Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json)
Hash identifier: 5F1vc+LTfV9DYFqTTQU5MR3JgNowM7FNfuPR09WlJFc=
Subject key identifier: 39:8D:91:CC:73:24:EF:F3:0E:8D:81:2B:42:BA:56:E6:95:29:E5:D1
Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Certificate serial: 019D382E9D5DDF5B2A96C0DB5E019078810B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
Manifest number: 0212
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa (hash: 0xU2M591t0tt0HcAOUX7ifjkri7E09ptWBOocOdK4g4=)
2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: A0wwYtkclc3hHPVXKNc0bWNg+sDRESFITlbrkT5XJqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9d:5d:df:5b:2a:96:c0:db:5e:01:90:78:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=398d91cc7324eff30e8d812b42ba56e69529e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:89:58:1c:bc:96:5a:2c:7b:95:40:ce:75:
bf:8e:97:b3:21:84:4d:67:d0:d4:ee:86:72:f1:a8:
ff:f6:19:39:27:c8:e2:90:9d:e0:32:9d:5c:5b:04:
43:fd:74:0a:f4:a1:9d:28:10:92:05:26:b6:80:95:
0d:fc:b0:82:e2:84:34:e5:1b:e7:2f:9f:ab:e7:5f:
1b:a5:a8:65:df:94:67:04:3d:58:01:0f:d8:89:6f:
be:21:6e:a3:43:53:86:df:b9:23:f6:d6:56:3c:d0:
48:81:26:c4:a9:1e:06:be:bf:9a:62:03:72:b5:4c:
d8:b3:dd:f3:f4:13:b1:74:5b:e5:b6:df:c1:4e:ba:
95:7f:65:7b:97:b6:8e:0f:de:14:5c:ed:d9:61:43:
3e:5d:b6:1b:e4:55:3a:42:ba:e1:6c:f6:93:6d:88:
df:4a:cf:ae:dd:3c:5b:87:ea:4a:3a:00:f0:7d:94:
f5:45:36:ba:86:d7:0b:a0:4a:58:f8:4d:de:01:7a:
13:96:13:bc:e0:ff:60:2a:26:22:01:ff:97:52:2c:
d6:7c:e1:71:5b:b6:1b:a8:ff:c6:1c:34:51:43:12:
23:f1:c5:b4:fc:91:da:69:b1:e9:fa:64:63:e0:2e:
32:c9:e4:de:b7:f7:d0:2c:6b:4a:6c:8a:1a:e5:1f:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:91:CC:73:24:EF:F3:0E:8D:81:2B:42:BA:56:E6:95:29:E5:D1
X509v3 Authority Key Identifier:
keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4c:84:2b:1c:33:21:a4:86:8b:34:05:7d:25:ba:cd:aa:27:
9e:90:0f:ec:10:7e:60:9f:36:d0:29:66:33:3b:3e:6b:b4:10:
df:33:22:5d:27:ea:dc:ce:7c:22:82:f9:30:f9:2e:f2:b4:4e:
8f:24:ec:39:29:56:bd:e0:63:01:4a:10:79:31:79:73:56:44:
c8:f8:12:99:4c:d4:63:80:b3:98:e3:6a:9f:81:9b:43:b4:05:
0e:6a:46:8c:e9:aa:80:32:96:64:bb:c0:8f:1a:cf:2d:9c:49:
fc:2e:be:8f:8d:77:5b:3a:d7:88:9c:b5:41:91:e1:25:04:b7:
ca:53:ff:28:77:36:a8:5e:2a:a4:16:6a:cc:d3:ed:bd:1e:35:
04:f6:cc:1f:7a:f5:28:5a:77:f0:83:a6:9a:62:2b:46:0e:70:
38:79:9e:64:db:fd:b9:ad:c1:2d:a2:4b:5c:3b:dd:0c:d8:d9:
d7:3f:eb:70:d4:8b:bd:e6:ec:03:b1:70:c9:4f:88:f1:c8:61:
39:bc:87:1c:7f:ad:5f:a0:5c:e9:0c:34:f1:01:54:e1:a2:de:
4a:8d:7c:b9:f9:85:a6:b4:8a:55:8b:dc:23:f4:7c:43:62:7a:
34:53:56:6c:f7:c2:a4:96:e2:a9:c8:51:98:ae:a8:b5:85:d2:
23:b9:2f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lp1d31sqlsDbXgGQeIELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTU0MTAzOTVhYWI0OTkxNDBjM2E2NWNlMWY3NDBlZjA3
MGQzZTYwHhcNMjYwMzI5MDYwMTEyWhcNMjYwMzMwMDYwMTEyWjAzMTEwLwYDVQQD
EygzOThkOTFjYzczMjRlZmYzMGU4ZDgxMmI0MmJhNTZlNjk1MjllNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5GJWBy8llose5VAznW/jpezIYRN
Z9DU7oZy8aj/9hk5J8jikJ3gMp1cWwRD/XQK9KGdKBCSBSa2gJUN/LCC4oQ05Rvn
L5+r518bpahl35RnBD1YAQ/YiW++IW6jQ1OG37kj9tZWPNBIgSbEqR4Gvr+aYgNy
tUzYs93z9BOxdFvltt/BTrqVf2V7l7aOD94UXO3ZYUM+XbYb5FU6QrrhbPaTbYjf
Ss+u3Txbh+pKOgDwfZT1RTa6htcLoEpY+E3eAXoTlhO84P9gKiYiAf+XUizWfOFx
W7YbqP/GHDRRQxIj8cW0/JHaabHp+mRj4C4yyeTet/fQLGtKbIoa5R+3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmNkcxzJO/zDo2BK0K6VuaVKeXRMB8GA1UdIwQY
MBaAFMtVQQOVqrSZFAw6Zc4fdA7wcNPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQt
NjJjNzY5NGI1N2VlLzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQtNjJjNzY5NGI1N2Vl
LzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkyEKxwz
IaSGizQFfSW6zaonnpAP7BB+YJ820ClmMzs+a7QQ3zMiXSfq3M58IoL5MPku8rRO
jyTsOSlWveBjAUoQeTF5c1ZEyPgSmUzUY4CzmONqn4GbQ7QFDmpGjOmqgDKWZLvA
jxrPLZxJ/C6+j413WzrXiJy1QZHhJQS3ylP/KHc2qF4qpBZqzNPtvR41BPbMH3r1
KFp38IOmmmIrRg5wOHmeZNv9ua3BLaJLXDvdDNjZ1z/rcNSLvebsA7FwyU+I8chh
ObyHHH+tX6Bc6Qw08QFU4aLeSo18ufmFprSKVYvcI/R8Q2J6NFNWbPfCpJbiqchR
mK6otYXSI7kvBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:09 2026 by rpki-client