Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File: YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier: eD5uc/c7iqzP4R3iIRN8byTfN9Qt35Z8gcDwzM6JRyc=
Subject key identifier: 5A:2E:BF:F6:95:A9:01:2E:4E:E0:06:05:75:59:8A:D6:7A:24:6C:40
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer: /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial: 019D39AECA96C9E59DC43E7CF1F357DE89F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: TNcspjio1GQf+p9bBFl6XsGGIiCTpqU8HI9izl/p/Qc=)
5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ca:96:c9:e5:9d:c4:3e:7c:f1:f3:57:de:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=5a2ebff695a9012e4ee0060575598ad67a246c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:a7:b0:00:0c:46:6c:69:e7:c0:93:53:71:
5d:12:7b:83:81:e7:c9:bb:74:12:32:6c:6d:0a:57:
bb:83:d3:46:66:1a:ac:c2:b7:1e:9b:1a:91:e2:42:
85:69:78:ba:e3:cc:83:94:c5:79:6f:c8:16:d1:71:
60:ab:57:4a:94:9b:22:cf:1b:3d:1e:a5:d7:a2:be:
5d:82:5e:54:41:68:ee:b4:a4:e2:8d:76:6b:9b:70:
aa:48:d5:65:bc:48:7b:fc:50:96:39:4b:fb:1e:f4:
dd:1b:99:59:f6:67:22:a3:d0:e2:a0:36:eb:b5:3c:
88:fd:80:23:a8:8b:1a:f1:bc:1c:16:be:b7:50:b4:
f3:ff:28:87:82:61:fb:74:77:15:7a:61:15:c0:a1:
67:72:4b:90:57:1b:de:1b:c7:cb:63:14:fe:45:56:
dd:0f:f1:e9:20:28:13:39:a1:32:c4:43:47:d0:24:
31:d0:4d:32:0f:03:f4:46:d8:bc:16:0e:77:9d:64:
16:5f:18:fe:22:d7:da:49:40:69:46:71:fc:a5:77:
1f:71:d1:ec:32:30:c5:c8:88:74:d5:f4:bb:e6:d7:
a9:41:6c:dc:28:9f:9c:4c:53:d2:43:c8:01:87:54:
56:9d:55:76:51:40:2b:76:0b:32:b5:d5:cf:70:80:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:BF:F6:95:A9:01:2E:4E:E0:06:05:75:59:8A:D6:7A:24:6C:40
X509v3 Authority Key Identifier:
keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:05:ec:6a:61:b8:f7:27:cb:51:98:37:a5:c3:08:8f:64:58:
24:df:f6:5e:d7:db:31:f5:fe:44:3f:61:97:5e:c1:29:d0:f7:
c1:8c:0d:77:55:1e:ed:ff:7c:6e:fd:51:09:88:66:44:ad:56:
d1:3c:52:eb:b3:b5:22:f7:5b:c4:25:44:78:20:b5:4e:eb:4a:
d3:3b:32:b2:39:92:40:e6:16:e9:88:d5:1e:35:14:e6:94:3f:
7d:84:ba:15:8a:c7:79:fb:5c:c0:76:55:42:67:d4:ff:9c:de:
01:f5:4a:c3:77:63:9b:9f:99:93:98:4a:23:98:ad:57:b2:2c:
c9:38:6d:27:82:a9:89:b7:a1:89:a1:4a:33:ad:fa:15:a4:94:
7e:a8:d7:c3:1c:35:be:e9:97:45:cf:25:55:f1:f3:d4:b8:7e:
ee:59:71:6b:a6:0d:a0:4c:27:b2:ef:4b:7c:83:b9:e8:b0:4b:
72:dc:07:7b:b2:3f:2a:96:4e:d2:f1:f0:5c:2c:8e:97:6e:af:
4f:ff:e1:72:72:96:52:13:d4:86:e9:43:2c:0b:c3:2c:2d:07:
61:67:7a:eb:24:66:15:86:25:9c:43:d6:e8:2c:7c:db:e2:20:
20:60:21:cc:a2:45:5c:8d:a5:90:96:95:13:53:5a:68:bc:74:
4d:98:4e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsqWyeWdxD588fNX3on5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTVkMjE3NzU5ZTg2MTY5NmZjNzdlZDlhYTYzYjk0ZWRi
M2JlN2QwHhcNMjYwMzI5MTMwMDQ5WhcNMjYwMzMwMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg1YTJlYmZmNjk1YTkwMTJlNGVlMDA2MDU3NTU5OGFkNjdhMjQ2YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunensAAMRmxp58CTU3FdEnuDgefJ
u3QSMmxtCle7g9NGZhqswrcemxqR4kKFaXi648yDlMV5b8gW0XFgq1dKlJsizxs9
HqXXor5dgl5UQWjutKTijXZrm3CqSNVlvEh7/FCWOUv7HvTdG5lZ9mcio9DioDbr
tTyI/YAjqIsa8bwcFr63ULTz/yiHgmH7dHcVemEVwKFnckuQVxveG8fLYxT+RVbd
D/HpICgTOaEyxENH0CQx0E0yDwP0Rti8Fg53nWQWXxj+ItfaSUBpRnH8pXcfcdHs
MjDFyIh01fS75tepQWzcKJ+cTFPSQ8gBh1RWnVV2UUArdgsytdXPcID6MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFouv/aVqQEuTuAGBXVZitZ6JGxAMB8GA1UdIwQY
MBaAFGGl0hd1noYWlvx37ZqmO5Tts759MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEt
NWE2NGE1ZmM4YTY0LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MmY2Y2YtOWJkNC00NjdhLWE5MmEtNWE2NGE1ZmM4YTY0
LzEvWWFYU0YzV2VoaGFXX0hmdG1xWTdsTzJ6dm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAXsamG4
9yfLUZg3pcMIj2RYJN/2XtfbMfX+RD9hl17BKdD3wYwNd1Ue7f98bv1RCYhmRK1W
0TxS67O1IvdbxCVEeCC1TutK0zsysjmSQOYW6YjVHjUU5pQ/fYS6FYrHeftcwHZV
QmfU/5zeAfVKw3djm5+Zk5hKI5itV7IsyThtJ4KpibehiaFKM636FaSUfqjXwxw1
vumXRc8lVfHz1Lh+7llxa6YNoEwnsu9LfIO56LBLctwHe7I/KpZO0vHwXCyOl26v
T//hcnKWUhPUhulDLAvDLC0HYWd66yRmFYYlnEPW6Cx82+IgIGAhzKJFXI2lkJaV
E1NaaLx0TZhOdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:03 2026 by rpki-client