Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: Xtq9FgNFxCh5aVLafFgL6A9H9PWIwpYYgYSsYrNlrQ0=
Subject key identifier: 21:61:26:ED:E1:3A:4D:36:92:54:47:AE:E4:64:E8:F4:74:79:69:4D
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019D389C621D4BA9D71444FD7F839547B7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 06DF
Signing time: Sun 29 Mar 2026 08:01:05 +0000
Manifest this update: Sun 29 Mar 2026 08:01:05 +0000
Manifest next update: Mon 30 Mar 2026 08:01:05 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: UombLwaAEywA416hlIiuprZA8dr3/Pwezeev/5VQTnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:62:1d:4b:a9:d7:14:44:fd:7f:83:95:47:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Mar 29 08:01:05 2026 GMT
Not After : Mar 30 08:01:05 2026 GMT
Subject: CN=216126ede13a4d36925447aee464e8f47479694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:4d:43:91:41:c1:48:e0:51:87:bf:6d:74:
e4:e4:52:22:e9:93:6f:08:a0:4b:46:ba:f8:05:33:
3a:33:62:25:60:e5:36:e6:3d:1d:c4:9a:3e:da:a1:
e7:1a:c3:7a:f3:26:d6:ce:30:b6:76:6e:80:eb:93:
b3:43:5f:ea:b2:03:32:8b:3c:e9:95:fb:59:2c:da:
9b:a2:73:a5:30:7b:b8:fa:36:13:d2:16:05:13:f5:
a4:be:ed:3f:7c:ec:8e:6f:72:9e:21:f3:89:d6:1e:
78:ed:b9:d6:9c:1b:27:df:51:91:ec:b8:df:d0:31:
f9:c1:3a:25:06:a9:90:4e:d7:0f:57:5f:b3:47:52:
90:fb:9b:99:65:a7:05:32:9a:cf:9f:c6:a6:e1:af:
76:68:90:3b:a3:3e:42:51:2f:24:2b:30:13:c8:2b:
9d:60:09:83:d1:f4:58:95:ac:35:db:15:db:2d:b1:
2c:cf:f7:58:b5:18:94:6f:7a:f8:ad:d7:37:56:fd:
8d:65:c9:10:16:d9:ea:6d:53:33:73:a0:fd:a7:6d:
45:bc:3b:c3:6b:2b:89:1f:d8:a9:ca:97:3a:18:88:
2e:30:ef:d8:0d:89:26:ca:9c:d1:5a:db:8c:b1:ea:
ee:1f:c2:39:9c:cd:a4:4f:c9:f3:e9:62:53:fd:08:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:26:ED:E1:3A:4D:36:92:54:47:AE:E4:64:E8:F4:74:79:69:4D
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:af:3e:dc:79:68:1b:4a:dd:47:4e:c5:e6:93:bb:68:1b:a9:
e0:3e:21:53:86:04:59:86:bd:46:64:40:39:94:a0:f3:4a:5f:
c9:f7:3f:74:19:65:a3:99:5a:5a:63:c4:a6:30:14:34:17:a9:
2b:4d:46:e5:b4:f3:ad:7d:d6:98:d1:5d:d6:ac:92:be:0e:0d:
e7:9a:ed:57:41:63:a3:8b:b4:4b:78:3b:74:45:ac:02:d0:8b:
db:28:4d:4c:e5:1a:37:87:f5:39:7f:8a:7f:a9:ba:4e:47:71:
bc:41:e5:8c:eb:9c:5e:90:96:c0:4d:fd:49:ca:4e:60:10:cc:
ba:1c:6e:73:8f:92:e1:23:1d:d6:f1:4a:b3:aa:a5:d6:4c:b3:
47:bf:98:88:30:de:fc:f8:50:86:51:4d:be:c9:1b:24:24:02:
e8:98:0f:28:69:21:4f:00:14:b4:22:99:6b:f3:bd:f3:41:bf:
d4:d8:5f:d2:0f:c2:99:22:43:bd:36:c7:c3:fd:8d:98:74:9e:
74:33:91:70:33:c2:74:f2:51:6e:11:5f:7f:b2:34:69:a6:bf:
9a:d1:9f:83:d6:c1:7f:d8:a3:61:8b:9e:37:ba:77:8e:da:a8:
dc:3d:3f:4c:87:cc:d4:07:94:c7:1e:f0:b3:a2:d7:ba:55:6b:
ac:0f:94:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGIdS6nXFET9f4OVR7ewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj
NjI3MTUwHhcNMjYwMzI5MDgwMTA1WhcNMjYwMzMwMDgwMTA1WjAzMTEwLwYDVQQD
EygyMTYxMjZlZGUxM2E0ZDM2OTI1NDQ3YWVlNDY0ZThmNDc0Nzk2OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneBNQ5FBwUjgUYe/bXTk5FIi6ZNv
CKBLRrr4BTM6M2IlYOU25j0dxJo+2qHnGsN68ybWzjC2dm6A65OzQ1/qsgMyizzp
lftZLNqbonOlMHu4+jYT0hYFE/Wkvu0/fOyOb3KeIfOJ1h547bnWnBsn31GR7Ljf
0DH5wTolBqmQTtcPV1+zR1KQ+5uZZacFMprPn8am4a92aJA7oz5CUS8kKzATyCud
YAmD0fRYlaw12xXbLbEsz/dYtRiUb3r4rdc3Vv2NZckQFtnqbVMzc6D9p21FvDvD
ayuJH9ipypc6GIguMO/YDYkmypzRWtuMseruH8I5nM2kT8nz6WJT/QhTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFhJu3hOk02klRHruRk6PR0eWlNMB8GA1UdIwQY
MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt
MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi
LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWa8+3Hlo
G0rdR07F5pO7aBup4D4hU4YEWYa9RmRAOZSg80pfyfc/dBllo5laWmPEpjAUNBep
K01G5bTzrX3WmNFd1qySvg4N55rtV0Fjo4u0S3g7dEWsAtCL2yhNTOUaN4f1OX+K
f6m6TkdxvEHljOucXpCWwE39ScpOYBDMuhxuc4+S4SMd1vFKs6ql1kyzR7+YiDDe
/PhQhlFNvskbJCQC6JgPKGkhTwAUtCKZa/O980G/1Nhf0g/CmSJDvTbHw/2NmHSe
dDORcDPCdPJRbhFff7I0aaa/mtGfg9bBf9ijYYueN7p3jtqo3D0/TIfM1AeUxx7w
s6LXulVrrA+UTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:55 2026 by rpki-client