Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: HGvFHx1lYkjSzf/VI1ca/2v24dyRm+bCBh2NzJk7tYA=
Subject key identifier: 1D:A0:E8:A8:47:3B:E3:03:32:DD:39:57:DF:E1:54:35:BF:B3:1D:4A
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019CB1DACA823E83EF769AE924C7CB50B7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 05
Signing time: Tue 03 Mar 2026 04:00:31 +0000
Manifest this update: Tue 03 Mar 2026 04:00:31 +0000
Manifest next update: Wed 04 Mar 2026 04:00:31 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: YPtxCtHDbVvWRzwk33JjEVknkWfIvkao2yvkv6injQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:da:ca:82:3e:83:ef:76:9a:e9:24:c7:cb:50:b7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Mar 3 04:00:31 2026 GMT
Not After : Mar 4 04:00:31 2026 GMT
Subject: CN=1da0e8a8473be30332dd3957dfe15435bfb31d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:19:fd:df:a5:02:8d:5b:06:dd:71:6a:57:
cd:fb:ed:18:b1:6a:d8:b9:85:96:5b:5f:14:9f:dc:
72:c0:d8:8c:55:7d:42:7b:06:a3:39:be:4d:7f:7a:
6d:83:c9:3f:d0:47:83:7c:7a:91:41:ca:78:34:9f:
65:b2:b4:5b:a5:26:d5:91:17:26:b2:a3:ad:1d:9a:
db:fb:2d:99:e8:5d:ff:21:2e:7b:01:9a:9a:78:ae:
d0:4c:be:d2:64:53:fa:93:02:75:97:5d:6a:28:fd:
68:55:57:6e:7c:1f:e4:fc:99:3c:ac:59:23:dc:16:
48:d5:81:cc:18:e2:c9:d7:46:36:14:9f:10:64:e5:
dc:99:08:85:58:48:64:25:80:b5:1d:2c:a4:bb:3f:
43:f2:2e:50:f0:b0:bb:08:2e:e2:7d:27:64:bf:47:
8a:f3:2d:11:ce:f5:02:32:17:e8:cb:5e:a1:36:42:
5c:70:cf:f3:c2:94:d1:b9:22:cd:fe:cc:5d:79:25:
df:05:e1:fe:6a:f1:1f:8e:83:41:45:a0:b0:14:97:
74:ce:6e:dd:7d:c7:11:76:81:6e:3d:1d:30:2c:08:
3f:d7:09:88:7a:50:2b:51:24:77:68:36:3f:34:45:
47:ec:48:d5:a9:7c:c5:dd:3b:7f:c6:dd:19:18:82:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A0:E8:A8:47:3B:E3:03:32:DD:39:57:DF:E1:54:35:BF:B3:1D:4A
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8f:1d:ff:01:4e:28:51:9a:fe:dc:57:37:ff:53:21:ce:5d:
82:89:e9:57:98:d9:79:52:35:fe:1a:20:d1:ee:58:7d:77:69:
04:b2:29:ea:f5:c2:2e:bf:fa:f4:74:5b:5d:e6:6e:b9:d9:fc:
13:af:1e:69:4e:cc:b0:a5:2d:ab:ec:20:80:90:a4:c3:46:2e:
50:c5:47:8f:46:c5:70:c1:87:17:98:83:25:62:5b:ca:e7:79:
45:6c:fa:e4:22:f1:cf:3e:4f:0f:73:d7:9f:f9:e2:2d:77:41:
68:ee:3b:dd:f8:96:6e:26:c8:97:72:3e:c2:13:74:bc:1e:60:
ba:b4:58:6e:88:e3:b3:fd:8c:95:50:52:a2:19:f1:82:6f:b0:
e2:31:de:6f:6c:47:dd:00:bd:af:c4:5f:74:f9:f2:f5:de:ec:
2c:a5:f9:c0:88:42:7d:44:c1:45:35:3d:80:a2:d6:cb:89:31:
9a:86:15:39:49:08:7c:16:d7:98:d9:cf:08:74:40:a0:ef:50:
48:e7:06:1f:ce:d8:35:58:3e:d2:12:3f:2a:ac:44:6e:e8:02:
e0:12:f8:ff:b4:e1:32:b6:ea:52:4e:27:41:81:1d:3a:47:5c:
a0:84:1d:61:d5:45:b0:82:67:e0:87:4c:e7:ff:92:d2:a2:20:
c4:03:50:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyx2sqCPoPvdprpJMfLULfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMmUxNjcyNDYzYjdmMTVmMTJiMjJmOGI5NjcwNGIwNGE1
ZGJlOTUwHhcNMjYwMzAzMDQwMDMxWhcNMjYwMzA0MDQwMDMxWjAzMTEwLwYDVQQD
EygxZGEwZThhODQ3M2JlMzAzMzJkZDM5NTdkZmUxNTQzNWJmYjMxZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhYZ/d+lAo1bBt1xalfN++0YsWrY
uYWWW18Un9xywNiMVX1CewajOb5Nf3ptg8k/0EeDfHqRQcp4NJ9lsrRbpSbVkRcm
sqOtHZrb+y2Z6F3/IS57AZqaeK7QTL7SZFP6kwJ1l11qKP1oVVdufB/k/Jk8rFkj
3BZI1YHMGOLJ10Y2FJ8QZOXcmQiFWEhkJYC1HSykuz9D8i5Q8LC7CC7ifSdkv0eK
8y0RzvUCMhfoy16hNkJccM/zwpTRuSLN/sxdeSXfBeH+avEfjoNBRaCwFJd0zm7d
fccRdoFuPR0wLAg/1wmIelArUSR3aDY/NEVH7EjVqXzF3Tt/xt0ZGIIc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2g6KhHO+MDMt05V9/hVDW/sx1KMB8GA1UdIwQY
MBaAFP8uFnJGO38V8Ssi+LlnBLBKXb6VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYt
ZTQ0NTZmNTdkNDgyLzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWUyYjUtYTFiZi00ODM5LWI1MzYtZTQ0NTZmNTdkNDgy
LzEvX3k0V2NrWTdmeFh4S3lMNHVXY0VzRXBkdnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYY8d/wFO
KFGa/txXN/9TIc5dgonpV5jZeVI1/hog0e5YfXdpBLIp6vXCLr/69HRbXeZuudn8
E68eaU7MsKUtq+wggJCkw0YuUMVHj0bFcMGHF5iDJWJbyud5RWz65CLxzz5PD3PX
n/niLXdBaO473fiWbibIl3I+whN0vB5gurRYbojjs/2MlVBSohnxgm+w4jHeb2xH
3QC9r8RfdPny9d7sLKX5wIhCfUTBRTU9gKLWy4kxmoYVOUkIfBbXmNnPCHRAoO9Q
SOcGH87YNVg+0hI/KqxEbugC4BL4/7ThMrbqUk4nQYEdOkdcoIQdYdVFsIJn4IdM
5/+S0qIgxANQTw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 13:44:49 2026 by rpki-client