Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: cUua2hEFM3+9OfJlY/C5QCNBa0DqMx+rMesSXsXhiEg=
Subject key identifier: D8:0E:DC:C6:5D:66:4B:88:AE:83:4A:06:D6:7D:0D:5C:93:BA:58:57
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019D38D2BFB560C8A431A90ABD3DEEECD3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 124F
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (hash: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: 3OLs/qFhyXf0M5rbY/VxJ4LfXUYpKWlrgvrZmZ0IxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bf:b5:60:c8:a4:31:a9:0a:bd:3d:ee:ec:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=d80edcc65d664b88ae834a06d67d0d5c93ba5857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:41:36:3e:18:d3:c2:a9:a3:d1:33:14:e0:
c1:08:d7:57:fe:84:84:84:5e:27:4b:00:b2:ec:72:
22:f2:e5:99:4d:a4:87:bf:20:da:fe:98:06:50:91:
2b:a1:ec:c5:e9:13:89:93:27:d2:d4:00:8a:b7:aa:
77:5c:d6:05:0b:1f:58:67:3a:ff:36:70:80:04:c2:
66:90:e8:11:61:5b:fd:f7:c0:5e:bd:44:79:22:20:
27:8a:ca:a7:ef:78:a1:c4:7e:65:65:3b:c2:0d:eb:
fc:07:90:8e:f5:42:f0:48:1d:da:04:a4:13:94:09:
b2:24:76:54:83:a1:03:b7:ed:12:85:b2:33:b1:18:
c5:dc:cf:7d:b1:98:eb:33:e5:d0:55:cf:fa:82:a7:
86:1e:70:94:76:a1:66:90:89:3a:0a:c0:aa:b1:4f:
33:1e:c2:60:29:e3:fd:f4:e8:0c:06:ce:e3:44:a6:
21:c5:c5:1e:a3:b7:4d:e5:8f:17:30:d2:b0:5f:8d:
3d:9f:43:6d:f9:ea:78:c2:8a:29:30:28:cc:6b:56:
90:1d:9e:c3:60:e1:f6:62:1d:1a:3e:24:e8:0a:c3:
79:30:5a:50:3d:cd:3d:41:3a:8e:61:f1:f3:59:2c:
25:67:c8:af:0d:92:4c:d4:7c:c2:c5:f2:a7:d4:d7:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:DC:C6:5D:66:4B:88:AE:83:4A:06:D6:7D:0D:5C:93:BA:58:57
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:16:ca:6c:6d:1a:0c:8f:4b:e1:15:da:ee:08:ad:31:c8:
06:9c:8c:0c:ba:41:b8:8d:43:a6:95:2b:0c:5a:4c:3a:d3:83:
03:ea:ae:19:30:e7:39:9e:a5:58:b3:53:6e:e8:2f:89:3a:8e:
ad:fb:ed:c4:6c:4d:1e:8b:bf:74:18:98:50:d8:1a:d9:7f:89:
ab:de:f5:b3:4b:5e:d7:e5:45:ba:46:cc:e4:b2:36:2b:99:ab:
28:5c:f0:58:13:e4:07:ac:2d:f4:c0:12:4b:15:1e:15:a6:ab:
b4:f2:83:df:1b:de:05:74:84:b9:46:9d:31:0a:f6:d8:d5:93:
f9:f6:57:cb:0a:59:1d:d1:ab:b8:19:bf:69:75:7b:b0:c4:98:
2d:fd:36:9c:5c:f4:e8:b9:64:97:a1:f6:21:e4:d2:c7:36:6e:
7b:fd:ce:fd:42:6f:7f:4e:be:93:3b:f0:ef:47:90:78:d6:1b:
10:72:37:44:bd:81:06:a0:59:ed:65:39:29:ad:25:68:93:82:
ab:79:aa:d9:0d:75:0a:05:1e:31:7e:cf:08:f7:e6:8f:f4:99:
71:21:e9:5a:bf:9b:a1:45:92:7b:18:8b:1f:da:ee:cd:3d:27:
bd:26:ac:c0:31:81:6e:b7:84:15:bc:9b:85:b1:1f:29:57:ea:
67:20:d0:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040r+1YMikMakKvT3u7NPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh
OTRkNzgwHhcNMjYwMzI5MDkwMDI4WhcNMjYwMzMwMDkwMDI4WjAzMTEwLwYDVQQD
EyhkODBlZGNjNjVkNjY0Yjg4YWU4MzRhMDZkNjdkMGQ1YzkzYmE1ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRxBNj4Y08Kpo9EzFODBCNdX/oSE
hF4nSwCy7HIi8uWZTaSHvyDa/pgGUJEroezF6ROJkyfS1ACKt6p3XNYFCx9YZzr/
NnCABMJmkOgRYVv998BevUR5IiAnisqn73ihxH5lZTvCDev8B5CO9ULwSB3aBKQT
lAmyJHZUg6EDt+0ShbIzsRjF3M99sZjrM+XQVc/6gqeGHnCUdqFmkIk6CsCqsU8z
HsJgKeP99OgMBs7jRKYhxcUeo7dN5Y8XMNKwX409n0Nt+ep4woopMCjMa1aQHZ7D
YOH2Yh0aPiToCsN5MFpQPc09QTqOYfHzWSwlZ8ivDZJM1HzCxfKn1NfWKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgO3MZdZkuIroNKBtZ9DVyTulhXMB8GA1UdIwQY
MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt
ZDMzNWMyMDQyNDAzLzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz
LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvQWymxt
GgyPS+EV2u4IrTHIBpyMDLpBuI1DppUrDFpMOtODA+quGTDnOZ6lWLNTbugviTqO
rfvtxGxNHou/dBiYUNga2X+Jq971s0te1+VFukbM5LI2K5mrKFzwWBPkB6wt9MAS
SxUeFaartPKD3xveBXSEuUadMQr22NWT+fZXywpZHdGruBm/aXV7sMSYLf02nFz0
6Llkl6H2IeTSxzZue/3O/UJvf06+kzvw70eQeNYbEHI3RL2BBqBZ7WU5Ka0laJOC
q3mq2Q11CgUeMX7PCPfmj/SZcSHpWr+boUWSexiLH9ruzT0nvSaswDGBbreEFbyb
hbEfKVfqZyDQtg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:59 2026 by rpki-client