Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: 2BTqUn+GJgP7CEYQWOd1maWwdFt9CDaKuUsD5rKqPOI=
Subject key identifier: 97:33:7C:74:63:B0:19:C6:00:54:C5:32:32:3E:1C:E7:C2:F5:D4:69
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019D371B569BE174F92042B260D136DD5123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1502
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: HtBRqYT9ggBE54yKG09pkUZe+Mfccwpui617iljyjMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:56:9b:e1:74:f9:20:42:b2:60:d1:36:dd:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=97337c7463b019c60054c532323e1ce7c2f5d469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:09:a5:6a:ba:82:ec:36:e3:2e:26:70:aa:
05:4c:5b:53:ee:2c:14:77:1a:62:0d:2e:19:9b:fe:
f5:14:2b:62:02:54:c1:8e:2a:14:b9:f6:f8:2d:98:
1b:04:61:3f:2f:e3:13:ff:47:cd:b4:ce:59:c4:78:
53:a9:df:3d:84:83:a3:f1:e2:10:21:de:f0:d0:8a:
b3:e1:a5:92:79:7b:6e:25:7d:60:47:dd:71:fb:ce:
8c:dc:bd:0d:3f:c8:32:6d:ce:c7:4a:56:44:f8:3e:
23:3c:6d:9a:97:d6:5b:ed:6a:e9:09:57:09:73:fb:
ad:e8:c1:42:1c:c6:97:aa:e5:a6:86:33:53:a9:bd:
e3:81:23:70:80:ae:da:0c:02:fd:e6:fe:12:bc:11:
03:06:c0:62:9f:83:de:8b:a8:dd:78:fa:2f:ff:5f:
70:36:85:e3:f0:59:8a:3f:eb:c8:0d:31:45:6a:f4:
1d:0e:19:0d:03:95:65:ca:db:c8:13:1b:28:62:14:
f1:5c:40:07:b7:2e:0a:0b:ab:50:e3:74:55:46:2a:
f8:54:d3:16:06:6f:f0:5f:75:9f:f6:d2:4a:5c:2a:
4f:84:0e:1f:88:ee:a0:1e:6e:32:4a:eb:ba:22:e9:
a6:98:24:6e:53:f9:61:8b:43:cb:28:bf:7a:62:f4:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:7C:74:63:B0:19:C6:00:54:C5:32:32:3E:1C:E7:C2:F5:D4:69
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ed:9b:35:91:78:d5:af:e2:10:bd:72:1e:b4:9b:69:2a:4d:
ab:bf:45:4e:bd:fb:68:65:a9:3a:9a:eb:c8:35:40:76:d9:2d:
a4:94:37:80:10:ba:27:03:76:b1:16:fd:86:3d:92:4a:c4:83:
2e:de:10:2d:4a:70:2c:88:8e:6e:25:6f:ff:6c:08:6b:54:fb:
f6:a2:33:fb:c3:6e:b0:c8:78:65:5f:4e:cd:fd:d3:84:f3:7b:
27:b8:9f:93:29:63:aa:d2:64:63:07:fd:36:2a:8d:00:b8:e5:
e7:44:33:e7:a6:75:bd:72:37:18:bb:b3:d8:30:58:e6:49:f0:
8c:d3:d1:72:6c:43:d1:e9:b9:05:18:4b:3c:79:b9:01:3a:d4:
4d:98:0d:15:e3:b5:4b:8d:d9:43:2c:8e:05:aa:8f:28:91:62:
e4:2b:8d:12:4c:28:1f:1b:c5:7e:bc:bb:75:1b:d6:21:a8:fc:
de:b5:71:eb:c3:3b:22:be:87:89:09:ad:54:fb:fe:43:b5:64:
95:55:8a:c8:8c:df:29:7e:42:4a:60:78:d4:2e:4b:a8:92:3b:
5c:88:26:f2:08:55:21:8a:ed:6f:d8:72:21:cd:cf:3e:86:bc:
59:53:7b:e5:c1:e9:4c:f2:37:86:c4:54:18:5d:84:b9:66:69:
a1:4e:f2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G1ab4XT5IEKyYNE23VEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh
NGNjOTQwHhcNMjYwMzI5MDEwMDMxWhcNMjYwMzMwMDEwMDMxWjAzMTEwLwYDVQQD
Eyg5NzMzN2M3NDYzYjAxOWM2MDA1NGM1MzIzMjNlMWNlN2MyZjVkNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z8JpWq6guw24y4mcKoFTFtT7iwU
dxpiDS4Zm/71FCtiAlTBjioUufb4LZgbBGE/L+MT/0fNtM5ZxHhTqd89hIOj8eIQ
Id7w0Iqz4aWSeXtuJX1gR91x+86M3L0NP8gybc7HSlZE+D4jPG2al9Zb7WrpCVcJ
c/ut6MFCHMaXquWmhjNTqb3jgSNwgK7aDAL95v4SvBEDBsBin4Pei6jdePov/19w
NoXj8FmKP+vIDTFFavQdDhkNA5VlytvIExsoYhTxXEAHty4KC6tQ43RVRir4VNMW
Bm/wX3Wf9tJKXCpPhA4fiO6gHm4ySuu6IummmCRuU/lhi0PLKL96YvQn3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJczfHRjsBnGAFTFMjI+HOfC9dRpMB8GA1UdIwQY
MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt
YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5
LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu2bNZF4
1a/iEL1yHrSbaSpNq79FTr37aGWpOprryDVAdtktpJQ3gBC6JwN2sRb9hj2SSsSD
Lt4QLUpwLIiObiVv/2wIa1T79qIz+8NusMh4ZV9Ozf3ThPN7J7ifkyljqtJkYwf9
NiqNALjl50Qz56Z1vXI3GLuz2DBY5knwjNPRcmxD0em5BRhLPHm5ATrUTZgNFeO1
S43ZQyyOBaqPKJFi5CuNEkwoHxvFfry7dRvWIaj83rVx68M7Ir6HiQmtVPv+Q7Vk
lVWKyIzfKX5CSmB41C5LqJI7XIgm8ghVIYrtb9hyIc3PPoa8WVN75cHpTPI3hsRU
GF2EuWZpoU7ybg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:07 2026 by rpki-client