Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: IZCfVP0+FQhdSQrNjt3pLAdH3EjyQfUgAzMRBJalbrE=
Subject key identifier: E0:9B:48:9C:3C:E8:8A:2D:6F:99:03:44:F7:91:20:6E:C6:2A:2B:F1
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 019D37C0B1F7A3E8C81AB26630CB2B0D5E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0FFC
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: mo1aUStZ2GE1koRwVcorhDKgmSn0Z4neWFMedydM8ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b1:f7:a3:e8:c8:1a:b2:66:30:cb:2b:0d:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=e09b489c3ce88a2d6f990344f791206ec62a2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:6d:1c:13:ee:3f:98:37:31:be:a7:f0:fe:
b4:39:df:78:58:f8:c9:37:c4:51:61:ec:fc:ef:f9:
7c:a3:a7:69:81:0c:5d:4a:64:ba:7e:d0:6d:be:df:
a2:11:27:a9:f5:3c:33:77:ba:c8:11:98:f8:06:23:
f1:1f:a3:c0:0d:a4:59:bb:b0:46:7b:73:ba:a4:75:
12:ef:4d:25:03:b8:00:90:08:e5:55:bb:05:7c:0c:
c7:69:6b:a9:52:ab:18:ad:49:ad:8f:c6:a5:86:f7:
a3:c4:c8:ce:93:60:3e:bd:2a:29:8e:1d:15:8a:2b:
7d:ab:05:e3:f8:43:98:05:d2:95:0c:38:6d:f5:ad:
0d:8a:57:e8:86:4e:75:22:0a:09:f7:c8:ed:cb:0c:
07:a8:0c:bb:bc:10:14:06:96:dc:a4:b7:0e:24:27:
d7:d4:b8:5a:3e:6d:ed:e7:8d:45:9a:57:89:fb:d0:
ff:e8:ae:a7:bb:e0:14:48:f0:93:08:f9:83:a7:fc:
92:52:27:8e:d6:bf:c8:4c:c3:18:89:1e:5e:55:df:
69:a3:d7:de:a9:65:4d:78:e3:35:ad:80:e5:26:d6:
29:9b:21:4a:fb:8e:9b:73:a1:ba:2b:70:70:b9:cd:
41:39:c9:65:61:6f:bc:d6:a3:98:43:33:9c:88:80:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:48:9C:3C:E8:8A:2D:6F:99:03:44:F7:91:20:6E:C6:2A:2B:F1
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6a:27:2d:02:4b:fb:d4:e6:e7:a1:99:d6:84:e8:2e:6e:b3:
cd:65:6d:9c:84:cf:7b:41:8b:31:04:ed:dd:25:c6:8c:44:46:
a6:96:20:7b:fb:bf:6b:a8:ae:16:fe:fe:89:30:5a:b6:2b:b5:
55:77:77:b7:a3:d6:5b:4c:72:60:7c:d9:7d:52:b5:81:20:8a:
66:08:f6:83:df:3a:c9:96:4c:13:d9:1f:51:8a:6c:68:a4:0f:
58:45:30:89:c3:d2:31:ea:76:96:12:ea:cd:db:02:d3:b4:02:
b8:ea:8e:43:e1:f5:ae:33:20:77:8e:87:ae:19:3a:41:8e:86:
8c:fc:be:f9:a1:01:da:34:a6:f9:93:22:5b:01:e6:de:9e:bc:
0f:46:89:4a:ff:72:ec:ee:ac:6c:86:a4:85:f0:22:4e:3d:19:
a9:2e:4a:3b:a4:c8:2e:f6:20:fb:40:80:e1:de:69:40:7c:2f:
c4:1e:5f:39:b1:e2:71:1c:e1:e6:f9:5d:78:be:33:a8:48:58:
4f:be:20:89:53:9a:50:78:30:f3:aa:ec:70:fd:41:68:69:c8:
57:93:56:6f:86:6e:16:40:29:47:88:00:f9:b8:7a:4a:2f:ac:
76:3b:fc:a1:e5:45:6e:38:61:3a:af:57:ca:37:af:43:f6:12:
7c:fc:f8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLH3o+jIGrJmMMsrDV4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl
NTUxNjQwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
EyhlMDliNDg5YzNjZTg4YTJkNmY5OTAzNDRmNzkxMjA2ZWM2MmEyYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ptHBPuP5g3Mb6n8P60Od94WPjJ
N8RRYez87/l8o6dpgQxdSmS6ftBtvt+iESep9Twzd7rIEZj4BiPxH6PADaRZu7BG
e3O6pHUS700lA7gAkAjlVbsFfAzHaWupUqsYrUmtj8alhvejxMjOk2A+vSopjh0V
iit9qwXj+EOYBdKVDDht9a0Nilfohk51IgoJ98jtywwHqAy7vBAUBpbcpLcOJCfX
1LhaPm3t541FmleJ+9D/6K6nu+AUSPCTCPmDp/ySUieO1r/ITMMYiR5eVd9po9fe
qWVNeOM1rYDlJtYpmyFK+46bc6G6K3Bwuc1BOcllYW+81qOYQzOciICwaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCbSJw86Iotb5kDRPeRIG7GKivxMB8GA1UdIwQY
MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt
NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1
LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGonLQJL
+9Tm56GZ1oToLm6zzWVtnITPe0GLMQTt3SXGjERGppYge/u/a6iuFv7+iTBatiu1
VXd3t6PWW0xyYHzZfVK1gSCKZgj2g986yZZME9kfUYpsaKQPWEUwicPSMep2lhLq
zdsC07QCuOqOQ+H1rjMgd46Hrhk6QY6GjPy++aEB2jSm+ZMiWwHm3p68D0aJSv9y
7O6sbIakhfAiTj0ZqS5KO6TILvYg+0CA4d5pQHwvxB5fObHicRzh5vldeL4zqEhY
T74giVOaUHgw86rscP1BaGnIV5NWb4ZuFkApR4gA+bh6Si+sdjv8oeVFbjhhOq9X
yjevQ/YSfPz4xA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client