Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: smhUcqmH58DVWAuzQYX0bzmWdKsmlJIqqw87zrNEUAs=
Subject key identifier: 6F:8E:6A:16:92:C3:3C:98:53:20:90:A5:17:24:34:AA:9F:71:E9:07
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 019D394196021FF722CE496246C2BD1F2E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0E89
Signing time: Sun 29 Mar 2026 11:01:32 +0000
Manifest this update: Sun 29 Mar 2026 11:01:32 +0000
Manifest next update: Mon 30 Mar 2026 11:01:32 +0000
Files and hashes: 1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: Gck2jm8eBxbnRYFx4k3JXJ+EjwM0xdtwjiGu0uyqDRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:96:02:1f:f7:22:ce:49:62:46:c2:bd:1f:2e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Mar 29 11:01:32 2026 GMT
Not After : Mar 30 11:01:32 2026 GMT
Subject: CN=6f8e6a1692c33c98532090a5172434aa9f71e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:49:a8:3a:f4:e5:8b:fe:44:75:9c:62:8b:
c1:50:8b:22:67:d2:ca:38:e5:29:48:45:11:cb:d7:
36:aa:e7:b6:8d:77:62:67:1d:b9:df:0e:e7:41:94:
aa:c9:23:7f:75:92:3c:14:80:fd:4e:6e:f4:5d:b2:
ca:02:78:8f:e6:3e:37:9d:27:51:b7:e8:1e:be:01:
36:8f:88:ff:79:ea:65:93:c9:71:c4:41:4c:7e:78:
39:d6:c5:e9:40:a3:d0:07:78:6c:46:40:4b:f8:ca:
d6:67:64:f7:2b:15:97:0c:a3:1a:33:4a:85:36:25:
68:53:95:cb:48:fb:0b:1a:3f:72:1d:be:23:33:82:
e7:54:f8:57:a9:a0:00:8e:d0:cb:0e:fd:08:5e:3a:
f9:2d:82:ab:69:6b:01:36:be:ed:d0:75:3a:4e:f3:
6d:e5:d6:fd:65:5e:bd:ef:4a:f9:2f:f1:9e:46:92:
a0:73:8f:ca:48:47:b3:dc:24:f1:6b:7b:76:c2:e3:
08:29:fd:e7:fb:b8:49:45:95:fe:a4:b7:ff:90:24:
44:35:bc:45:1d:d2:79:91:ab:a2:eb:52:78:57:c6:
79:5a:d3:ea:2f:67:87:38:7b:f3:3e:4f:5e:fe:d2:
c2:eb:2e:0d:62:52:97:52:6c:f4:52:ce:02:9d:e1:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:6A:16:92:C3:3C:98:53:20:90:A5:17:24:34:AA:9F:71:E9:07
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:db:ca:14:bc:72:2a:f6:05:5f:20:64:02:c1:e4:ef:92:3a:
43:b5:d6:25:eb:66:48:f7:d3:d7:9b:75:ab:9b:27:ea:0e:4c:
f7:50:85:a9:d5:97:7b:8c:2b:01:7f:20:0c:11:98:99:45:15:
4f:a7:5b:96:fb:e0:d3:90:01:54:61:a4:f8:c5:f2:8e:94:b1:
f3:e3:8c:e5:d6:32:8f:98:35:54:39:88:e0:6e:7c:e4:01:f9:
3e:91:25:ef:16:e8:11:0a:34:27:ef:28:f4:f4:50:c5:77:e1:
92:1a:e9:77:c0:25:03:81:0f:56:30:5c:73:a4:cc:31:6f:9e:
2b:f6:e9:e6:14:f2:a2:e8:48:ff:28:ec:95:80:81:c7:7c:70:
78:b6:60:31:9a:e0:c0:cc:6a:e6:0b:72:97:eb:e4:e8:72:62:
cc:8c:01:1a:a2:be:e0:e7:ab:81:41:89:c2:b2:3f:ac:df:08:
aa:4b:72:0e:65:7c:61:a2:4e:8f:60:02:1b:d2:05:9c:f7:f7:
90:7c:d5:09:2c:de:49:07:13:ea:da:76:5e:da:ec:31:17:93:
f3:ac:27:83:5c:d3:27:ac:c8:1c:34:e1:11:d2:1f:95:ea:c5:
eb:f1:74:a8:65:3b:a0:fb:b4:02:09:9d:82:c5:d9:19:27:65:
d8:3f:1c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QZYCH/cizkliRsK9Hy6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli
ZTdhMjUwHhcNMjYwMzI5MTEwMTMyWhcNMjYwMzMwMTEwMTMyWjAzMTEwLwYDVQQD
Eyg2ZjhlNmExNjkyYzMzYzk4NTMyMDkwYTUxNzI0MzRhYTlmNzFlOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/hJqDr05Yv+RHWcYovBUIsiZ9LK
OOUpSEURy9c2que2jXdiZx253w7nQZSqySN/dZI8FID9Tm70XbLKAniP5j43nSdR
t+gevgE2j4j/eeplk8lxxEFMfng51sXpQKPQB3hsRkBL+MrWZ2T3KxWXDKMaM0qF
NiVoU5XLSPsLGj9yHb4jM4LnVPhXqaAAjtDLDv0IXjr5LYKraWsBNr7t0HU6TvNt
5db9ZV6970r5L/GeRpKgc4/KSEez3CTxa3t2wuMIKf3n+7hJRZX+pLf/kCRENbxF
HdJ5kaui61J4V8Z5WtPqL2eHOHvzPk9e/tLC6y4NYlKXUmz0Us4CneG2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+OahaSwzyYUyCQpRckNKqfcekHMB8GA1UdIwQY
MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et
ODFlMjEwNmE1ODU3LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3
LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedvKFLxy
KvYFXyBkAsHk75I6Q7XWJetmSPfT15t1q5sn6g5M91CFqdWXe4wrAX8gDBGYmUUV
T6dblvvg05ABVGGk+MXyjpSx8+OM5dYyj5g1VDmI4G585AH5PpEl7xboEQo0J+8o
9PRQxXfhkhrpd8AlA4EPVjBcc6TMMW+eK/bp5hTyouhI/yjslYCBx3xweLZgMZrg
wMxq5gtyl+vk6HJizIwBGqK+4OergUGJwrI/rN8IqktyDmV8YaJOj2ACG9IFnPf3
kHzVCSzeSQcT6tp2XtrsMReT86wng1zTJ6zIHDThEdIflerF6/F0qGU7oPu0Agmd
gsXZGSdl2D8c4w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:46 2026 by rpki-client