Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: n2eVLIuFAgxj8VbFTahgWp7HFUNDB+G9o+oYgfgXM6o=
Subject key identifier: B8:1C:43:97:59:DC:AE:0D:70:12:2F:5D:8F:69:37:63:99:7B:D4:51
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019D38D30430F3B15B0F5F731DEC5FBAC981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0D95
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: uYLvyY2WLI_GT8ALtuBN7WJQxWc.roa (hash: 1aDErPT/oCtdeXIwL0ZqBC7wE1QZvB84rjebiPZPqXg=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: Mo5BKKJRfWyLQPrQlau7JAP7Ut5NrPZZos9z7J8ciCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:04:30:f3:b1:5b:0f:5f:73:1d:ec:5f:ba:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=b81c439759dcae0d70122f5d8f693763997bd451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:12:cd:80:df:9e:c7:6a:65:1d:a4:05:ba:
de:bf:b9:df:56:d2:86:b1:6a:95:c7:d0:73:1b:f1:
59:67:68:4a:4b:2b:ea:b2:5f:31:cc:13:4f:fa:f9:
4c:4f:c0:7b:f5:88:47:3b:a7:75:a0:45:fc:c4:fc:
b6:f5:29:b0:9d:c1:4c:46:9f:5e:bd:d2:53:a6:c0:
d6:36:28:ac:f6:8d:70:b0:b5:70:a9:0d:7e:35:62:
4d:10:da:46:ca:05:9a:19:1f:62:c2:47:8f:c9:eb:
7b:30:ae:89:07:5b:fb:fe:be:93:9f:b8:7a:6d:c7:
69:c1:f5:63:6c:7f:83:53:96:d1:6f:5b:d2:0c:ae:
e0:8c:05:71:07:e5:6c:5c:2b:a3:d9:ac:6a:2f:e5:
32:f5:56:07:0a:4b:1e:03:23:1b:78:bc:4b:ab:06:
0f:0a:0c:3c:25:63:33:d1:ba:2d:73:90:bc:61:57:
aa:74:36:eb:97:8c:4b:da:c5:03:2c:13:41:b6:9b:
85:a9:bb:7b:f3:3e:2c:97:55:c6:2b:8c:4a:3c:cb:
34:c0:91:da:a0:1a:ae:f4:13:6b:c1:6a:cd:a9:bf:
0d:5a:25:34:da:5f:70:ad:0c:6f:5f:27:48:e9:b1:
04:2b:c7:98:ae:d5:77:37:df:60:e0:93:d4:9b:32:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:43:97:59:DC:AE:0D:70:12:2F:5D:8F:69:37:63:99:7B:D4:51
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:61:ac:2d:48:29:31:d1:42:99:ed:a6:b1:7a:56:08:1b:
3a:30:15:d0:72:bf:49:49:c2:6b:a9:38:bc:80:09:0d:dc:63:
e7:b7:d5:4a:dc:37:69:5f:e0:79:7c:25:3b:6c:26:ad:7c:fc:
70:23:d6:19:f5:6b:f8:6c:52:aa:4d:3d:93:da:bd:1c:2b:b0:
80:02:c6:a2:09:25:81:bf:39:60:ca:72:1c:83:ff:39:60:24:
8c:65:d1:1b:20:86:ab:2c:d2:84:a8:13:8a:e8:63:74:79:be:
0b:0e:05:de:fe:27:1d:13:06:bd:8a:88:c8:d2:a0:2a:b4:cf:
ee:df:af:84:35:c7:25:8f:59:d2:bd:95:b8:a1:a8:6c:14:c4:
a7:a6:ec:86:19:59:3a:be:fc:c4:56:76:f6:6a:8f:99:6e:08:
0f:2c:a8:9c:26:bc:1d:9e:47:e4:86:80:b3:8c:a7:44:a6:6a:
14:a4:31:39:54:e7:65:e2:33:11:06:ae:82:54:92:15:6b:33:
93:2d:2b:db:eb:fb:23:6c:e3:cc:aa:db:d4:d2:ff:66:08:a6:
06:e7:60:28:9b:81:fa:03:d8:9c:49:5c:df:30:30:3b:a0:ef:
9d:1a:34:78:aa:86:05:41:43:c6:62:1d:a3:16:38:65:22:7b:
a7:ef:01:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wQw87FbD19zHexfusmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWVhNTE2NzgwN2I3MDg1YjUxMzEwY2E2MGRiZjJiOTE5
ODJmYzcwHhcNMjYwMzI5MDkwMDQ2WhcNMjYwMzMwMDkwMDQ2WjAzMTEwLwYDVQQD
EyhiODFjNDM5NzU5ZGNhZTBkNzAxMjJmNWQ4ZjY5Mzc2Mzk5N2JkNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYSzYDfnsdqZR2kBbrev7nfVtKG
sWqVx9BzG/FZZ2hKSyvqsl8xzBNP+vlMT8B79YhHO6d1oEX8xPy29SmwncFMRp9e
vdJTpsDWNiis9o1wsLVwqQ1+NWJNENpGygWaGR9iwkePyet7MK6JB1v7/r6Tn7h6
bcdpwfVjbH+DU5bRb1vSDK7gjAVxB+VsXCuj2axqL+Uy9VYHCkseAyMbeLxLqwYP
Cgw8JWMz0botc5C8YVeqdDbrl4xL2sUDLBNBtpuFqbt78z4sl1XGK4xKPMs0wJHa
oBqu9BNrwWrNqb8NWiU02l9wrQxvXydI6bEEK8eYrtV3N99g4JPUmzJXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgcQ5dZ3K4NcBIvXY9pN2OZe9RRMB8GA1UdIwQY
MBaAFMqepRZ4B7cIW1ExDKYNvyuRmC/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQt
Mjc0MWIzNmI3NWRlLzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQtMjc0MWIzNmI3NWRl
LzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQRhrC1I
KTHRQpntprF6VggbOjAV0HK/SUnCa6k4vIAJDdxj57fVStw3aV/geXwlO2wmrXz8
cCPWGfVr+GxSqk09k9q9HCuwgALGogklgb85YMpyHIP/OWAkjGXRGyCGqyzShKgT
iuhjdHm+Cw4F3v4nHRMGvYqIyNKgKrTP7t+vhDXHJY9Z0r2VuKGobBTEp6bshhlZ
Or78xFZ29mqPmW4IDyyonCa8HZ5H5IaAs4ynRKZqFKQxOVTnZeIzEQauglSSFWsz
ky0r2+v7I2zjzKrb1NL/ZgimBudgKJuB+gPYnElc3zAwO6DvnRo0eKqGBUFDxmId
oxY4ZSJ7p+8BvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client