Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
File: Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft (raw, json)
Hash identifier: kvxsu4kPxAmXL8ShgQveFqAOc/pBUBKVNeVVRLU8FYo=
Subject key identifier: B6:2A:DB:4D:00:EF:01:16:2C:DC:8D:01:73:8F:1D:6A:1A:E0:4B:9A
Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Certificate serial: 019D3940CEA775888B9E97C15052419B3E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
Manifest number: 021D
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl (hash: 3E1dp4awggqJxjLJA0I0RfaksHI0jBuWwvzXvtGASsI=)
2: _e_Zokrtlt_aju5Wh034zgAkl8I.roa (hash: +uQejsCjn3rFp2s+ELCiuSbZ+f8sp3uWgsCAiuje2M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ce:a7:75:88:8b:9e:97:c1:50:52:41:9b:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=b62adb4d00ef01162cdc8d01738f1d6a1ae04b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:d6:de:63:31:7f:ee:6d:d6:6e:65:cc:a5:
0f:b0:c4:a4:1d:4b:e9:26:24:9d:39:55:ed:0a:bf:
a6:5c:63:79:15:48:7a:49:d0:d0:cd:a3:5c:ec:00:
08:38:d7:ef:95:1e:44:7a:e7:54:45:41:2e:c4:90:
d4:42:dd:ff:8d:46:a8:34:95:b1:90:e6:34:30:d5:
ff:d3:23:b2:71:c8:35:76:fe:1c:42:03:c0:f5:18:
38:bd:51:fb:74:40:32:f9:bb:96:23:c3:46:80:e1:
67:32:76:31:a7:2c:e1:57:0b:14:22:14:41:42:0a:
5c:7f:a4:2d:00:a6:cd:82:12:44:fc:41:31:17:1d:
f5:83:66:37:44:03:30:ae:b8:23:ef:50:62:f1:b6:
99:4b:7b:ee:a6:4f:61:43:15:56:af:95:6a:32:16:
c5:e6:44:ce:90:d5:e0:69:bd:e8:6a:60:93:d0:1b:
c5:31:ec:85:95:1a:1f:a9:bc:0b:63:3a:6f:59:ee:
9d:f9:92:d4:b9:1f:ba:25:d6:6b:c2:5d:f1:74:4e:
80:43:80:87:65:73:7a:1b:36:93:03:10:16:93:d4:
91:4a:52:1b:97:ef:72:9a:d6:ca:98:38:60:d1:d4:
24:48:12:d6:ce:09:94:ed:83:5c:e2:dc:ef:51:93:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:DB:4D:00:EF:01:16:2C:DC:8D:01:73:8F:1D:6A:1A:E0:4B:9A
X509v3 Authority Key Identifier:
keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:23:5b:6d:ec:51:fe:3b:60:29:8e:e2:2a:35:3e:e4:7a:
cf:4f:37:d7:4d:52:cb:69:cc:09:56:ed:fe:cd:94:c5:c1:65:
46:0d:12:49:89:be:9e:43:ef:1c:10:b3:62:c3:79:67:74:e7:
3b:1f:c6:ed:a8:70:eb:2d:26:18:54:06:1e:63:3f:f8:76:4d:
4f:e8:a6:91:32:34:b0:2b:5a:79:4d:4b:87:b4:6a:00:73:b3:
e2:a5:2b:c2:8d:05:09:5b:7a:38:de:ea:f1:a0:38:92:34:28:
5a:9b:2d:54:f5:e2:c9:5f:61:32:24:6b:ed:75:0b:37:e2:3b:
c4:fa:89:bc:66:e4:6e:5d:0f:b8:82:36:e6:ed:67:e6:88:65:
b5:f9:69:27:fd:f0:51:ef:4a:58:af:b5:07:78:4d:e8:21:e2:
d9:e3:e1:39:7d:f1:d7:ef:0c:1e:6e:1d:98:41:be:1b:bf:a7:
db:32:e1:d2:0a:58:83:f2:af:f3:8a:a5:5b:c5:5a:cd:52:b9:
85:23:da:87:3f:bf:68:f6:00:03:52:4d:20:c2:b1:c7:70:de:
ce:6a:14:15:f9:f9:f1:a8:01:28:7c:d4:16:ae:6f:28:5a:a2:
3a:ad:b9:21:92:2b:4f:41:bc:41:fd:33:f9:9c:cb:cb:4f:76:
f7:b9:a4:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QM6ndYiLnpfBUFJBmz5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmNlN2U1YTgxNTYxNmNiNmE4YmEwM2M0OGFiYzQ5NDI5
YjdlMDEwHhcNMjYwMzI5MTEwMDQxWhcNMjYwMzMwMTEwMDQxWjAzMTEwLwYDVQQD
EyhiNjJhZGI0ZDAwZWYwMTE2MmNkYzhkMDE3MzhmMWQ2YTFhZTA0YjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLXW3mMxf+5t1m5lzKUPsMSkHUvp
JiSdOVXtCr+mXGN5FUh6SdDQzaNc7AAIONfvlR5EeudURUEuxJDUQt3/jUaoNJWx
kOY0MNX/0yOyccg1dv4cQgPA9Rg4vVH7dEAy+buWI8NGgOFnMnYxpyzhVwsUIhRB
Qgpcf6QtAKbNghJE/EExFx31g2Y3RAMwrrgj71Bi8baZS3vupk9hQxVWr5VqMhbF
5kTOkNXgab3oamCT0BvFMeyFlRofqbwLYzpvWe6d+ZLUuR+6JdZrwl3xdE6AQ4CH
ZXN6GzaTAxAWk9SRSlIbl+9ymtbKmDhg0dQkSBLWzgmU7YNc4tzvUZNw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYq200A7wEWLNyNAXOPHWoa4EuaMB8GA1UdIwQY
MBaAFGL85+WoFWFstqi6A8SKvElCm34BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgt
OTJiODQyYTk2NDk1LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgtOTJiODQyYTk2NDk1
LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6wjW23s
Uf47YCmO4io1PuR6z083101Sy2nMCVbt/s2UxcFlRg0SSYm+nkPvHBCzYsN5Z3Tn
Ox/G7ahw6y0mGFQGHmM/+HZNT+imkTI0sCtaeU1Lh7RqAHOz4qUrwo0FCVt6ON7q
8aA4kjQoWpstVPXiyV9hMiRr7XULN+I7xPqJvGbkbl0PuII25u1n5ohltflpJ/3w
Ue9KWK+1B3hN6CHi2ePhOX3x1+8MHm4dmEG+G7+n2zLh0gpYg/Kv84qlW8VazVK5
hSPahz+/aPYAA1JNIMKxx3DezmoUFfn58agBKHzUFq5vKFqiOq25IZIrT0G8Qf0z
+ZzLy09297mkvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client