Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
File: YGJTXxy15qOxIa5FTarA7I9IguA.mft (raw, json)
Hash identifier: PUvxVUt86Svik4CxJ4CZNWpHi2Nph+OBoYbgsCUqL2M=
Subject key identifier: 93:20:06:3D:81:90:6F:DA:14:1A:2B:41:62:D3:56:E6:7D:0E:6D:ED
Authority key identifier: 60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
Certificate issuer: /CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Certificate serial: 019D382E3FCB8E1F7ACA1ACE578705D8435E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
Manifest number: 44
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: 1BRhgtJA35xnIWmejycuk647-Ls.roa (hash: JqxLysLlgCUW3lKOcvDTbWR1yBUeuWUhf/40tgJNSQ0=)
2: YGJTXxy15qOxIa5FTarA7I9IguA.crl (hash: qJY19t3SwxunHnUxH71yma5rQs/sDoqTj6NUOdaQQC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3f:cb:8e:1f:7a:ca:1a:ce:57:87:05:d8:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6062535f1cb5e6a3b121ae454daac0ec8f4882e0
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=9320063d81906fda141a2b4162d356e67d0e6ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:5d:ff:f1:e5:6d:b0:d2:29:d9:44:0f:55:
ed:03:4c:34:4c:0b:11:fb:ed:36:43:0e:d3:83:05:
f0:10:b1:90:0b:2d:8e:87:ce:5c:63:ae:ac:61:ca:
b5:e0:93:4e:3d:ca:5f:68:92:6b:a9:e0:90:b5:a1:
95:1f:38:78:60:4e:7a:06:5d:76:bf:30:2f:1a:3a:
49:f2:25:ca:53:3d:e0:2e:89:eb:b3:f0:fc:3e:e3:
81:3a:7e:1a:38:81:2f:bf:b4:5d:82:b2:13:f9:6d:
33:77:b5:eb:79:e8:b7:85:8a:60:02:a1:97:4d:c7:
33:87:1c:1b:88:c8:47:29:84:b9:bb:66:f8:c6:fd:
a9:28:cc:9f:fd:fa:cc:22:d3:6f:b9:10:e5:8c:6c:
6f:42:bf:57:a4:d4:40:96:e9:fd:2c:63:f2:ab:52:
05:64:60:71:c4:4c:32:f3:f7:d6:86:f6:17:0d:9c:
46:ad:26:73:14:9b:a8:b4:38:a2:b3:73:71:2c:08:
ac:bb:73:c0:a6:55:64:ab:fb:fa:f5:b6:b2:32:4f:
08:94:e8:97:b0:7a:ec:74:ee:c1:ae:8e:e9:93:be:
5a:62:ea:35:93:09:53:61:10:cf:bc:7a:0f:ce:93:
e9:b5:60:4d:59:ff:c0:1c:be:ab:4a:ba:a0:53:2f:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:06:3D:81:90:6F:DA:14:1A:2B:41:62:D3:56:E6:7D:0E:6D:ED
X509v3 Authority Key Identifier:
keyid:60:62:53:5F:1C:B5:E6:A3:B1:21:AE:45:4D:AA:C0:EC:8F:48:82:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGJTXxy15qOxIa5FTarA7I9IguA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/275665-4b36-4044-84b9-57bd56f6d2c1/1/YGJTXxy15qOxIa5FTarA7I9IguA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:70:8e:77:e0:c6:03:44:75:f9:8c:12:d3:ef:c1:a2:4b:
11:e4:0b:ef:1f:02:08:e9:ae:e4:10:30:4e:dc:54:0e:6e:6f:
9d:d5:fa:58:74:ec:42:79:0d:d2:4d:4f:82:43:bc:78:9d:3c:
43:4a:29:9a:57:38:c9:d4:31:7b:8e:d9:76:f0:2f:ae:82:55:
eb:34:79:ab:6e:c7:c0:7e:30:09:ac:c4:5b:22:6d:7d:7a:53:
06:33:e2:83:97:a2:c6:fc:e7:13:60:4b:c7:91:df:21:8a:2f:
81:8a:72:87:2b:46:75:bd:b0:03:93:14:94:db:ff:66:38:1d:
57:d9:f9:42:f2:46:bf:82:d6:96:dc:4c:6a:5b:ac:64:88:bc:
62:e5:c5:a8:ff:c2:91:2a:06:c7:f8:db:25:31:6c:44:54:f0:
ac:19:4b:6e:d4:4d:bf:77:c2:cb:87:f5:16:df:d2:f6:9a:7a:
a1:9c:d8:7f:5c:34:90:d1:cf:f8:f8:cb:68:06:61:06:51:aa:
22:c3:67:da:ac:11:cc:9a:55:9e:c9:b7:8f:17:ea:f8:10:9c:
4c:c8:ef:a2:eb:c1:b3:2b:36:2a:5a:71:4a:a1:f3:ac:f2:b1:
b4:5a:55:90:66:53:ed:c3:ed:15:23:ec:7e:ed:fd:6b:ff:65:
b8:b9:56:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lj/Ljh96yhrOV4cF2ENeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjI1MzVmMWNiNWU2YTNiMTIxYWU0NTRkYWFjMGVjOGY0
ODgyZTAwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg5MzIwMDYzZDgxOTA2ZmRhMTQxYTJiNDE2MmQzNTZlNjdkMGU2ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Bd//HlbbDSKdlED1XtA0w0TAsR
++02Qw7TgwXwELGQCy2Oh85cY66sYcq14JNOPcpfaJJrqeCQtaGVHzh4YE56Bl12
vzAvGjpJ8iXKUz3gLonrs/D8PuOBOn4aOIEvv7RdgrIT+W0zd7Xreei3hYpgAqGX
TcczhxwbiMhHKYS5u2b4xv2pKMyf/frMItNvuRDljGxvQr9XpNRAlun9LGPyq1IF
ZGBxxEwy8/fWhvYXDZxGrSZzFJuotDiis3NxLAisu3PAplVkq/v69bayMk8IlOiX
sHrsdO7Bro7pk75aYuo1kwlTYRDPvHoPzpPptWBNWf/AHL6rSrqgUy+aGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMgBj2BkG/aFBorQWLTVuZ9Dm3tMB8GA1UdIwQY
MBaAFGBiU18cteajsSGuRU2qwOyPSILgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdKVFh4eTE1cU94SWE1RlRhckE3STlJZ3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNzU2NjUtNGIzNi00MDQ0LTg0Yjkt
NTdiZDU2ZjZkMmMxLzEvWUdKVFh4eTE1cU94SWE1RlRhckE3STlJZ3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNzU2NjUtNGIzNi00MDQ0LTg0YjktNTdiZDU2ZjZkMmMx
LzEvWUdKVFh4eTE1cU94SWE1RlRhckE3STlJZ3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTFwjnfg
xgNEdfmMEtPvwaJLEeQL7x8CCOmu5BAwTtxUDm5vndX6WHTsQnkN0k1PgkO8eJ08
Q0opmlc4ydQxe47ZdvAvroJV6zR5q27HwH4wCazEWyJtfXpTBjPig5eixvznE2BL
x5HfIYovgYpyhytGdb2wA5MUlNv/ZjgdV9n5QvJGv4LWltxMalusZIi8YuXFqP/C
kSoGx/jbJTFsRFTwrBlLbtRNv3fCy4f1Ft/S9pp6oZzYf1w0kNHP+PjLaAZhBlGq
IsNn2qwRzJpVnsm3jxfq+BCcTMjvouvBsys2KlpxSqHzrPKxtFpVkGZT7cPtFSPs
fu39a/9luLlW7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:07 2026 by rpki-client