Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.mft (raw, json)
Hash identifier: /7V60u7eJAn4MvpYTzlEaRpTlr6KPmytZ7wcsO2Pihs=
Subject key identifier: AA:55:C4:73:19:DA:B3:5A:D0:68:1D:C5:80:70:70:1B:F6:EC:26:E5
Authority key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Certificate issuer: /CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Certificate serial: 019D36E5423AA17804FE8D0CD51605FD6F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
Manifest number: 4A
Signing time: Sun 29 Mar 2026 00:01:27 +0000
Manifest this update: Sun 29 Mar 2026 00:01:27 +0000
Manifest next update: Mon 30 Mar 2026 00:01:27 +0000
Files and hashes: 1: 1-YUzm9bktvZypnyvdxbuQMFLlWk.crl (hash: HoaCNqdcWVZSe2iqdRCXf4P0jM2Tp8AlIO3hTdnM4Ag=)
2: vTv6Y9pYzSLa4y30BsFSU3zUkkI.roa (hash: W0KsvSQFE2TKZ3eONDLazVIwQ+vxG34zEx4WZk3Nw8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:42:3a:a1:78:04:fe:8d:0c:d5:16:05:fd:6f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Validity
Not Before: Mar 29 00:01:27 2026 GMT
Not After : Mar 30 00:01:27 2026 GMT
Subject: CN=aa55c47319dab35ad0681dc58070701bf6ec26e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:04:df:45:34:0c:07:60:e7:82:f5:7b:b7:
55:81:25:b5:db:92:5e:7a:38:26:e9:90:a5:4f:8d:
39:92:5a:3f:40:b5:0d:7a:b9:56:88:b1:49:5e:e8:
95:de:5f:4b:c8:ce:58:5d:f9:9c:d2:01:69:f2:41:
f7:04:5c:41:aa:af:2c:be:96:00:03:1a:54:f8:48:
db:78:e5:7c:e1:34:b0:42:a0:76:88:ec:81:d3:c4:
ae:cc:6e:57:95:0f:71:2b:84:d2:5c:cb:0d:9c:48:
a1:ad:52:e6:44:c2:fc:8c:77:d2:8d:25:64:8e:32:
e7:63:e7:6a:73:32:36:31:a0:b0:cd:28:04:ac:e0:
7c:5a:f6:96:a8:13:43:7e:1d:1b:cc:d5:74:42:30:
b9:17:30:b5:c0:62:a9:c3:42:0f:e2:a3:ae:83:5e:
34:66:5e:63:20:da:15:cb:fe:7c:3d:83:01:da:07:
41:fd:e2:e5:6a:87:ee:e4:3a:dc:ad:83:51:6a:40:
70:45:45:d5:64:8c:29:b2:ac:36:7c:cb:f3:df:c0:
ad:75:08:24:65:3a:49:c4:a0:98:72:58:3f:4b:50:
15:fe:c1:2b:68:31:ce:29:a5:9f:c6:27:b5:05:3e:
41:2e:bf:4c:f4:76:29:2e:bb:0c:b3:52:23:f7:f1:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:C4:73:19:DA:B3:5A:D0:68:1D:C5:80:70:70:1B:F6:EC:26:E5
X509v3 Authority Key Identifier:
keyid:F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:64:37:f0:28:e5:c3:00:43:e9:43:0b:a9:bc:d7:6b:82:43:
2b:4a:63:60:d1:6c:1e:d2:b7:a0:6d:72:86:d7:93:af:fc:85:
4d:0d:68:7c:99:de:98:29:18:ea:f1:ef:6f:a9:0c:7b:07:31:
2e:eb:7b:01:e5:ff:56:ff:75:28:b6:78:83:90:2c:93:c5:2b:
ee:01:ec:06:6f:52:1e:a3:03:16:e3:9c:8d:2a:51:42:d9:8b:
83:32:06:4c:19:d5:9a:60:48:c5:7b:77:27:a8:65:d6:26:62:
d0:d2:0b:60:d4:82:36:a4:b8:de:62:df:d2:2d:ba:f7:14:31:
b0:31:28:95:43:5e:5e:90:ec:f4:3f:b5:76:75:91:26:65:75:
bf:2d:41:54:cb:75:b4:61:7f:e8:e6:5c:36:01:8f:2d:04:5c:
ce:2b:85:42:d6:5e:b6:53:17:4e:18:ad:8b:e8:c6:06:9b:72:
d5:6f:69:4b:11:4d:7f:55:0d:6d:51:b3:62:f1:ee:d4:7f:1b:
ec:d7:69:1e:cc:46:d8:0b:35:1c:59:aa:74:09:ea:5b:8a:a8:
29:0f:eb:d0:6f:0f:46:e9:2e:84:8f:1d:38:d0:b1:fb:8c:b3:
ba:84:fe:7b:4a:45:67:fc:fa:71:fd:e1:75:a7:a5:2c:92:08:
f4:b4:99:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ025UI6oXgE/o0M1RYF/W9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODUzMzliZDZlNGI2ZjY3MmE2N2NhZjc3MTZlZTQwYzE0
Yjk1NjkwHhcNMjYwMzI5MDAwMTI3WhcNMjYwMzMwMDAwMTI3WjAzMTEwLwYDVQQD
EyhhYTU1YzQ3MzE5ZGFiMzVhZDA2ODFkYzU4MDcwNzAxYmY2ZWMyNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpkE30U0DAdg54L1e7dVgSW125Je
ejgm6ZClT405klo/QLUNerlWiLFJXuiV3l9LyM5YXfmc0gFp8kH3BFxBqq8svpYA
AxpU+EjbeOV84TSwQqB2iOyB08SuzG5XlQ9xK4TSXMsNnEihrVLmRML8jHfSjSVk
jjLnY+dqczI2MaCwzSgErOB8WvaWqBNDfh0bzNV0QjC5FzC1wGKpw0IP4qOug140
Zl5jINoVy/58PYMB2gdB/eLlaofu5DrcrYNRakBwRUXVZIwpsqw2fMvz38CtdQgk
ZTpJxKCYclg/S1AV/sEraDHOKaWfxie1BT5BLr9M9HYpLrsMs1Ij9/GvYQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKpVxHMZ2rNa0GgdxYBwcBv27CblMB8GA1UdIwQY
MBaAFPmFM5vW5Lb2cqZ8r3cW7kDBS5VpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVXptOWJrdHZaeXBueXZkeGJ1UU1GTGxXay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNDIxNzE2LTUwYTgtNGI4Yy1hZWI1
LWU5ZTQxNWY0YzVmZi8xLzEtWVV6bTlia3R2Wnlwbnl2ZHhidVFNRkxsV2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiLzQyMTcxNi01MGE4LTRiOGMtYWViNS1lOWU0MTVmNGM1
ZmYvMS8xLVlVem05Ymt0dlp5cG55dmR4YnVRTUZMbFdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2Q3
8CjlwwBD6UMLqbzXa4JDK0pjYNFsHtK3oG1yhteTr/yFTQ1ofJnemCkY6vHvb6kM
ewcxLut7AeX/Vv91KLZ4g5Ask8Ur7gHsBm9SHqMDFuOcjSpRQtmLgzIGTBnVmmBI
xXt3J6hl1iZi0NILYNSCNqS43mLf0i269xQxsDEolUNeXpDs9D+1dnWRJmV1vy1B
VMt1tGF/6OZcNgGPLQRcziuFQtZetlMXThiti+jGBpty1W9pSxFNf1UNbVGzYvHu
1H8b7NdpHsxG2As1HFmqdAnqW4qoKQ/r0G8PRukuhI8dONCx+4yzuoT+e0pFZ/z6
cf3hdaelLJII9LSZiA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:19 2026 by rpki-client