Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: uoA6/z4owk4o8Y/GQzz5IRtv5iNg4NQgPl/wDEmW4Gc=
Subject key identifier: 41:97:0F:46:B6:9A:BA:64:DD:55:27:9C:6F:AA:FE:5F:BD:AF:81:43
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 019D37F74BACACA05F3BB4EA239BAA35EC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 0A4B
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: kjf3KYXSg/2x6W+yrRHSXvMfd+gB5/KZ+OUdnOmdSlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4b:ac:ac:a0:5f:3b:b4:ea:23:9b:aa:35:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=41970f46b69aba64dd55279c6faafe5fbdaf8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:d9:a3:f3:f8:fe:d3:4d:60:0d:89:79:e8:
e7:3d:f3:83:c2:02:53:bd:23:58:bd:67:e3:44:db:
9e:5b:69:3a:7a:4d:86:10:72:57:27:9f:ca:d7:f6:
b8:4a:e0:1d:ef:dc:17:c2:57:67:03:af:d4:c8:b9:
fd:e3:e8:31:d6:8e:83:80:c2:34:28:be:74:ee:e6:
f1:5c:0f:1a:89:a8:67:a9:2d:5d:0e:21:20:9c:bb:
e0:a7:3d:cf:ed:94:eb:fa:93:e7:be:d7:b2:4c:27:
9c:c7:35:de:b1:f0:50:1e:06:d3:0d:d7:6a:11:46:
df:60:b3:d3:cc:9c:8e:ef:9b:72:50:57:e9:b6:cc:
12:3a:ec:2d:3f:24:19:57:98:ef:e1:e7:3a:bd:52:
9e:76:37:3d:b2:a0:0c:70:aa:95:27:41:20:b8:2a:
88:d8:0f:fa:2f:4f:69:eb:c1:5e:7e:6e:c3:61:b1:
2d:d9:5f:d0:49:49:34:04:8a:65:06:59:7e:54:df:
29:6d:a4:24:03:9e:31:96:4e:16:74:eb:e9:f3:56:
d2:12:11:08:71:ac:55:7d:68:47:a3:ef:ec:6e:02:
be:f1:bf:b2:8e:73:c4:09:3f:47:a6:d8:a3:5b:a7:
68:fc:76:2b:df:11:7d:19:e3:ec:41:ac:75:3b:64:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:0F:46:B6:9A:BA:64:DD:55:27:9C:6F:AA:FE:5F:BD:AF:81:43
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:a5:c9:f0:7c:54:03:d6:0d:7b:b5:92:60:61:b4:0f:ef:
48:dd:bb:57:29:7a:1b:0c:1f:13:23:c3:85:9c:60:0d:e9:0a:
ab:c7:b3:bc:1e:c3:e2:10:d8:2e:71:a2:8b:3a:04:36:d0:39:
69:95:8e:b1:99:05:91:a6:7d:d8:50:c3:0e:e3:f9:e7:c4:fc:
76:46:ff:09:10:de:99:fd:06:7b:86:25:3a:f9:f5:e7:82:08:
da:cc:2d:6a:96:e5:01:6c:0b:2f:1a:7e:79:92:f2:dc:2e:34:
4c:d7:33:7d:d0:df:60:12:ee:f5:af:a9:7f:1e:93:ba:3c:bf:
da:a2:b7:4c:b5:a3:66:19:56:e8:75:e8:4f:c3:02:33:df:ad:
0f:7e:08:d8:e2:b2:53:2d:2a:21:e7:d7:fb:ff:58:13:86:ed:
dd:ad:ff:a9:15:f8:05:29:3a:8e:e1:53:45:bb:4f:e6:a7:31:
ee:10:2a:d5:2b:e4:60:1d:41:c7:6f:14:3c:94:75:3d:e3:45:
a4:b0:d9:d0:b7:97:5a:47:50:7e:d9:e7:6e:87:ed:5f:9f:3e:
46:e7:89:9c:07:80:00:4d:cf:1d:88:de:4c:ad:02:c9:9d:51:
e8:3e:1c:c7:d8:6d:ba:36:bb:71:ed:7e:97:c5:4c:1e:94:13:
46:bd:f1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390usrKBfO7TqI5uqNex/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTM4MzQ3M2U4YWE4NzI3MDY4ZmM3NTJlMDYwZTNkYmY2
M2UwZWYwHhcNMjYwMzI5MDUwMDQ2WhcNMjYwMzMwMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0MTk3MGY0NmI2OWFiYTY0ZGQ1NTI3OWM2ZmFhZmU1ZmJkYWY4MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe3Zo/P4/tNNYA2JeejnPfODwgJT
vSNYvWfjRNueW2k6ek2GEHJXJ5/K1/a4SuAd79wXwldnA6/UyLn94+gx1o6DgMI0
KL507ubxXA8aiahnqS1dDiEgnLvgpz3P7ZTr+pPnvteyTCecxzXesfBQHgbTDddq
EUbfYLPTzJyO75tyUFfptswSOuwtPyQZV5jv4ec6vVKedjc9sqAMcKqVJ0EguCqI
2A/6L09p68Fefm7DYbEt2V/QSUk0BIplBll+VN8pbaQkA54xlk4WdOvp81bSEhEI
caxVfWhHo+/sbgK+8b+yjnPECT9HptijW6do/HYr3xF9GePsQax1O2Rw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGXD0a2mrpk3VUnnG+q/l+9r4FDMB8GA1UdIwQY
MBaAFMsTg0c+iqhycGj8dS4GDj2/Y+DvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmIt
ZDE4YjA5Y2YzYTFkLzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmItZDE4YjA5Y2YzYTFk
LzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWKlyfB8
VAPWDXu1kmBhtA/vSN27Vyl6GwwfEyPDhZxgDekKq8ezvB7D4hDYLnGiizoENtA5
aZWOsZkFkaZ92FDDDuP558T8dkb/CRDemf0Ge4YlOvn154II2swtapblAWwLLxp+
eZLy3C40TNczfdDfYBLu9a+pfx6Tujy/2qK3TLWjZhlW6HXoT8MCM9+tD34I2OKy
Uy0qIefX+/9YE4bt3a3/qRX4BSk6juFTRbtP5qcx7hAq1SvkYB1Bx28UPJR1PeNF
pLDZ0LeXWkdQftnnboftX58+RueJnAeAAE3PHYjeTK0CyZ1R6D4cx9htuja7ce1+
l8VMHpQTRr3xcg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client