3e:37:ff:d7:ec:06:8b:6f:82:55:91:f4:49:
e4:61:46:33:2b:5e:e0:4d:24:82:c6:84:92:ca:40:
b7:b4:52:c2:4a:9b:ce:fb:3b:7f:44:92:aa:39:e9:
ea:94:e1:7f:a7:b2:db:69:41:70:71:f4:76:cf:ec:
ee:9c:14:ed:fe:a6:3d:f6:d0:0d:12:78:7f:7a:b5:
75:85:4a:ff:5b:30:8f:78:81:4a:55:4a:9e:26:03:
b7:03:35:e8:7c:28:a0:60:75:dd:aa:aa:59:40:63:
1c:a6:c0:e6:a2:67:93:8f:07:be:59:53:7e:e1:76:
c2:b8:cf:0b:a5:f9:99:fa:74:62:17:54:7d:3d:c2:
32:bb:83:fb:6a:2b:ad:93:80:d9:7c:57:94:4c:2e:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:09:0E:FE:99:ED:16:FD:E0:28:30:E1:F8:C5:BE:FD:21:D1:18
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fe:48:b2:e5:92:8f:65:13:98:05:ca:c9:62:38:2d:ef:1c:
43:c4:4f:1d:0f:67:cc:2f:99:09:0d:a6:e8:d3:d0:4c:1d:2e:
0c:59:ce:46:cc:36:3b:3b:b8:0f:dc:55:25:43:56:2e:36:fa:
2e:2f:ab:d4:dd:4b:27:7b:ff:3f:fc:66:12:24:cc:9f:17:19:
8d:19:8f:2d:bd:bd:a8:6e:72:99:d9:06:1f:2c:02:ed:1b:f3:
48:dc:1e:f2:b6:cf:f8:16:54:28:0f:ae:bd:e9:5e:51:3f:0d:
fc:d7:3e:e6:ca:3b:64:d6:e2:15:2a:14:f1:21:28:0d:fe:8c:
80:96:9b:87:64:ae:15:c1:08:07:25:78:a5:9f:bd:59:23:05:
52:fb:cf:61:1f:0a:3a:cd:ea:9a:a4:ab:82:ff:7d:01:4d:99:
0a:7b:37:18:97:3d:c0:5c:44:d6:69:d7:18:44:32:70:66:84:
56:3f:aa:6b:84:d6:42:2b:9f:36:41:f2:71:05:21:66:fb:2a:
d8:bd:69:dc:c4:e3:b9:2f:4e:3b:e7:e0:d6:3d:ff:b6:03:39:
50:79:22:46:89:32:70:c3:cd:aa:48:3c:7c:c9:7b:6b:be:c8:
af:d4:96:44:00:a8:f0:f1:40:05:ad:9a:d7:53:18:ee:30:11:
77:32:3f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055Yz/xWl4VMzstIV4f7FSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjYwMzI5MTQwMDM4WhcNMjYwMzMwMTQwMDM4WjAzMTEwLwYDVQQD
EyhkOTA5MDkwZWZlOTllZDE2ZmRlMDI4MzBlMWY4YzViZWZkMjFkMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F96SNdiDcCUjzJ0d5C7Tiqf2egv
X6FMuFydfhnTx9QOYRtRhP3YvcVK9yqDrDw/zauasEh0OkLLZ26D9r4G2E37zXl7
yk9EYRE/Z2GumKOlnrsScclXJScQ2OSLmPl3bVUhqPXTyyJp4T43/9fsBotvglWR
9EnkYUYzK17gTSSCxoSSykC3tFLCSpvO+zt/RJKqOenqlOF/p7LbaUFwcfR2z+zu
nBTt/qY99tANEnh/erV1hUr/WzCPeIFKVUqeJgO3AzXofCigYHXdqqpZQGMcpsDm
omeTjwe+WVN+4XbCuM8LpfmZ+nRiF1R9PcIyu4P7aiutk4DZfFeUTC5AbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkJCQ7+me0W/eAoMOH4xb79IdEYMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1
LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP5IsuWS
j2UTmAXKyWI4Le8cQ8RPHQ9nzC+ZCQ2m6NPQTB0uDFnORsw2Ozu4D9xVJUNWLjb6
Li+r1N1LJ3v/P/xmEiTMnxcZjRmPLb29qG5ymdkGHywC7RvzSNwe8rbP+BZUKA+u
veleUT8N/Nc+5so7ZNbiFSoU8SEoDf6MgJabh2SuFcEIByV4pZ+9WSMFUvvPYR8K
Os3qmqSrgv99AU2ZCns3GJc9wFxE1mnXGEQycGaEVj+qa4TWQiufNkHycQUhZvsq
2L1p3MTjuS9OO+fg1j3/tgM5UHkiRokycMPNqkg8fMl7a77Ir9SWRACo8PFABa2a
11MY7jARdzI/pA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:22 2026 by rpki-client