Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: XOxOaomVEfOWEWDfk/QdQJuJ22WwURvAnevENYkZvTY=
Subject key identifier: 44:E7:1D:A0:22:75:9B:81:7C:60:9C:4C:5C:D4:9C:FB:D0:10:71:35
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 019D35D1CBD1ABA372A7409AD8BF68695545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 19:00:34 +0000
Manifest this update: Sat 28 Mar 2026 19:00:34 +0000
Manifest next update: Sun 29 Mar 2026 19:00:34 +0000
Files and hashes: 1: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (hash: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik=)
2: dPHqIY7qbdPlJuiUMKI9vu705BQ.roa (hash: iEFUmiIqI94qx/d/ZIh+kjuR+jCUesRKMo6DZPKrgqY=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: LqAyPfgyOOMJ91aOqCYEIJs8+VRryU1VOj/CfuyDpOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d1:cb:d1:ab:a3:72:a7:40:9a:d8:bf:68:69:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Mar 28 19:00:34 2026 GMT
Not After : Mar 29 19:00:34 2026 GMT
Subject: CN=44e71da022759b817c609c4c5cd49cfbd0107135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:07:01:cb:33:b3:44:a3:2b:a3:5c:81:d0:
4f:55:51:12:9f:38:22:5b:dd:e6:c5:27:0b:64:46:
1b:a9:d2:47:f9:46:9e:49:90:25:65:b4:53:e3:4e:
3e:39:96:eb:4b:31:c7:b4:c0:27:14:aa:e8:b3:00:
0f:30:32:fe:e3:f9:ec:b4:06:55:01:b9:37:c8:ac:
e8:f1:d0:7d:8d:bb:78:26:62:1a:5a:63:95:70:0c:
a8:4c:09:e5:e9:61:b4:ac:55:a0:90:f9:1d:bf:52:
8d:e3:d2:ac:16:bc:6c:de:b4:a0:96:ad:83:da:33:
6e:3d:ac:b7:c8:f2:93:49:01:bf:e2:8e:01:69:0f:
03:71:2f:8e:1e:e4:4b:b9:b7:86:a0:41:ef:3b:6f:
4b:41:8a:f9:63:32:b1:fd:9e:28:b7:41:ed:1d:59:
a0:6e:ac:0d:68:22:54:51:04:cb:ee:2f:a8:c3:43:
d4:af:bf:f4:2d:cf:69:77:7c:23:84:81:56:f1:b4:
57:2a:19:f5:69:3c:46:8d:24:e0:70:b8:f6:28:83:
74:f3:52:cf:98:a5:41:8a:57:88:e1:45:d4:0f:13:
7c:1e:ae:2a:c9:8d:66:23:b4:74:b2:5e:a5:e5:32:
fe:ab:2b:67:ca:6f:a5:65:33:37:76:d9:d2:75:ba:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:1D:A0:22:75:9B:81:7C:60:9C:4C:5C:D4:9C:FB:D0:10:71:35
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:8d:9b:b2:7f:0c:29:20:53:ed:b4:a4:84:56:4d:b8:f3:
38:93:ee:4a:66:d3:43:10:c4:11:5c:aa:4d:10:a2:a7:bf:8d:
86:00:ee:0a:fe:7f:6f:f3:7c:4f:86:97:bc:6c:1d:06:77:9a:
c0:83:c9:9b:77:46:c5:8c:4d:f2:cd:9f:d8:58:1c:fc:bb:61:
fa:f5:fc:0d:57:97:9c:50:54:cb:e2:b6:9a:70:64:d4:72:25:
9c:18:76:51:ea:ce:2b:be:cb:f6:15:60:e3:10:d7:a6:6f:1a:
25:8e:54:04:e0:56:28:8a:2a:46:09:f8:c3:69:1f:bd:de:99:
57:2c:34:0c:f6:72:e8:af:d9:43:77:ef:a1:a8:88:40:1b:74:
9c:c1:1b:b1:b1:68:c5:ab:91:ec:c8:4c:bb:56:1d:65:f3:c0:
46:6e:9e:61:9b:dc:64:a2:e4:fe:c6:87:70:1c:88:13:c6:80:
b0:53:7b:0d:cf:07:86:bf:0f:b5:51:7c:d2:52:ac:31:38:50:
cf:61:83:aa:4f:6f:72:ba:58:19:eb:35:fa:01:00:aa:d4:cd:
64:e0:6a:4d:55:d6:6f:96:a9:48:5f:cb:b8:f1:84:49:58:15:
0d:04:53:a6:fe:2c:5c:17:6e:77:7b:fe:77:9e:80:cb:4b:74:
a4:01:71:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ010cvRq6Nyp0Ca2L9oaVVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4
Y2MzYzMwHhcNMjYwMzI4MTkwMDM0WhcNMjYwMzI5MTkwMDM0WjAzMTEwLwYDVQQD
Eyg0NGU3MWRhMDIyNzU5YjgxN2M2MDljNGM1Y2Q0OWNmYmQwMTA3MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0cHAcszs0SjK6NcgdBPVVESnzgi
W93mxScLZEYbqdJH+UaeSZAlZbRT404+OZbrSzHHtMAnFKroswAPMDL+4/nstAZV
Abk3yKzo8dB9jbt4JmIaWmOVcAyoTAnl6WG0rFWgkPkdv1KN49KsFrxs3rSglq2D
2jNuPay3yPKTSQG/4o4BaQ8DcS+OHuRLubeGoEHvO29LQYr5YzKx/Z4ot0HtHVmg
bqwNaCJUUQTL7i+ow0PUr7/0Lc9pd3wjhIFW8bRXKhn1aTxGjSTgcLj2KIN081LP
mKVBileI4UXUDxN8Hq4qyY1mI7R0sl6l5TL+qytnym+lZTM3dtnSdbqFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETnHaAidZuBfGCcTFzUnPvQEHE1MB8GA1UdIwQY
MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt
ZmVmNDg3MTJhY2FiLzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi
LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADICNm7J/
DCkgU+20pIRWTbjzOJPuSmbTQxDEEVyqTRCip7+NhgDuCv5/b/N8T4aXvGwdBnea
wIPJm3dGxYxN8s2f2Fgc/Lth+vX8DVeXnFBUy+K2mnBk1HIlnBh2UerOK77L9hVg
4xDXpm8aJY5UBOBWKIoqRgn4w2kfvd6ZVyw0DPZy6K/ZQ3fvoaiIQBt0nMEbsbFo
xauR7MhMu1YdZfPARm6eYZvcZKLk/saHcByIE8aAsFN7Dc8Hhr8PtVF80lKsMThQ
z2GDqk9vcrpYGes1+gEAqtTNZOBqTVXWb5apSF/LuPGESVgVDQRTpv4sXBdud3v+
d56Ay0t0pAFxzQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 23:17:19 2026 by rpki-client