Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: hmY4LgG7+GQ2dwVS3fAthrva61zvhC6wo3DuJybWcw8=
Subject key identifier: C5:E6:F8:AD:98:4D:6E:9F:A1:66:D0:40:29:66:18:20:22:F0:4C:27
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019D38D2ECB57DAD37FDD00C63838D28463D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: UJudbdHaQF50Sph8SS93Ii0CNBg.roa (hash: BhW8Ppudpr7Ja11wBjitKBz/FAThXnQThhUCrlT7gwQ=)
2: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: UdrOs2xtj0tHsixwuYKxaReQRVMAlkCjClCxMyLM8Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ec:b5:7d:ad:37:fd:d0:0c:63:83:8d:28:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=c5e6f8ad984d6e9fa166d0402966182022f04c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:f5:72:ab:ce:f3:85:f8:53:15:a1:db:ce:
a1:f8:b2:c1:bc:19:e5:0e:49:ca:31:b1:63:75:b5:
52:c3:1e:e0:45:41:ba:79:22:a1:85:8c:e6:fd:df:
cd:58:f3:70:45:1d:76:a7:e4:33:9c:71:0b:14:fb:
ef:67:13:2d:e4:7e:30:6f:2f:f2:bf:3a:4a:38:2f:
80:2b:73:e7:db:53:d4:36:53:f5:3b:80:fe:da:d0:
d7:13:31:2b:17:53:71:84:13:8a:df:e5:a6:4a:7a:
02:01:03:ca:21:36:fa:38:12:f3:6a:cd:63:b8:46:
45:8d:23:93:de:c9:76:0d:0a:60:68:75:ff:88:ec:
31:d4:9c:03:c8:5d:13:a8:da:84:c4:20:be:c8:ff:
80:16:15:20:7f:ec:ab:48:64:d7:dc:19:1f:ec:72:
68:15:54:bf:72:d5:f6:66:e1:76:85:bb:ec:78:75:
2d:0a:9f:dd:3c:d3:ae:7e:76:2d:72:0e:ed:9f:72:
c9:22:05:d7:73:0d:6b:d5:be:01:5c:1c:36:69:e6:
91:d1:7f:b9:9d:bc:4b:2c:12:2f:5f:a6:c1:97:b3:
7d:67:64:14:b6:b9:fd:74:52:8f:ce:c2:c3:51:01:
f7:90:7f:2f:a2:30:89:d1:51:13:9b:7d:b5:d6:58:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:F8:AD:98:4D:6E:9F:A1:66:D0:40:29:66:18:20:22:F0:4C:27
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:62:fd:fb:df:64:54:8a:3c:3f:7a:5d:88:db:98:73:d4:f7:
9c:c6:59:67:e5:bb:e1:d5:65:55:68:22:95:2f:3d:d8:ac:04:
ab:f5:4a:9e:6c:cc:0f:f5:67:e1:fa:dd:6c:c1:16:cc:a5:83:
a6:8a:03:a1:f4:7e:bf:0d:52:f6:a6:5d:67:8c:bd:96:1e:ab:
23:b2:09:6c:da:73:41:fa:39:3a:f1:00:d6:ef:49:e3:ed:16:
b5:e9:a8:0b:02:40:e3:b0:68:32:0b:c6:dc:52:1a:f2:98:a7:
9c:db:96:55:1c:62:7b:ee:ef:d0:4f:20:67:6a:5a:76:0c:9a:
ef:dd:71:a9:7e:2e:99:d8:eb:cc:6d:82:4a:a0:9a:57:fa:49:
4f:13:6b:e7:b7:3c:74:71:e2:8c:4d:27:c7:8e:78:a5:f0:a1:
dd:dc:ad:d6:87:b5:58:72:29:7b:44:43:53:27:6d:f3:26:bf:
ac:9f:6e:31:b3:20:d3:dc:2e:58:33:5d:2f:15:e8:9e:31:2c:
93:39:ef:30:03:ab:56:92:ab:3a:33:58:56:07:56:d5:f1:c4:
c5:c2:c1:1d:49:c3:8f:d8:4f:1c:10:a0:d4:84:3c:22:1b:75:
1b:4a:ba:18:88:a5:b7:cb:0c:6c:53:ac:79:59:c7:ad:99:ec:
a1:7c:28:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040uy1fa03/dAMY4ONKEY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjYwMzI5MDkwMDQwWhcNMjYwMzMwMDkwMDQwWjAzMTEwLwYDVQQD
EyhjNWU2ZjhhZDk4NGQ2ZTlmYTE2NmQwNDAyOTY2MTgyMDIyZjA0YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQP1cqvO84X4UxWh286h+LLBvBnl
DknKMbFjdbVSwx7gRUG6eSKhhYzm/d/NWPNwRR12p+QznHELFPvvZxMt5H4wby/y
vzpKOC+AK3Pn21PUNlP1O4D+2tDXEzErF1NxhBOK3+WmSnoCAQPKITb6OBLzas1j
uEZFjSOT3sl2DQpgaHX/iOwx1JwDyF0TqNqExCC+yP+AFhUgf+yrSGTX3Bkf7HJo
FVS/ctX2ZuF2hbvseHUtCp/dPNOufnYtcg7tn3LJIgXXcw1r1b4BXBw2aeaR0X+5
nbxLLBIvX6bBl7N9Z2QUtrn9dFKPzsLDUQH3kH8vojCJ0VETm3211liiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXm+K2YTW6foWbQQClmGCAi8EwnMB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2L9+99k
VIo8P3pdiNuYc9T3nMZZZ+W74dVlVWgilS892KwEq/VKnmzMD/Vn4frdbMEWzKWD
pooDofR+vw1S9qZdZ4y9lh6rI7IJbNpzQfo5OvEA1u9J4+0WtemoCwJA47BoMgvG
3FIa8pinnNuWVRxie+7v0E8gZ2padgya791xqX4umdjrzG2CSqCaV/pJTxNr57c8
dHHijE0nx454pfCh3dyt1oe1WHIpe0RDUydt8ya/rJ9uMbMg09wuWDNdLxXonjEs
kznvMAOrVpKrOjNYVgdW1fHExcLBHUnDj9hPHBCg1IQ8Iht1G0q6GIilt8sMbFOs
eVnHrZnsoXwolg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client