Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: 4Vt3HPcnb67Otg44LArcSQE5z5/sRT6ibEDocNssnrY=
Subject key identifier: 33:E1:72:0C:DA:F3:8A:01:25:10:E6:CD:BA:61:66:2D:86:80:C6:0B
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 019CE6DA96C92FCCD950EB5038F39C617DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:10 +0000
Manifest this update: Fri 13 Mar 2026 11:00:10 +0000
Manifest next update: Sat 14 Mar 2026 11:00:10 +0000
Files and hashes: 1: am-H2T7Ww6jJ95ZGxjcLz-wLU1Q.roa (hash: 2kQQ9mXqE14fd45u6l3SdSU3Gho7WxKdsdIPxleaIU8=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: cVcZxHW7bNsGA9DcFZY8mAnj26+MTE70hOmNcayC6uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:96:c9:2f:cc:d9:50:eb:50:38:f3:9c:61:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Mar 13 11:00:10 2026 GMT
Not After : Mar 14 11:00:10 2026 GMT
Subject: CN=33e1720cdaf38a012510e6cdba61662d8680c60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:9f:a6:79:01:a3:64:34:71:06:e7:04:0c:
4a:2d:d8:e7:9d:3b:1c:47:f5:c5:2c:ed:be:19:8b:
3c:16:81:70:c8:70:ff:d1:f2:fd:04:8a:77:55:21:
be:62:32:61:0f:ef:43:3c:13:e6:e7:2b:5b:84:16:
68:7d:ed:af:81:4c:4f:27:71:4b:b4:7a:16:69:16:
2c:a8:64:30:b1:de:8d:30:ef:9b:81:ba:b9:1b:2f:
5a:7a:08:9c:d6:68:8a:e4:96:b4:18:48:e3:0c:cb:
41:de:14:78:73:67:df:67:25:ec:7c:2b:d2:c1:3d:
35:03:2f:7c:e9:0a:bb:97:bd:cf:c5:5c:4f:e1:22:
fa:f1:94:a7:41:24:de:17:d7:1d:5f:42:f5:c1:7b:
48:2f:e7:1d:e2:71:20:a5:fb:00:02:9f:41:0e:75:
a1:f3:a4:d7:90:da:30:e5:16:de:3f:b4:5b:84:32:
6e:61:07:cf:13:da:27:d3:da:a2:b3:b5:89:13:a1:
86:c1:22:53:e7:b1:d0:2e:56:4c:d6:29:e7:46:bf:
52:eb:c3:d4:b4:22:da:26:d3:c3:94:72:33:60:8c:
40:39:1d:ff:cb:43:cd:b2:9b:f0:1d:e8:4f:a3:43:
2d:8d:70:07:78:54:fe:e1:e6:70:36:8f:b7:a7:dc:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:72:0C:DA:F3:8A:01:25:10:E6:CD:BA:61:66:2D:86:80:C6:0B
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:12:45:ed:7e:48:a2:4a:40:47:6e:d3:fa:a7:0f:ba:c0:41:
90:f9:5f:36:80:ef:2d:7d:79:ba:76:0e:77:d2:16:4e:2c:47:
2f:45:eb:94:9d:5e:fa:e5:3d:1e:67:6e:62:a9:66:5d:18:a7:
50:f4:93:27:9f:f2:17:c1:03:1e:a2:ff:ce:8a:30:00:99:b4:
fa:b7:8b:24:af:fa:e3:23:c6:51:df:42:3c:29:ec:21:15:24:
fa:15:24:1e:21:20:c4:10:ac:0f:2d:ad:73:b2:7e:70:cf:c0:
78:9d:00:9c:e9:f0:12:9d:f5:ed:b3:a9:fa:73:67:76:ff:dd:
48:82:93:5e:c0:d2:60:3e:bc:24:3a:d7:b5:2e:62:a9:4c:8d:
dc:f2:3d:ed:a3:88:58:23:1c:89:00:3e:19:b9:e9:7f:6c:4c:
22:ed:76:6d:93:49:c4:60:a1:69:32:32:47:cd:fc:79:27:f1:
1f:94:bc:2e:80:c8:57:5d:1d:b7:86:5d:0d:bd:ee:9f:08:7e:
58:0d:de:10:9a:c7:b2:ec:b0:43:83:22:5f:2a:60:9c:2a:8c:
86:9c:a2:54:15:f0:3a:05:a2:a0:6e:52:fd:9c:49:79:ab:6d:
ed:dc:dd:53:62:31:99:33:68:2f:28:59:79:da:a3:2b:be:e7:
be:f4:26:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2pbJL8zZUOtQOPOcYX3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWVmZDhlNjMxNjlkOGZkYmY5OGI3MTM5ZmNkZGVkYWYw
MTZjYjIwHhcNMjYwMzEzMTEwMDEwWhcNMjYwMzE0MTEwMDEwWjAzMTEwLwYDVQQD
EygzM2UxNzIwY2RhZjM4YTAxMjUxMGU2Y2RiYTYxNjYyZDg2ODBjNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZKfpnkBo2Q0cQbnBAxKLdjnnTsc
R/XFLO2+GYs8FoFwyHD/0fL9BIp3VSG+YjJhD+9DPBPm5ytbhBZofe2vgUxPJ3FL
tHoWaRYsqGQwsd6NMO+bgbq5Gy9aegic1miK5Ja0GEjjDMtB3hR4c2ffZyXsfCvS
wT01Ay986Qq7l73PxVxP4SL68ZSnQSTeF9cdX0L1wXtIL+cd4nEgpfsAAp9BDnWh
86TXkNow5RbeP7RbhDJuYQfPE9on09qis7WJE6GGwSJT57HQLlZM1innRr9S68PU
tCLaJtPDlHIzYIxAOR3/y0PNspvwHehPo0MtjXAHeFT+4eZwNo+3p9zOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPhcgza84oBJRDmzbphZi2GgMYLMB8GA1UdIwQY
MBaAFMoe/Y5jFp2P2/mLcTn83e2vAWyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQt
ZjA3ZjA2Y2JlYTJkLzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTYxZmUtZDhhYS00OGU1LTk2ZmQtZjA3ZjA2Y2JlYTJk
LzEveWg3OWptTVduWV9iLVl0eE9memQ3YThCYkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABJF7X5I
okpAR27T+qcPusBBkPlfNoDvLX15unYOd9IWTixHL0XrlJ1e+uU9HmduYqlmXRin
UPSTJ5/yF8EDHqL/zoowAJm0+reLJK/64yPGUd9CPCnsIRUk+hUkHiEgxBCsDy2t
c7J+cM/AeJ0AnOnwEp317bOp+nNndv/dSIKTXsDSYD68JDrXtS5iqUyN3PI97aOI
WCMciQA+Gbnpf2xMIu12bZNJxGChaTIyR838eSfxH5S8LoDIV10dt4ZdDb3unwh+
WA3eEJrHsuywQ4MiXypgnCqMhpyiVBXwOgWioG5S/ZxJeatt7dzdU2IxmTNoLyhZ
edqjK77nvvQmOA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:14 2026 by rpki-client