Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: AEWvwK9CDyEW/+T+GR5gf7ATsE1x46eoYWqCUCA3u4E=
Subject key identifier: 32:4F:75:87:5E:78:43:5B:50:AA:A9:4F:A4:56:7E:C9:0C:23:17:39
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019D3865702ACC6FFC5672AD2795847BB277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 0D11
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: sKXRq8aEnFIgbr4b51dpoMmQO8Y.roa (hash: c2iR1V9JRLqe/KQCQ1Fbh3FmzQaok+nemeB5OzyBRRk=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: Iu1ALJa0zoihCVWTwNWlvn9cC4bFBPzjNBEZ367AX9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:70:2a:cc:6f:fc:56:72:ad:27:95:84:7b:b2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=324f75875e78435b50aaa94fa4567ec90c231739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:a6:17:bc:8f:5a:31:5a:07:2f:b3:29:59:
40:b6:47:7d:02:0a:17:fd:c0:54:a0:09:e9:f0:5b:
44:9e:eb:6c:b2:00:ed:89:a4:31:eb:c9:51:ec:5d:
f4:61:32:d0:6e:ca:50:93:01:11:8c:bb:1a:49:35:
fc:0f:c5:0c:36:db:c6:92:75:50:16:b5:ff:93:e0:
a6:4e:15:0a:89:64:47:9e:16:82:5b:6c:2e:24:7f:
5c:c2:8b:63:e7:4e:75:5c:f9:89:8f:eb:23:f3:db:
ca:b0:4c:1b:19:51:88:5b:b0:bc:46:64:d5:09:25:
b5:0b:ad:ae:22:c2:07:d0:65:2d:8b:c2:c3:18:03:
66:cc:cf:ae:3a:d9:c1:b0:ec:a8:7a:77:1c:01:9a:
9d:69:1b:b7:02:6c:34:91:f2:0e:4c:d5:e3:a2:cb:
ee:02:44:d3:f5:4c:8d:8a:05:b3:36:ad:c8:f8:9f:
46:cd:42:da:7c:39:a2:5c:4b:b5:b0:0f:33:1b:6c:
f5:5b:54:12:d1:05:8c:bb:4d:05:2b:4f:34:37:9e:
5b:b6:d5:99:f4:39:51:78:8f:d8:b4:05:56:f2:c4:
c2:e8:89:14:3e:f3:cb:f4:4e:7d:ef:b6:da:83:3f:
80:e2:0d:bc:80:69:8c:10:e1:41:df:16:66:5b:74:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:75:87:5E:78:43:5B:50:AA:A9:4F:A4:56:7E:C9:0C:23:17:39
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:5a:0a:d7:45:69:ce:da:19:04:b9:4d:e1:f4:21:6c:01:
90:70:59:49:6f:a3:29:e5:ef:fe:c8:2d:3c:ea:f8:7f:b5:11:
9d:64:e4:ad:c6:ce:3a:67:5e:b5:ba:8e:26:ec:50:42:e1:de:
2e:1d:a9:7c:0d:d7:c7:61:cb:06:fb:1d:74:be:b7:b9:93:9a:
6e:27:70:3a:c2:c1:b3:38:12:e4:88:6f:f1:8b:31:67:bd:32:
f5:b2:72:11:2c:47:53:96:57:e4:ba:f2:38:ab:d8:d1:ae:42:
6e:6c:36:1e:be:a7:a7:93:2d:f1:71:28:d4:8d:c4:92:90:e5:
a0:09:78:e1:6c:10:8e:64:6a:74:16:17:f1:be:aa:aa:a6:8d:
b2:e7:ee:5c:8e:0b:64:b0:25:7f:c1:5d:c2:02:82:f0:7b:ea:
00:a3:a4:8e:3f:e6:05:ff:46:0b:d4:be:18:da:ed:c2:eb:93:
c7:5e:1c:78:26:5b:de:36:bc:54:03:99:3d:67:28:56:2a:c3:
20:78:7c:e1:20:b7:a1:50:3f:5e:7a:2b:05:e6:36:10:99:a8:
7b:81:32:12:c8:ca:23:f4:41:22:23:e7:99:53:94:f3:a0:f4:
db:33:98:12:20:22:e5:32:0f:8e:18:6f:bd:ff:de:6d:1f:a7:
3c:6f:24:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXAqzG/8VnKtJ5WEe7J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NWQwMWI0NDI5NDZlMTkyNDMxM2Q1NjRmMzFiN2U0MmUy
NDU1ZTcwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
EygzMjRmNzU4NzVlNzg0MzViNTBhYWE5NGZhNDU2N2VjOTBjMjMxNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JSmF7yPWjFaBy+zKVlAtkd9AgoX
/cBUoAnp8FtEnutssgDtiaQx68lR7F30YTLQbspQkwERjLsaSTX8D8UMNtvGknVQ
FrX/k+CmThUKiWRHnhaCW2wuJH9cwotj5051XPmJj+sj89vKsEwbGVGIW7C8RmTV
CSW1C62uIsIH0GUti8LDGANmzM+uOtnBsOyoenccAZqdaRu3Amw0kfIOTNXjosvu
AkTT9UyNigWzNq3I+J9GzULafDmiXEu1sA8zG2z1W1QS0QWMu00FK080N55bttWZ
9DlReI/YtAVW8sTC6IkUPvPL9E5977bagz+A4g28gGmMEOFB3xZmW3QlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJPdYdeeENbUKqpT6RWfskMIxc5MB8GA1UdIwQY
MBaAFMhdAbRClG4ZJDE9Vk8xt+QuJFXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEt
MTZiOTdiOWE4ODVlLzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEtMTZiOTdiOWE4ODVl
LzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZlaCtdF
ac7aGQS5TeH0IWwBkHBZSW+jKeXv/sgtPOr4f7URnWTkrcbOOmdetbqOJuxQQuHe
Lh2pfA3Xx2HLBvsddL63uZOabidwOsLBszgS5Ihv8YsxZ70y9bJyESxHU5ZX5Lry
OKvY0a5Cbmw2Hr6np5Mt8XEo1I3EkpDloAl44WwQjmRqdBYX8b6qqqaNsufuXI4L
ZLAlf8FdwgKC8HvqAKOkjj/mBf9GC9S+GNrtwuuTx14ceCZb3ja8VAOZPWcoVirD
IHh84SC3oVA/XnorBeY2EJmoe4EyEsjKI/RBIiPnmVOU86D02zOYEiAi5TIPjhhv
vf/ebR+nPG8k/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:08 2026 by rpki-client