Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: /IebS1CQ454jF2xF7VBwDOyCRl2z3RWoeMVFjEo8vKU=
Subject key identifier: 76:99:F2:B7:18:3C:2B:4F:1A:6E:77:53:6A:B3:43:0F:82:99:D6:E2
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019D3A1C92C47E95282A4AE55C208F7C5331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0E4A
Signing time: Sun 29 Mar 2026 15:00:44 +0000
Manifest this update: Sun 29 Mar 2026 15:00:44 +0000
Manifest next update: Mon 30 Mar 2026 15:00:44 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: SAaBwuCxIIPSOWOjMlHESQD1QUUstX8HRhBR1xg30uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:92:c4:7e:95:28:2a:4a:e5:5c:20:8f:7c:53:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Mar 29 15:00:44 2026 GMT
Not After : Mar 30 15:00:44 2026 GMT
Subject: CN=7699f2b7183c2b4f1a6e77536ab3430f8299d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:e1:e5:8e:b3:3c:5f:f6:10:2c:bd:6b:dd:
cb:ae:45:40:7d:07:46:03:ac:e1:8a:57:c9:dd:50:
01:b1:b0:3d:92:e2:7f:47:84:9f:a2:d4:df:31:ba:
09:c9:87:56:69:da:38:69:51:c5:fd:95:0a:1b:e3:
f9:32:51:83:0d:b6:e9:29:77:b3:e8:8c:7a:d0:78:
c7:75:91:23:65:8b:66:bf:5c:1e:9e:a6:c9:ac:e2:
91:65:04:d0:c3:6a:a0:a7:7d:e1:10:d2:a0:b2:8c:
dc:4d:23:49:e1:de:68:fa:f0:ab:68:42:a9:bc:2c:
9c:b9:86:70:8f:95:e3:a8:81:44:f8:53:a0:29:2c:
ef:9f:ee:69:6a:76:45:14:1b:a2:b5:27:33:16:d2:
bb:d8:c5:26:7c:ac:83:86:fa:c2:ef:47:a7:00:86:
90:29:cf:84:ba:df:5e:8c:3e:5b:d2:70:d4:07:66:
b6:18:2e:0c:29:32:0f:a0:89:66:e5:9a:11:99:0a:
3b:b4:c4:32:5a:d4:8e:43:d9:84:12:c5:0c:84:28:
4e:b4:09:0e:0f:1e:39:cd:c0:98:8e:c2:ec:5b:c8:
3e:bc:c2:4f:a0:1c:14:d3:3c:2c:b3:be:11:07:40:
ff:35:7a:43:2a:c5:c0:44:65:47:a5:9d:1b:c6:73:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:F2:B7:18:3C:2B:4F:1A:6E:77:53:6A:B3:43:0F:82:99:D6:E2
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:40:31:e7:3a:7b:da:5c:d3:00:7d:99:88:fc:74:90:80:
9a:3f:f6:e6:68:63:0c:6f:35:c8:f2:a8:7f:05:6f:4c:5e:5e:
8c:fe:2d:05:a5:14:86:0b:d4:3d:3b:1c:24:e1:c9:c2:d1:55:
0d:bc:8b:df:35:06:60:4b:16:a4:a7:be:0c:a8:66:18:ba:2f:
cc:2e:be:65:07:eb:04:6d:d5:c1:d6:ca:36:4d:fe:b9:c1:bd:
b7:5d:c3:45:af:f4:62:f5:56:a4:17:27:2e:3a:dd:2c:80:25:
da:e3:2a:52:d1:a1:a9:63:02:af:59:88:41:f6:74:3f:7a:52:
10:86:8b:8c:ce:7e:1e:97:68:b7:0c:32:f2:d8:a0:1f:b9:80:
b4:97:d8:d7:17:f1:59:b5:e3:8b:ea:65:ad:52:4e:da:5d:9b:
b5:2f:f2:f5:b6:da:d6:a0:85:6d:83:6b:f5:3c:f6:53:af:58:
1f:b7:16:f3:74:3c:d6:3d:a8:af:43:45:df:69:1d:11:be:c9:
3c:24:c3:7c:76:91:e2:35:7e:34:32:02:65:21:69:08:2b:8e:
4e:71:2a:2f:a9:84:8e:1e:69:a7:cf:2c:3f:dc:0f:b2:e6:71:
cd:e2:38:70:97:d2:59:a7:ed:04:d3:00:cf:91:09:65:47:d5:
58:ec:a1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HJLEfpUoKkrlXCCPfFMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzFkY2Y0YzAyMzQ2N2RiM2JmMmVlZjNkZDE1YjJlZmVl
YjJiZDcwHhcNMjYwMzI5MTUwMDQ0WhcNMjYwMzMwMTUwMDQ0WjAzMTEwLwYDVQQD
Eyg3Njk5ZjJiNzE4M2MyYjRmMWE2ZTc3NTM2YWIzNDMwZjgyOTlkNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCrh5Y6zPF/2ECy9a93LrkVAfQdG
A6zhilfJ3VABsbA9kuJ/R4SfotTfMboJyYdWado4aVHF/ZUKG+P5MlGDDbbpKXez
6Ix60HjHdZEjZYtmv1wenqbJrOKRZQTQw2qgp33hENKgsozcTSNJ4d5o+vCraEKp
vCycuYZwj5XjqIFE+FOgKSzvn+5panZFFBuitSczFtK72MUmfKyDhvrC70enAIaQ
Kc+Eut9ejD5b0nDUB2a2GC4MKTIPoIlm5ZoRmQo7tMQyWtSOQ9mEEsUMhChOtAkO
Dx45zcCYjsLsW8g+vMJPoBwU0zwss74RB0D/NXpDKsXARGVHpZ0bxnPlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaZ8rcYPCtPGm53U2qzQw+CmdbiMB8GA1UdIwQY
MBaAFMjB3PTAI0Z9s78u7z3RWy7+6yvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMt
NDRkOTJkZTQzOGM5LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMtNDRkOTJkZTQzOGM5
LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOhAMec6
e9pc0wB9mYj8dJCAmj/25mhjDG81yPKofwVvTF5ejP4tBaUUhgvUPTscJOHJwtFV
DbyL3zUGYEsWpKe+DKhmGLovzC6+ZQfrBG3VwdbKNk3+ucG9t13DRa/0YvVWpBcn
LjrdLIAl2uMqUtGhqWMCr1mIQfZ0P3pSEIaLjM5+Hpdotwwy8tigH7mAtJfY1xfx
WbXji+plrVJO2l2btS/y9bba1qCFbYNr9Tz2U69YH7cW83Q81j2or0NF32kdEb7J
PCTDfHaR4jV+NDICZSFpCCuOTnEqL6mEjh5pp88sP9wPsuZxzeI4cJfSWaftBNMA
z5EJZUfVWOyhRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:47 2026 by rpki-client