Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: yZae+xKcQO3tHXITWHtRkxgpP9DnnJWdkQ70gWKAV10=
Subject key identifier: 3F:60:21:CD:59:A3:BC:94:26:B7:56:B6:55:30:7F:F0:6F:FB:D3:27
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019D37891E776CAE0E959F52DBBB5C0B883C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 0304
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: qE5sDm9p4prHPj6Qynl+qlHnZ5r9d6/qGOWUIujKO2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1e:77:6c:ae:0e:95:9f:52:db:bb:5c:0b:88:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=3f6021cd59a3bc9426b756b655307ff06ffbd327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:09:f3:71:1e:8e:a0:79:5d:cf:74:35:66:
64:58:38:14:b2:e6:b2:f7:10:ea:18:75:35:dd:2f:
b7:40:67:01:f5:0a:1c:63:82:14:09:ae:e2:74:89:
da:ff:53:46:9e:8d:11:d3:df:e3:c2:51:53:80:80:
e4:a7:35:f0:c6:4e:8b:6c:63:1c:46:dc:29:10:ab:
36:ec:13:5a:84:69:2f:37:f1:20:84:67:c8:c2:58:
46:54:d9:fd:c0:c1:5e:6a:a9:37:c5:13:0a:a8:0e:
e3:3f:69:5b:d2:4d:16:12:22:75:09:25:d3:7b:a3:
16:6e:06:8f:d9:a3:5e:e2:ec:b1:cd:8c:de:7c:34:
1b:ed:40:c8:60:80:8d:e5:f6:3c:62:0f:1d:c1:62:
c2:d8:93:54:83:9d:46:8d:67:6d:cd:b7:c4:51:80:
b2:51:15:50:78:1f:80:23:2f:36:2a:a6:9c:28:e6:
d1:33:a0:e1:e9:c7:4e:11:00:c3:6f:17:7d:72:45:
74:0a:93:e2:53:92:c6:f0:4e:5a:f5:5e:d2:5c:76:
85:2e:fd:d2:b5:63:99:12:72:a0:0b:cb:3b:10:28:
0e:ba:65:e6:36:17:b9:a0:c6:29:fe:9c:33:a1:41:
39:28:02:33:d7:48:5f:63:2b:4b:9c:0a:1d:13:44:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:21:CD:59:A3:BC:94:26:B7:56:B6:55:30:7F:F0:6F:FB:D3:27
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:42:3d:af:ca:1a:94:a0:0b:88:73:e1:3c:f7:28:d2:90:be:
8b:8f:f8:f5:d3:05:2f:a9:48:80:59:9e:9e:d9:7e:bc:e9:df:
a7:c0:27:af:a7:d8:d9:21:ca:cb:70:10:33:10:6f:f2:14:16:
42:1f:5a:be:47:7c:7b:81:0a:4b:5e:4b:da:97:4f:15:38:2a:
35:7f:43:5e:00:65:08:6e:0e:77:f2:fb:47:da:4f:db:ac:67:
a6:57:fb:2d:16:d9:a5:4e:60:c8:da:29:bb:73:79:46:65:f7:
dc:1f:6f:e0:38:26:4b:82:64:b8:b0:37:c8:1d:eb:c7:a4:32:
f4:a9:b0:ae:88:6b:c4:50:4a:e8:67:48:bc:95:0b:7d:73:e9:
f6:0e:b7:ee:b8:ee:72:d9:d1:30:f8:cb:2e:e2:4f:86:13:f0:
17:ba:1d:a4:8e:3f:e7:6a:ad:0d:22:59:3e:20:af:6c:ec:a3:
23:51:d1:d8:97:e3:b6:9b:66:2b:80:0d:da:e6:a9:38:d1:af:
68:ab:0d:70:83:d3:b5:42:9e:10:41:ce:6a:2b:f5:a0:f4:5d:
2c:c9:c3:f5:06:66:2f:bf:bb:0e:c6:fd:03:dd:bd:ec:71:e1:
66:4b:ad:e1:af:40:44:66:00:ec:56:22:f7:72:9a:32:63:f1:
aa:b9:7d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iR53bK4OlZ9S27tcC4g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj
NTM4MWYwHhcNMjYwMzI5MDMwMDI2WhcNMjYwMzMwMDMwMDI2WjAzMTEwLwYDVQQD
EygzZjYwMjFjZDU5YTNiYzk0MjZiNzU2YjY1NTMwN2ZmMDZmZmJkMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLgJ83EejqB5Xc90NWZkWDgUsuay
9xDqGHU13S+3QGcB9QocY4IUCa7idIna/1NGno0R09/jwlFTgIDkpzXwxk6LbGMc
RtwpEKs27BNahGkvN/EghGfIwlhGVNn9wMFeaqk3xRMKqA7jP2lb0k0WEiJ1CSXT
e6MWbgaP2aNe4uyxzYzefDQb7UDIYICN5fY8Yg8dwWLC2JNUg51GjWdtzbfEUYCy
URVQeB+AIy82KqacKObRM6Dh6cdOEQDDbxd9ckV0CpPiU5LG8E5a9V7SXHaFLv3S
tWOZEnKgC8s7ECgOumXmNhe5oMYp/pwzoUE5KAIz10hfYytLnAodE0QIywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9gIc1Zo7yUJrdWtlUwf/Bv+9MnMB8GA1UdIwQY
MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2EI9r8oa
lKALiHPhPPco0pC+i4/49dMFL6lIgFmentl+vOnfp8Anr6fY2SHKy3AQMxBv8hQW
Qh9avkd8e4EKS15L2pdPFTgqNX9DXgBlCG4Od/L7R9pP26xnplf7LRbZpU5gyNop
u3N5RmX33B9v4DgmS4JkuLA3yB3rx6Qy9KmwrohrxFBK6GdIvJULfXPp9g637rju
ctnRMPjLLuJPhhPwF7odpI4/52qtDSJZPiCvbOyjI1HR2JfjtptmK4AN2uapONGv
aKsNcIPTtUKeEEHOaiv1oPRdLMnD9QZmL7+7Dsb9A9297HHhZkut4a9ARGYA7FYi
93KaMmPxqrl9rQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:58 2026 by rpki-client