Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: fXrtMV72+B/esjVq2hnGqlPdZvFMbY4gmVMlhvfaaB4=
Subject key identifier: CC:41:97:8F:70:51:24:CC:71:8D:3C:C9:15:88:17:83:14:6F:2F:71
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019D3865E694B421A9CC00476F743CEDFE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: qU75BHldYA0Ee/98ViGCsLmYj+nAravSdP/phhw9QbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e6:94:b4:21:a9:cc:00:47:6f:74:3c:ed:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=cc41978f705124cc718d3cc915881783146f2f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:81:1c:c0:0f:7f:5f:8b:4d:ad:ce:40:33:
0e:a6:61:ff:6b:3d:70:e7:ee:3b:f6:a1:c9:b7:e2:
ab:80:9b:7a:39:8a:5f:71:1d:0a:01:5a:49:76:44:
9c:48:7e:d3:79:a6:75:96:32:c8:1b:52:58:a9:1c:
08:19:43:04:53:6e:b3:85:7b:e8:bb:d3:d0:b1:1a:
a1:46:72:e2:44:4a:c5:8c:ff:7d:2b:1f:ef:94:98:
6a:81:59:f2:2c:46:55:16:85:e3:a1:e9:71:04:ae:
1c:5c:fe:66:08:e7:7e:80:72:00:19:b1:7d:40:7c:
b1:b8:09:57:17:67:85:59:48:12:a1:66:50:83:72:
b8:31:73:e7:90:d7:56:ed:ad:4a:bc:bb:b0:fa:3f:
5b:5f:f2:fb:fd:67:aa:e6:64:8d:1c:8b:16:45:22:
43:81:5c:6d:a6:ba:0a:48:97:61:7f:73:93:d4:98:
ef:3b:c7:9e:f6:b0:99:91:f4:bc:9d:e0:18:2b:46:
fe:69:17:ca:6a:d4:a1:8f:a4:43:09:46:fe:10:c5:
7c:8a:37:22:0b:0c:6b:e8:34:6a:f3:86:81:2f:97:
5b:ce:67:60:dd:ec:3e:d6:83:64:94:f8:0d:e7:5e:
ee:81:63:a9:07:6b:2d:35:2e:4f:04:61:c1:0b:c4:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:97:8F:70:51:24:CC:71:8D:3C:C9:15:88:17:83:14:6F:2F:71
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:c7:39:67:b4:2c:f7:5a:c0:0d:5b:8f:7f:d0:56:76:47:
a8:2d:1d:7b:05:22:c7:5a:51:0c:bf:28:bb:5d:cd:e9:7c:e4:
ba:a9:4d:f6:6d:08:7a:e0:b6:ad:29:33:85:1e:c1:55:0f:d3:
fc:1d:be:7c:78:22:c0:d7:f5:34:3e:9c:b7:65:18:db:c1:0a:
f6:7b:de:3c:94:68:22:28:57:75:e7:10:5d:b2:c7:1e:a5:d7:
82:a6:17:b6:28:83:09:6c:5f:a5:0c:45:e9:9f:3b:42:07:b2:
f7:ae:cf:79:67:01:71:6d:70:54:34:10:e9:6d:41:9d:d0:92:
d9:75:3d:eb:ee:62:fc:2b:87:68:22:3a:e8:da:9c:e0:e7:56:
05:2e:45:93:2f:d2:a5:bf:af:ba:c2:cc:54:50:34:1c:a2:27:
cf:6f:ba:bd:48:11:88:5e:61:ec:e4:c8:96:53:28:aa:e3:0a:
e2:86:68:43:3e:df:60:8e:51:65:46:07:ea:f4:91:94:ee:15:
ad:21:ab:2e:5f:8a:96:40:f9:88:d6:ce:d1:4e:61:6c:80:06:
f5:79:e8:a0:76:4f:a8:d9:87:c1:dc:27:6a:e0:66:f3:0d:1d:
91:59:c0:5f:b5:e3:93:3c:1f:f1:c0:3c:15:22:9a:15:ee:91:
c3:7d:1b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeaUtCGpzABHb3Q87f5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw
YmUzOTUwHhcNMjYwMzI5MDcwMTM1WhcNMjYwMzMwMDcwMTM1WjAzMTEwLwYDVQQD
EyhjYzQxOTc4ZjcwNTEyNGNjNzE4ZDNjYzkxNTg4MTc4MzE0NmYyZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm42BHMAPf1+LTa3OQDMOpmH/az1w
5+479qHJt+KrgJt6OYpfcR0KAVpJdkScSH7TeaZ1ljLIG1JYqRwIGUMEU26zhXvo
u9PQsRqhRnLiRErFjP99Kx/vlJhqgVnyLEZVFoXjoelxBK4cXP5mCOd+gHIAGbF9
QHyxuAlXF2eFWUgSoWZQg3K4MXPnkNdW7a1KvLuw+j9bX/L7/Weq5mSNHIsWRSJD
gVxtproKSJdhf3OT1JjvO8ee9rCZkfS8neAYK0b+aRfKatShj6RDCUb+EMV8ijci
Cwxr6DRq84aBL5dbzmdg3ew+1oNklPgN517ugWOpB2stNS5PBGHBC8RIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxBl49wUSTMcY08yRWIF4MUby9xMB8GA1UdIwQY
MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt
OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5
LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzvHOWe0
LPdawA1bj3/QVnZHqC0dewUix1pRDL8ou13N6XzkuqlN9m0IeuC2rSkzhR7BVQ/T
/B2+fHgiwNf1ND6ct2UY28EK9nvePJRoIihXdecQXbLHHqXXgqYXtiiDCWxfpQxF
6Z87Qgey967PeWcBcW1wVDQQ6W1BndCS2XU96+5i/CuHaCI66Nqc4OdWBS5Fky/S
pb+vusLMVFA0HKInz2+6vUgRiF5h7OTIllMoquMK4oZoQz7fYI5RZUYH6vSRlO4V
rSGrLl+KlkD5iNbO0U5hbIAG9XnooHZPqNmHwdwnauBm8w0dkVnAX7Xjkzwf8cA8
FSKaFe6Rw30bTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:52 2026 by rpki-client