Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: DJxjGRU7xkJkuAU9zWLakNBszBCA4Y5P28VSbu2dWTo=
Subject key identifier: 5B:6C:C7:C2:96:38:CE:F6:09:C9:C3:F4:2D:4C:90:6D:06:66:9C:3D
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 019D394162FF5E61A0F243BDD20F7B9643D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: hpknuc/9kPLAr7si0PbzMiw8CrCPBP3fWxvOaa8zVHw=)
2: nYvqn5kV5F9eabpIomemvJsL_Qg.roa (hash: V5VSGZcEQmaqLWAdKNhlKguBGH4P4kr/kPeIkQ2hxfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:62:ff:5e:61:a0:f2:43:bd:d2:0f:7b:96:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=5b6cc7c29638cef609c9c3f42d4c906d06669c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:e5:ce:01:f4:83:f0:da:55:ef:f4:41:24:
4f:46:1e:70:ea:08:2c:15:66:0f:a8:77:7b:83:92:
3b:21:78:a9:f6:70:09:fd:ef:59:e4:9a:df:7e:b1:
b5:6c:a9:1b:57:e5:1b:98:05:1a:c4:6a:2f:b2:19:
02:91:4b:6a:44:b5:29:2b:82:f9:07:fb:9a:e2:0e:
f8:08:7a:fb:18:17:10:1c:18:9b:00:91:db:45:3e:
a5:13:be:a1:7b:43:be:b8:c2:82:f7:3e:59:85:e8:
0e:34:94:f9:11:95:64:03:7e:fb:a9:98:39:a6:45:
ed:e4:f2:06:cb:c0:89:8c:d6:c6:5b:a2:6c:05:cc:
65:9b:34:57:d9:78:82:8d:79:bc:c9:5e:a8:6c:34:
68:2b:d5:9c:9e:a7:9b:8f:2e:34:9e:58:00:6e:42:
20:39:95:5d:eb:05:a5:a8:c0:55:ed:6b:3a:82:a4:
c7:3e:0f:2b:81:db:cc:d4:74:86:d1:cc:85:93:1a:
e7:81:d0:b5:db:02:e7:61:7c:ef:a1:63:a9:0d:00:
2b:84:78:88:bc:a6:e5:42:89:69:9e:a3:39:f4:b5:
e6:28:52:f6:53:f1:83:6a:c3:93:20:b7:8c:8e:d3:
49:d4:3f:47:f4:aa:87:95:bf:93:8a:6b:96:69:e5:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:C7:C2:96:38:CE:F6:09:C9:C3:F4:2D:4C:90:6D:06:66:9C:3D
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8c:42:75:2f:35:56:f5:27:ab:8b:de:c4:38:b1:3b:8b:8c:
74:6f:2c:70:ce:d8:74:e7:ed:97:c0:f5:4f:d5:53:6a:76:f6:
e2:88:04:04:71:1b:23:2b:f4:06:10:69:90:3b:5d:be:53:e4:
e4:c9:c5:44:eb:30:7e:4c:70:4b:12:99:1d:43:a0:0b:6a:40:
9b:58:a5:5e:fc:02:f2:87:3d:2c:fc:63:7b:02:47:84:aa:50:
f4:34:65:1a:67:9f:73:df:83:70:ef:06:44:a7:1c:40:38:bb:
d3:d6:9c:7e:94:cc:f4:96:d6:45:39:c9:b8:7c:0a:ff:10:e8:
0c:14:b3:09:58:43:77:4a:98:03:97:8f:0d:3d:1e:70:d5:c1:
f9:c1:19:bd:f9:30:86:31:2d:d7:b9:79:1e:ed:fd:b8:ec:2a:
d6:39:a0:fa:92:e1:81:0d:03:7d:ff:c4:7e:6f:44:2f:b4:2f:
e7:19:6c:33:f1:32:45:da:16:63:dd:6f:b4:73:36:b1:40:40:
e1:44:5d:60:15:7a:cb:a1:e2:e7:ce:86:b2:70:56:58:2b:79:
f3:f5:db:2a:c7:1f:63:07:be:0b:28:73:ce:86:5f:eb:08:b5:
64:a0:9c:1e:49:83:b5:3a:6d:6a:39:c4:63:f7:68:64:1e:e9:
a9:a5:c1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QWL/XmGg8kO90g97lkPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmQzN2NmODdmMTJmMmFiMmRlZjMxMzgwYzM4NmI4MjZj
MTlkNjUwHhcNMjYwMzI5MTEwMTE5WhcNMjYwMzMwMTEwMTE5WjAzMTEwLwYDVQQD
Eyg1YjZjYzdjMjk2MzhjZWY2MDljOWMzZjQyZDRjOTA2ZDA2NjY5YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9XlzgH0g/DaVe/0QSRPRh5w6ggs
FWYPqHd7g5I7IXip9nAJ/e9Z5JrffrG1bKkbV+UbmAUaxGovshkCkUtqRLUpK4L5
B/ua4g74CHr7GBcQHBibAJHbRT6lE76he0O+uMKC9z5ZhegONJT5EZVkA377qZg5
pkXt5PIGy8CJjNbGW6JsBcxlmzRX2XiCjXm8yV6obDRoK9Wcnqebjy40nlgAbkIg
OZVd6wWlqMBV7Ws6gqTHPg8rgdvM1HSG0cyFkxrngdC12wLnYXzvoWOpDQArhHiI
vKblQolpnqM59LXmKFL2U/GDasOTILeMjtNJ1D9H9KqHlb+TimuWaeXDMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtsx8KWOM72CcnD9C1MkG0GZpw9MB8GA1UdIwQY
MBaAFGBtN8+H8S8qst7zE4DDhrgmwZ1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5Mjct
ZGMwMDQzZTliYjRkLzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMjBkNmEtOTFiYS00NDJmLTg5MjctZGMwMDQzZTliYjRk
LzEvWUcwM3o0ZnhMeXF5M3ZNVGdNT0d1Q2JCbldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoxCdS81
VvUnq4vexDixO4uMdG8scM7YdOftl8D1T9VTanb24ogEBHEbIyv0BhBpkDtdvlPk
5MnFROswfkxwSxKZHUOgC2pAm1ilXvwC8oc9LPxjewJHhKpQ9DRlGmefc9+DcO8G
RKccQDi709acfpTM9JbWRTnJuHwK/xDoDBSzCVhDd0qYA5ePDT0ecNXB+cEZvfkw
hjEt17l5Hu39uOwq1jmg+pLhgQ0Dff/Efm9EL7Qv5xlsM/EyRdoWY91vtHM2sUBA
4URdYBV6y6Hi586GsnBWWCt58/XbKscfYwe+CyhzzoZf6wi1ZKCcHkmDtTptajnE
Y/doZB7pqaXBPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:05 2026 by rpki-client