Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: ckUQaCpf/ybLA0AO3EPDJ+pqTiMPdKUun1UuRemAB1E=
Subject key identifier: 35:03:C4:79:2E:32:A7:7B:E3:CE:37:1A:1D:4B:F1:5A:A2:7D:86:A5
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019D3752CA7A3A49AD59CEF320C701B54654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: 5UKl7JzlrMZFxZccNwb_HEFI_xs.roa (hash: XFtwBlqsUtFdMadWz8en37s8O8O+/h2aqDNRnI5q7sE=)
2: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: ScN6z4gecLnJQIwOTccV0XXxZPwMoJedIg1Rxzk+4gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ca:7a:3a:49:ad:59:ce:f3:20:c7:01:b5:46:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=3503c4792e32a77be3ce371a1d4bf15aa27d86a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:10:74:15:ff:86:8b:e2:53:1f:97:3d:5f:
26:18:2b:1d:28:94:1e:5c:37:e2:30:c9:88:78:e9:
ba:9d:f9:e8:44:90:db:55:41:ca:e8:ef:ab:55:f4:
93:67:e9:47:f6:8f:b8:6a:9b:57:8c:8b:5a:25:43:
e6:9b:ca:49:43:33:40:b2:21:b2:9b:ba:b3:3e:c0:
69:a8:06:45:4d:43:d5:93:83:c0:5e:2c:65:85:39:
14:87:bc:99:34:99:b2:5e:26:65:33:91:54:18:35:
29:78:09:8e:2e:12:2e:d7:b6:f9:79:bf:55:02:46:
90:13:64:1b:aa:29:0a:39:fa:ee:1e:b7:fc:e9:c1:
60:45:4c:e4:ea:45:de:da:b7:8d:fa:23:bf:6d:66:
a5:6c:12:c1:52:35:fd:92:20:03:6c:1e:41:cd:41:
26:6b:89:2c:1a:68:99:65:c9:34:55:0c:c5:2e:7c:
f0:d6:7f:fd:7e:34:d4:bc:04:4d:d4:50:bf:1a:6f:
b8:62:e5:23:65:91:fb:76:05:5c:cd:b4:ae:c8:5c:
f8:d8:78:8d:44:60:77:07:d4:e6:31:d8:d1:f2:7e:
5b:ea:32:97:c9:28:ca:a8:af:f8:ee:42:ac:c0:3a:
b0:bc:de:be:38:b8:fc:a0:3b:39:b5:b8:69:be:e4:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:C4:79:2E:32:A7:7B:E3:CE:37:1A:1D:4B:F1:5A:A2:7D:86:A5
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:40:99:c7:6a:a7:66:fe:a1:1a:38:31:5f:26:73:fa:f2:80:
5f:40:a7:8c:6f:c5:2c:51:0d:78:a4:b2:b3:a8:e6:5b:62:40:
30:6b:62:bd:b3:3e:55:6d:51:46:76:01:96:38:e3:d4:e8:04:
73:c8:e7:30:f8:55:3e:48:d6:37:5c:f9:6a:a8:02:5e:e1:1f:
e3:c7:02:c1:b5:1a:05:e1:db:81:f0:ed:61:51:5b:2e:8c:6f:
3b:a3:82:52:b1:f6:af:1b:ce:71:e6:3a:61:e2:73:a6:f5:3a:
63:a1:74:44:21:ab:5d:42:c3:84:4c:51:32:2d:49:4c:04:0a:
89:b7:b1:f3:38:a4:57:d9:fd:94:8e:de:56:f5:22:47:04:92:
e2:58:28:e9:9b:19:76:6a:dd:ff:70:98:eb:5c:c5:55:52:3c:
16:ed:2b:8f:ad:32:82:d4:f4:18:45:6a:ab:1b:00:a3:77:eb:
fe:75:dc:23:6d:ee:66:36:9b:b3:bb:02:ce:1c:2e:42:7f:f0:
38:f3:0b:a0:02:9f:a1:0e:3a:9a:b0:cc:88:36:1d:dc:d3:14:
69:7e:81:88:57:fd:1f:e0:44:d7:af:3f:03:88:97:02:f6:9e:
52:80:8f:fa:e3:f2:d5:3f:26:a6:e1:a1:c5:c1:e7:d6:23:2a:
c1:00:24:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Usp6OkmtWc7zIMcBtUZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjYwMzI5MDIwMTA1WhcNMjYwMzMwMDIwMTA1WjAzMTEwLwYDVQQD
EygzNTAzYzQ3OTJlMzJhNzdiZTNjZTM3MWExZDRiZjE1YWEyN2Q4NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kIQdBX/hoviUx+XPV8mGCsdKJQe
XDfiMMmIeOm6nfnoRJDbVUHK6O+rVfSTZ+lH9o+4aptXjItaJUPmm8pJQzNAsiGy
m7qzPsBpqAZFTUPVk4PAXixlhTkUh7yZNJmyXiZlM5FUGDUpeAmOLhIu17b5eb9V
AkaQE2QbqikKOfruHrf86cFgRUzk6kXe2reN+iO/bWalbBLBUjX9kiADbB5BzUEm
a4ksGmiZZck0VQzFLnzw1n/9fjTUvARN1FC/Gm+4YuUjZZH7dgVczbSuyFz42HiN
RGB3B9TmMdjR8n5b6jKXySjKqK/47kKswDqwvN6+OLj8oDs5tbhpvuSRHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUDxHkuMqd74843Gh1L8VqifYalMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZECZx2qn
Zv6hGjgxXyZz+vKAX0CnjG/FLFENeKSys6jmW2JAMGtivbM+VW1RRnYBljjj1OgE
c8jnMPhVPkjWN1z5aqgCXuEf48cCwbUaBeHbgfDtYVFbLoxvO6OCUrH2rxvOceY6
YeJzpvU6Y6F0RCGrXULDhExRMi1JTAQKibex8zikV9n9lI7eVvUiRwSS4lgo6ZsZ
dmrd/3CY61zFVVI8Fu0rj60ygtT0GEVqqxsAo3fr/nXcI23uZjabs7sCzhwuQn/w
OPMLoAKfoQ46mrDMiDYd3NMUaX6BiFf9H+BE168/A4iXAvaeUoCP+uPy1T8mpuGh
xcHn1iMqwQAk6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:03 2026 by rpki-client