Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier: fT6CQtudQLdpvx3mS9HYcTwRItmjF49Ao05Pcs7aYkQ=
Subject key identifier: CA:22:FE:6C:68:41:F7:34:D3:16:5A:34:B1:A0:14:5E:3B:08:FC:E8
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial: 019D371BFAEBAACBA0A83B5B7F680CBABFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 01:01:13 +0000
Manifest this update: Sun 29 Mar 2026 01:01:13 +0000
Manifest next update: Mon 30 Mar 2026 01:01:13 +0000
Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: Hqy5Lzexa3+RLj6fIRJWL/6JAJZcdzxJ5H9Nle88OOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fa:eb:aa:cb:a0:a8:3b:5b:7f:68:0c:ba:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Validity
Not Before: Mar 29 01:01:13 2026 GMT
Not After : Mar 30 01:01:13 2026 GMT
Subject: CN=ca22fe6c6841f734d3165a34b1a0145e3b08fce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:c0:dc:b7:68:2b:f8:e9:a0:a7:c3:7c:00:
79:48:67:52:6e:31:19:72:8d:9b:9f:8e:98:9d:cf:
0c:7f:4f:f4:ea:9e:4b:01:f1:07:17:f6:c6:5a:43:
a6:98:d7:2a:d1:ae:67:48:e8:45:b5:94:a8:55:79:
76:c9:1d:70:c3:62:da:3f:c1:d0:5b:3a:58:08:66:
ff:de:f7:69:45:d8:41:be:13:ae:2c:73:03:aa:81:
0b:1c:7c:a6:44:4e:b1:b7:6e:7e:ef:1b:57:7f:38:
26:2a:d7:8f:f8:e1:b9:8b:26:2a:e6:06:41:63:62:
1b:dd:6e:3f:5a:b5:2d:05:f0:fe:d4:c5:11:50:a6:
cc:28:a6:3e:0f:0c:d6:dc:86:9d:a7:f9:4a:42:05:
98:c5:6b:cc:a2:c9:ac:bc:b9:30:09:de:a0:d3:1a:
fb:e1:53:08:79:13:42:91:93:d4:8b:8f:1f:a0:88:
00:f4:bc:d4:78:eb:b9:7b:d2:04:c0:db:a3:09:3c:
82:27:87:47:d8:8c:dd:4a:2f:d9:1b:38:e3:03:1c:
e0:ac:2a:5f:d4:d4:f4:92:fd:cb:36:53:81:58:48:
b4:cb:7c:be:0b:8c:0e:26:f8:90:d6:7f:26:4e:01:
b1:03:c4:3c:d3:e4:cb:4e:f1:b1:48:40:35:63:2a:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:FE:6C:68:41:F7:34:D3:16:5A:34:B1:A0:14:5E:3B:08:FC:E8
X509v3 Authority Key Identifier:
keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:d6:99:fd:ee:7b:59:c6:90:69:0d:8d:8d:7b:bf:ba:aa:
e7:ab:ca:f0:bc:9e:e5:53:76:64:1c:da:89:1f:65:ba:2b:c1:
be:06:2b:5c:1e:ca:77:da:77:17:c1:98:84:ed:6e:88:8b:0d:
06:58:c2:dc:94:8e:ff:7a:6d:34:90:ec:50:7a:3b:7d:96:48:
a9:93:f4:5e:8a:be:84:0f:7a:2e:43:a7:68:b6:28:a9:42:d6:
f0:59:1e:cc:1a:a2:8b:71:6b:65:95:5e:c8:73:11:22:24:53:
33:d0:84:48:e8:44:d2:59:40:0d:c2:ab:62:c6:63:ec:d0:23:
37:c9:a3:16:3f:eb:85:1f:93:b5:f4:4e:7e:06:a4:a8:b6:8c:
7e:ba:e1:68:79:04:4a:5a:6d:7f:f1:26:28:9c:dd:59:15:f3:
47:b3:d0:d4:de:cf:cb:6d:31:bf:41:20:37:d7:84:86:53:5c:
ec:32:3a:5b:48:71:d9:b8:a9:32:19:c4:ae:50:7a:a7:42:8e:
cc:bf:f0:cf:ae:8e:1d:d5:41:1f:bc:35:c2:d1:b0:64:38:46:
2e:fd:e4:36:6c:f1:57:c5:29:6f:75:56:fb:1f:cc:bd:35:72:
62:6e:45:67:41:38:c5:5b:8c:50:e3:2a:bd:da:76:6c:ac:9a:
81:05:d7:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/rrqsugqDtbf2gMur/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmYwYWVjOWZjOTFmNGNjNjA0OWNmMmQ5NTQyZWJkODI1
MTVhZWYwHhcNMjYwMzI5MDEwMTEzWhcNMjYwMzMwMDEwMTEzWjAzMTEwLwYDVQQD
EyhjYTIyZmU2YzY4NDFmNzM0ZDMxNjVhMzRiMWEwMTQ1ZTNiMDhmY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCPA3LdoK/jpoKfDfAB5SGdSbjEZ
co2bn46Ync8Mf0/06p5LAfEHF/bGWkOmmNcq0a5nSOhFtZSoVXl2yR1ww2LaP8HQ
WzpYCGb/3vdpRdhBvhOuLHMDqoELHHymRE6xt25+7xtXfzgmKteP+OG5iyYq5gZB
Y2Ib3W4/WrUtBfD+1MURUKbMKKY+DwzW3Iadp/lKQgWYxWvMosmsvLkwCd6g0xr7
4VMIeRNCkZPUi48foIgA9LzUeOu5e9IEwNujCTyCJ4dH2IzdSi/ZGzjjAxzgrCpf
1NT0kv3LNlOBWEi0y3y+C4wOJviQ1n8mTgGxA8Q80+TLTvGxSEA1YyrdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoi/mxoQfc00xZaNLGgFF47CPzoMB8GA1UdIwQY
MBaAFGBvCuyfyR9MxgSc8tlULr2CUVrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAt
ZDk5NDdhZjJmY2E3LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAtZDk5NDdhZjJmY2E3
LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBHWmf3u
e1nGkGkNjY17v7qq56vK8Lye5VN2ZBzaiR9luivBvgYrXB7Kd9p3F8GYhO1uiIsN
BljC3JSO/3ptNJDsUHo7fZZIqZP0Xoq+hA96LkOnaLYoqULW8FkezBqii3FrZZVe
yHMRIiRTM9CESOhE0llADcKrYsZj7NAjN8mjFj/rhR+TtfROfgakqLaMfrrhaHkE
Slptf/EmKJzdWRXzR7PQ1N7Py20xv0EgN9eEhlNc7DI6W0hx2bipMhnErlB6p0KO
zL/wz66OHdVBH7w1wtGwZDhGLv3kNmzxV8Upb3VW+x/MvTVyYm5FZ0E4xVuMUOMq
vdp2bKyagQXXeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:39 2026 by rpki-client