Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: e8VQ0p5vt8dKHEd+Chkhgx7C7N+ALoFzemNah6NuYqc=
Subject key identifier: D1:5C:8F:C4:F1:44:53:3B:99:F6:5E:31:12:79:3F:53:12:A8:A0:6D
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019D39AE6AF3E926D7345BF4E84BDC95C7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa (hash: H36onPAZgGkM8Gj/4vPHfKYw673MWHLo+rCT27hgkEo=)
2: hDlDQXPia_LVcBGYXeJfZh4MgHc.roa (hash: MtZoYfBZrAxoqrM2ef+MiwlnVce8K6//q+/J8AqG4MA=)
3: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: 8RK1tTbfsJoDy5LKo/vAMJhUdXHoHfR8x36Avc8XFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6a:f3:e9:26:d7:34:5b:f4:e8:4b:dc:95:c7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=d15c8fc4f144533b99f65e3112793f5312a8a06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:14:d8:d0:91:90:e6:1a:bd:56:ac:35:b4:
43:4c:fd:7c:16:d3:fa:34:37:aa:8c:1a:a5:c3:af:
b3:c9:f0:29:46:ea:0c:14:56:ea:72:c0:7c:8b:a6:
b5:6f:f9:e7:7b:e7:bf:c3:bf:5b:c4:09:91:86:e4:
b3:c7:46:ac:5b:eb:4a:fc:16:86:58:73:6e:db:4d:
fd:ca:2b:52:6e:bc:a5:e1:b0:ff:e8:a2:33:ad:96:
d0:b7:ef:4c:2c:c4:86:7a:e8:fc:3f:6b:a0:72:60:
2b:e6:11:6c:22:3f:7d:e1:12:9e:7e:cc:2a:50:d5:
c1:25:25:a3:f1:9d:a1:6b:4b:07:70:e1:b2:63:79:
02:d8:be:f9:25:b5:89:3c:1d:71:ab:40:e1:27:1a:
1c:49:d4:85:4c:12:37:3c:79:76:6f:f0:e9:f9:95:
11:82:81:1d:b4:62:c7:64:93:c6:f2:5d:9c:34:34:
4f:8b:07:0d:95:b4:29:6e:03:94:36:5f:9a:8f:a2:
77:34:33:e3:45:46:45:9b:3a:e7:bf:93:f6:01:9c:
df:81:57:6d:61:b1:16:9c:d2:be:65:3e:1d:88:df:
55:27:06:29:2b:6a:92:b2:9b:8f:c3:79:8c:2e:dd:
3d:b4:28:6b:77:87:1d:a3:69:46:b3:4f:3f:b9:f2:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:8F:C4:F1:44:53:3B:99:F6:5E:31:12:79:3F:53:12:A8:A0:6D
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:23:72:2f:f7:b8:88:52:65:b7:83:6f:a5:ff:44:df:a1:
df:78:e7:96:3c:0e:fa:aa:f7:bd:fb:75:ee:72:4d:68:a3:b6:
69:a4:e0:3b:a2:1a:74:0a:53:7d:9d:40:ad:fb:62:51:1f:2e:
26:43:49:0f:b0:91:f9:eb:12:5b:a1:66:ca:78:19:60:fc:81:
91:1b:71:12:93:68:8c:9e:14:e4:88:2d:74:50:2e:bd:8d:fa:
41:9d:f7:76:ee:fb:bb:b8:63:2f:6c:ab:63:86:f4:9c:4b:b7:
9e:6e:0a:d8:ed:1c:7e:0e:15:e9:e3:11:46:57:08:1e:1e:1a:
26:c0:f7:74:12:70:17:b5:f8:2f:1e:67:25:1e:5c:b3:a5:ce:
bb:a2:6b:7d:88:b8:0f:e7:ef:fa:69:67:53:29:7e:d4:ac:39:
93:1f:77:02:e2:dd:b8:7a:a7:bc:5e:32:3d:bf:59:6d:4e:72:
ad:50:b1:53:7f:4b:b3:3b:be:14:6a:49:90:9a:f0:98:76:c4:
09:3c:64:e4:e3:ee:e7:51:e1:5a:2c:ed:2d:8c:77:f3:61:4e:
bb:d0:93:74:ba:ea:5f:50:a9:8a:6d:23:05:23:fb:f3:3b:e7:
47:3d:6b:f3:f7:35:cc:c1:82:16:c2:0a:1d:fa:7a:70:dc:cf:
43:e6:c4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rmrz6SbXNFv06EvclcexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl
ZmJkOWQwHhcNMjYwMzI5MTMwMDI1WhcNMjYwMzMwMTMwMDI1WjAzMTEwLwYDVQQD
EyhkMTVjOGZjNGYxNDQ1MzNiOTlmNjVlMzExMjc5M2Y1MzEyYThhMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLgU2NCRkOYavVasNbRDTP18FtP6
NDeqjBqlw6+zyfApRuoMFFbqcsB8i6a1b/nne+e/w79bxAmRhuSzx0asW+tK/BaG
WHNu2039yitSbryl4bD/6KIzrZbQt+9MLMSGeuj8P2ugcmAr5hFsIj994RKefswq
UNXBJSWj8Z2ha0sHcOGyY3kC2L75JbWJPB1xq0DhJxocSdSFTBI3PHl2b/Dp+ZUR
goEdtGLHZJPG8l2cNDRPiwcNlbQpbgOUNl+aj6J3NDPjRUZFmzrnv5P2AZzfgVdt
YbEWnNK+ZT4diN9VJwYpK2qSspuPw3mMLt09tChrd4cdo2lGs08/ufIOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFcj8TxRFM7mfZeMRJ5P1MSqKBtMB8GA1UdIwQY
MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct
YjdhNjYwOGE4ZmJjLzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj
LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAQjci/3
uIhSZbeDb6X/RN+h33jnljwO+qr3vft17nJNaKO2aaTgO6IadApTfZ1ArftiUR8u
JkNJD7CR+esSW6FmyngZYPyBkRtxEpNojJ4U5IgtdFAuvY36QZ33du77u7hjL2yr
Y4b0nEu3nm4K2O0cfg4V6eMRRlcIHh4aJsD3dBJwF7X4Lx5nJR5cs6XOu6JrfYi4
D+fv+mlnUyl+1Kw5kx93AuLduHqnvF4yPb9ZbU5yrVCxU39Lszu+FGpJkJrwmHbE
CTxk5OPu51HhWiztLYx382FOu9CTdLrqX1Cpim0jBSP78zvnRz1r8/c1zMGCFsIK
Hfp6cNzPQ+bE3g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:19 2026 by rpki-client