Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: TTYi/kPTCf4JmJlutK6CpmuuzFp0z/DUXgbNg0oumZs=
Subject key identifier: E7:9A:02:FA:72:87:A2:B1:06:06:9F:4C:6B:54:28:4E:E7:DE:CC:F4
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 019D37F6D9FD36D8A8056659132E53E3B351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:17 +0000
Manifest this update: Sun 29 Mar 2026 05:00:17 +0000
Manifest next update: Mon 30 Mar 2026 05:00:17 +0000
Files and hashes: 1: ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa (hash: oseBqsFumaa6CAjnqsxKGT9XuEQTrrxmktu1Tv62S6I=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: 1/b5BgFmkRn2CapC4jiCRFmdIqZ2rbq5iKEOIVl6J5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:d9:fd:36:d8:a8:05:66:59:13:2e:53:e3:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Mar 29 05:00:17 2026 GMT
Not After : Mar 30 05:00:17 2026 GMT
Subject: CN=e79a02fa7287a2b106069f4c6b54284ee7deccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:a5:2f:1e:79:67:d3:bf:79:38:80:db:34:9c:
2d:a3:e8:3e:62:36:4b:ab:2b:e4:d0:0f:dd:d6:23:
d6:87:74:fb:bb:61:cc:6f:a8:80:2c:32:e8:1a:70:
28:0b:9f:ca:bc:44:fe:bf:59:44:db:4c:49:15:fb:
0d:64:19:5c:1a:66:df:fb:07:1d:5e:3a:fb:0a:1f:
60:e3:92:42:43:bd:21:8b:84:6d:19:56:cf:b7:68:
f9:39:1c:9d:9a:a8:52:bb:07:9f:4e:94:10:1b:8c:
22:42:66:1a:35:cf:37:15:4d:5c:4d:d9:cf:fa:f6:
b2:54:2f:4d:90:10:fe:3a:73:80:67:8e:aa:e8:3d:
c8:cc:86:a8:07:5a:f9:50:7d:7e:73:64:51:a9:e8:
b1:84:7c:5b:d9:67:c4:7b:71:8a:fe:3d:a2:4d:08:
3b:1d:9c:0c:35:b4:05:dc:44:2f:cb:c6:41:15:a3:
7b:a0:f6:fc:73:ac:8b:96:6a:ac:55:a2:0a:e1:fe:
dc:ac:51:40:3c:82:45:e2:da:b5:d0:60:f0:c3:20:
ef:d3:65:2e:0a:2f:ce:72:78:82:bc:75:a5:a5:69:
ac:51:2c:3f:3c:12:05:ad:32:10:62:d2:51:e0:0f:
90:f8:aa:3d:8f:5c:a4:8c:bf:96:c8:76:5a:be:00:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:02:FA:72:87:A2:B1:06:06:9F:4C:6B:54:28:4E:E7:DE:CC:F4
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:10:99:18:fe:c2:f5:0a:f6:3c:52:34:33:c3:05:fd:6c:
ab:52:a0:c7:53:f6:1c:36:db:09:20:bc:84:b5:a6:4e:31:56:
ee:08:84:8a:a4:08:5b:10:79:f3:d7:26:10:2a:ad:9e:5a:b6:
18:8a:23:4b:de:e6:f4:53:a3:f8:5f:95:6b:a6:b1:ce:6d:e4:
5b:bd:2c:69:45:da:03:02:64:e4:ed:a0:50:19:13:e8:b2:c8:
a6:c8:14:d8:3d:2c:15:b6:23:13:a8:03:fe:d1:a9:20:7f:ec:
e7:de:56:75:8f:ee:5d:60:5b:f9:6e:e3:81:84:00:37:23:aa:
96:e5:c9:c9:87:26:a6:96:cc:51:56:58:6c:76:71:5f:69:ab:
92:91:16:dc:98:1d:1c:c8:8f:1e:1b:86:f7:5d:33:02:02:73:
50:94:65:07:06:03:2d:43:e7:3c:23:af:5d:67:66:e0:13:46:
f8:67:5d:26:07:b3:0f:40:e1:f1:1d:e1:f0:63:fd:4b:19:b5:
2d:b9:50:57:73:38:8f:77:c1:11:f5:f6:00:3a:14:6f:18:9e:
98:3c:1e:7b:ba:b6:60:9b:2c:67:cf:1f:cd:e4:0f:08:53:72:
c1:ff:db:58:39:d0:cb:c8:33:2e:a5:8b:5d:32:91:88:dc:4b:
0b:fd:df:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039tn9NtioBWZZEy5T47NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGQ1YTQwNzU0MjhhN2ZjOWFjOTRlNmQyYTJkOWE5OTJl
ZjQ4NTMwHhcNMjYwMzI5MDUwMDE3WhcNMjYwMzMwMDUwMDE3WjAzMTEwLwYDVQQD
EyhlNzlhMDJmYTcyODdhMmIxMDYwNjlmNGM2YjU0Mjg0ZWU3ZGVjY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/6UvHnln0795OIDbNJwto+g+YjZL
qyvk0A/d1iPWh3T7u2HMb6iALDLoGnAoC5/KvET+v1lE20xJFfsNZBlcGmbf+wcd
Xjr7Ch9g45JCQ70hi4RtGVbPt2j5ORydmqhSuwefTpQQG4wiQmYaNc83FU1cTdnP
+vayVC9NkBD+OnOAZ46q6D3IzIaoB1r5UH1+c2RRqeixhHxb2WfEe3GK/j2iTQg7
HZwMNbQF3EQvy8ZBFaN7oPb8c6yLlmqsVaIK4f7crFFAPIJF4tq10GDwwyDv02Uu
Ci/OcniCvHWlpWmsUSw/PBIFrTIQYtJR4A+Q+Ko9j1ykjL+WyHZavgB82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeaAvpyh6KxBgafTGtUKE7n3sz0MB8GA1UdIwQY
MBaAFGLdWkB1Qop/yayU5tKi2amS70hTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEt
NjVmODkwMGU1YzgyLzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEtNjVmODkwMGU1Yzgy
LzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUasQmRj+
wvUK9jxSNDPDBf1sq1Kgx1P2HDbbCSC8hLWmTjFW7giEiqQIWxB589cmECqtnlq2
GIojS97m9FOj+F+Va6axzm3kW70saUXaAwJk5O2gUBkT6LLIpsgU2D0sFbYjE6gD
/tGpIH/s595WdY/uXWBb+W7jgYQANyOqluXJyYcmppbMUVZYbHZxX2mrkpEW3Jgd
HMiPHhuG910zAgJzUJRlBwYDLUPnPCOvXWdm4BNG+GddJgezD0Dh8R3h8GP9Sxm1
LblQV3M4j3fBEfX2ADoUbxiemDwee7q2YJssZ88fzeQPCFNywf/bWDnQy8gzLqWL
XTKRiNxLC/3fIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:55 2026 by rpki-client