Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: NItxorZDxDVtMQrxMvcU6EFWSyZtYRzZgaLFXZwnyv8=
Subject key identifier: 24:C7:05:57:3B:1B:62:89:66:37:FE:C9:02:DC:8A:1A:FB:CA:0D:A2
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019D38D2ACFE9CE01CDF93A3BDEF1011A64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: ouZLCU76Yv7S+boOOkTKpdz6R7E8+7I59JtfPNu2bj4=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ac:fe:9c:e0:1c:df:93:a3:bd:ef:10:11:a6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=24c705573b1b62896637fec902dc8a1afbca0da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:67:8e:4c:2b:a6:c5:81:81:a7:08:d6:0a:
1e:27:eb:b7:14:79:bb:3a:6d:3d:d7:a7:5a:fb:c9:
75:2f:7d:94:68:9a:6c:1a:87:97:5b:87:81:03:fa:
8d:b3:e6:40:6b:49:d2:fe:dc:de:6e:5d:87:98:16:
83:a3:a8:b2:76:56:34:a3:81:9f:09:d5:d6:99:e0:
8e:c3:da:ed:b0:71:94:85:13:ae:94:eb:9b:ae:1b:
13:94:56:ab:2c:62:bd:6c:a4:29:5b:47:be:19:ba:
00:0f:8d:cf:17:44:75:38:87:07:02:45:68:1c:8a:
6d:bd:c1:e6:8c:39:21:34:6e:c6:22:8c:35:b9:95:
9d:df:bc:b0:2a:76:43:71:e6:4a:99:a3:23:d4:11:
60:09:89:9f:15:9c:01:9d:7e:e8:af:d9:b6:db:16:
45:80:9c:0e:ad:32:3e:5b:93:62:7f:c5:57:40:fb:
46:0c:e0:c9:dd:39:55:2c:d7:bb:e5:d7:ce:e9:f9:
d8:39:8a:2b:c8:27:71:fd:d4:f7:ca:2b:c1:45:64:
c4:8f:8b:6e:b1:0a:99:c4:96:57:ad:68:b6:b1:cc:
52:95:4d:d6:28:8a:b4:13:f6:eb:c5:ab:71:43:8e:
5f:ec:e3:f9:99:65:71:0b:41:74:b0:fa:3a:ef:be:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C7:05:57:3B:1B:62:89:66:37:FE:C9:02:DC:8A:1A:FB:CA:0D:A2
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:53:d5:da:e7:8d:13:66:a7:03:3f:3a:f0:c0:75:0f:85:6d:
4d:a2:34:ac:c0:34:e4:8b:fe:34:3d:ce:20:d9:ba:71:b5:b1:
35:58:d0:b6:39:c7:e7:f5:9f:0e:68:9b:0c:7f:78:82:44:3f:
7a:6c:ac:fe:93:cd:99:d9:c9:26:5b:6b:36:b2:68:d4:c6:4c:
74:2b:39:eb:08:ed:83:1c:71:d6:0f:fe:58:b1:fa:78:00:cb:
2d:89:c2:cd:e6:b2:83:22:34:9f:54:2f:96:d2:de:a1:35:c3:
a4:b3:82:58:19:dc:f4:be:7e:68:78:24:cd:19:2e:e2:44:16:
f8:98:2a:29:f2:8b:f6:ef:58:13:1c:d9:7f:9a:f2:cd:c3:d1:
20:03:a8:7b:d3:83:42:d6:26:92:68:2e:d7:da:1b:ef:53:fc:
2f:1f:8f:82:54:e0:98:4a:46:b3:ac:ac:a2:77:d3:d5:d3:bd:
9c:e1:9d:ac:6f:56:8c:23:35:21:6a:96:52:85:a1:c6:47:28:
7b:d8:5b:b5:f4:59:ba:95:76:7c:7b:ac:7c:96:ab:95:fc:99:
12:74:65:d6:7b:fc:b5:2f:d7:27:25:38:51:f6:27:24:b7:80:
13:37:fd:3b:76:f9:b2:02:59:0a:64:e5:93:c6:49:50:db:1c:
7d:79:eb:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040qz+nOAc35Ojve8QEaZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjYwMzI5MDkwMDIzWhcNMjYwMzMwMDkwMDIzWjAzMTEwLwYDVQQD
EygyNGM3MDU1NzNiMWI2Mjg5NjYzN2ZlYzkwMmRjOGExYWZiY2EwZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLdnjkwrpsWBgacI1goeJ+u3FHm7
Om0916da+8l1L32UaJpsGoeXW4eBA/qNs+ZAa0nS/tzebl2HmBaDo6iydlY0o4Gf
CdXWmeCOw9rtsHGUhROulOubrhsTlFarLGK9bKQpW0e+GboAD43PF0R1OIcHAkVo
HIptvcHmjDkhNG7GIow1uZWd37ywKnZDceZKmaMj1BFgCYmfFZwBnX7or9m22xZF
gJwOrTI+W5Nif8VXQPtGDODJ3TlVLNe75dfO6fnYOYoryCdx/dT3yivBRWTEj4tu
sQqZxJZXrWi2scxSlU3WKIq0E/brxatxQ45f7OP5mWVxC0F0sPo6777TfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTHBVc7G2KJZjf+yQLcihr7yg2iMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVPV2ueN
E2anAz868MB1D4VtTaI0rMA05Iv+ND3OINm6cbWxNVjQtjnH5/WfDmibDH94gkQ/
emys/pPNmdnJJltrNrJo1MZMdCs56wjtgxxx1g/+WLH6eADLLYnCzeaygyI0n1Qv
ltLeoTXDpLOCWBnc9L5+aHgkzRku4kQW+JgqKfKL9u9YExzZf5ryzcPRIAOoe9OD
QtYmkmgu19ob71P8Lx+PglTgmEpGs6ysonfT1dO9nOGdrG9WjCM1IWqWUoWhxkco
e9hbtfRZupV2fHusfJarlfyZEnRl1nv8tS/XJyU4UfYnJLeAEzf9O3b5sgJZCmTl
k8ZJUNscfXnrvw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:46 2026 by rpki-client