Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
File: yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft (raw, json)
Hash identifier: pHdeyUdqa0bQM8eMspwSTFQTD2YKmrZaa5RwEOGI9i0=
Subject key identifier: 73:6C:D7:59:0D:7E:D7:74:A1:D4:5C:1A:39:6B:84:44:87:0C:73:C1
Authority key identifier: CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
Certificate issuer: /CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Certificate serial: 019D39AE7DD4B25C7054BCE0FFE38258E9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
Manifest number: 02E1
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl (hash: hYDNF1XSSZDjkGnbG/aik+LCr8oHSCH7x7mNN5n/GNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7d:d4:b2:5c:70:54:bc:e0:ff:e3:82:58:e9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabf1934ffe9bf9ce351572ed2eb8207cb555358
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=736cd7590d7ed774a1d45c1a396b8444870c73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:47:c6:76:8f:67:ec:cc:ac:a4:83:99:1d:
d6:87:66:96:ec:89:ea:54:da:1e:aa:44:10:6c:62:
9e:a7:b5:02:01:c6:ea:4b:85:58:16:d5:37:aa:ce:
c9:d4:0c:b4:bc:f3:af:39:3a:7b:84:fa:0e:f2:4b:
10:fb:fb:b4:31:82:7c:4c:8e:bb:20:83:d8:c9:3c:
51:b9:b4:24:6d:f9:11:87:ad:eb:b6:cb:53:06:f6:
47:23:20:55:f3:56:b6:04:b2:02:14:c9:f9:1d:f3:
24:e2:aa:cf:c0:04:8d:24:5f:92:73:ea:e0:4d:5a:
17:07:72:8c:5a:38:5a:cd:77:04:14:79:f3:5f:86:
73:56:17:d3:60:ec:f7:c5:3a:a8:45:75:65:32:87:
25:ab:78:a7:70:3b:c7:0c:1c:69:a2:85:b0:89:6f:
3d:97:ea:6d:6f:97:35:8a:67:bc:5e:87:df:ba:67:
33:e7:e8:45:ca:fe:76:09:c2:f5:83:82:4b:7f:09:
b4:4a:08:0c:a7:69:fd:e2:fd:7c:42:d9:18:f8:1d:
f9:bb:e1:5d:d7:5a:92:6b:20:c5:a8:48:90:7a:45:
a7:24:0b:aa:60:43:52:a6:9f:01:6c:86:c4:62:e1:
3c:0a:2e:6e:f7:13:b8:a1:46:fc:23:61:c2:2b:6b:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:D7:59:0D:7E:D7:74:A1:D4:5C:1A:39:6B:84:44:87:0C:73:C1
X509v3 Authority Key Identifier:
keyid:CA:BF:19:34:FF:E9:BF:9C:E3:51:57:2E:D2:EB:82:07:CB:55:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d6bb-0a89-48c4-b932-5b389343dbc9/1/yr8ZNP_pv5zjUVcu0uuCB8tVU1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:95:bc:13:96:aa:36:8a:60:c2:a2:bf:a7:ab:ed:52:2b:
bb:58:a7:af:9d:27:8f:05:4d:34:59:74:fa:9b:6d:d4:b4:c9:
39:05:a8:dd:ff:d8:8d:4b:fe:17:cc:01:16:0f:e2:eb:23:12:
7c:99:bd:8a:38:7c:b6:f7:ea:d1:60:5b:3c:55:70:dc:b2:88:
26:88:eb:42:9e:84:68:b2:b1:6a:96:ac:27:6e:06:48:e4:37:
ba:de:ea:0d:7f:e8:10:45:ef:44:d0:77:4d:2b:7f:be:6b:6e:
bc:57:7a:69:ea:f7:d2:c0:08:5e:05:be:f9:83:3f:e6:76:ed:
ab:89:fd:2a:8b:04:2b:d5:a6:b7:fe:da:10:76:af:4e:1e:8f:
d7:68:c9:4a:e0:40:96:8c:dd:8d:c3:cf:f8:71:34:06:04:e9:
62:e4:ff:85:d5:e5:9c:ee:1b:2a:59:d5:de:c7:14:e3:50:eb:
e3:f2:b3:22:19:32:20:e1:a7:42:83:3a:7f:09:41:b2:e5:4d:
e8:b8:33:1a:36:4d:eb:e3:55:a7:76:cd:70:9a:55:6b:22:72:
6b:1d:82:8f:e7:5a:57:d2:0d:44:db:be:4e:b4:5e:9b:62:0a:
57:e4:8c:b7:9e:f0:93:6e:75:83:b5:63:a6:e2:42:0f:ed:ce:
6e:0c:95:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rn3UslxwVLzg/+OCWOnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmYxOTM0ZmZlOWJmOWNlMzUxNTcyZWQyZWI4MjA3Y2I1
NTUzNTgwHhcNMjYwMzI5MTMwMDI5WhcNMjYwMzMwMTMwMDI5WjAzMTEwLwYDVQQD
Eyg3MzZjZDc1OTBkN2VkNzc0YTFkNDVjMWEzOTZiODQ0NDg3MGM3M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKtHxnaPZ+zMrKSDmR3Wh2aW7Inq
VNoeqkQQbGKep7UCAcbqS4VYFtU3qs7J1Ay0vPOvOTp7hPoO8ksQ+/u0MYJ8TI67
IIPYyTxRubQkbfkRh63rtstTBvZHIyBV81a2BLICFMn5HfMk4qrPwASNJF+Sc+rg
TVoXB3KMWjhazXcEFHnzX4ZzVhfTYOz3xTqoRXVlMoclq3incDvHDBxpooWwiW89
l+ptb5c1ime8Xoffumcz5+hFyv52CcL1g4JLfwm0SggMp2n94v18QtkY+B35u+Fd
11qSayDFqEiQekWnJAuqYENSpp8BbIbEYuE8Ci5u9xO4oUb8I2HCK2sVQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNs11kNftd0odRcGjlrhESHDHPBMB8GA1UdIwQY
MBaAFMq/GTT/6b+c41FXLtLrggfLVVNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ2YmItMGE4OS00OGM0LWI5MzIt
NWIzODkzNDNkYmM5LzEveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85OGQ2YmItMGE4OS00OGM0LWI5MzItNWIzODkzNDNkYmM5
LzEveXI4Wk5QX3B2NXpqVVZjdTB1dUNCOHRWVTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+SVvBOW
qjaKYMKiv6er7VIru1inr50njwVNNFl0+ptt1LTJOQWo3f/YjUv+F8wBFg/i6yMS
fJm9ijh8tvfq0WBbPFVw3LKIJojrQp6EaLKxapasJ24GSOQ3ut7qDX/oEEXvRNB3
TSt/vmtuvFd6aer30sAIXgW++YM/5nbtq4n9KosEK9Wmt/7aEHavTh6P12jJSuBA
lozdjcPP+HE0BgTpYuT/hdXlnO4bKlnV3scU41Dr4/KzIhkyIOGnQoM6fwlBsuVN
6LgzGjZN6+NVp3bNcJpVayJyax2Cj+daV9INRNu+TrRem2IKV+SMt57wk251g7Vj
puJCD+3ObgyV/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:23 2026 by rpki-client