Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: 2IxX6iyLr/MQVWE8vfKzF+nEadotbhVe/Ww7ImEoozs=
Subject key identifier: BF:4E:33:EB:C3:F4:69:EA:F4:FF:81:66:3E:99:1F:F6:83:33:69:27
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 019D37531ED8E3A518C9AD7D0505D8BCA116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:27 +0000
Manifest this update: Sun 29 Mar 2026 02:01:27 +0000
Manifest next update: Mon 30 Mar 2026 02:01:27 +0000
Files and hashes: 1: h678NT-wkbHRJaqm6iZb8LbOJkA.roa (hash: 6iUrPhfAB1aiMKoStXuUWvzoIVv3KdXK9DA19OIjxHA=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: loCChPi4jick4mFbuqt+JjUWe7oqKC2YxMLhaQne9zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1e:d8:e3:a5:18:c9:ad:7d:05:05:d8:bc:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Mar 29 02:01:27 2026 GMT
Not After : Mar 30 02:01:27 2026 GMT
Subject: CN=bf4e33ebc3f469eaf4ff81663e991ff683336927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:75:8f:6b:48:21:66:ec:0c:d4:6f:f4:92:
c9:2b:65:7a:3f:bf:d1:33:b0:b4:03:c8:b9:39:09:
63:d5:1f:34:5b:9b:59:58:53:1c:02:2d:65:0f:70:
90:d1:74:36:a1:70:df:36:c7:aa:44:9c:20:08:8d:
2a:9b:92:6e:b1:49:40:94:d2:3d:98:3f:d9:8d:56:
3e:d9:89:8a:87:a9:8c:1a:ad:a9:bd:fa:c9:01:f3:
6c:cb:34:a4:1d:f8:ba:ba:d0:ee:b7:e5:58:3c:59:
ce:40:83:5c:fe:9d:be:bf:f4:bb:5c:56:5c:0e:1b:
a0:0d:54:09:c7:de:74:df:70:09:f9:c3:46:f7:c5:
58:5b:c5:4d:91:bc:26:50:d0:2b:74:c0:7e:f0:22:
4a:bc:15:67:3d:03:1b:cf:75:00:62:d5:35:9b:b8:
ef:ce:78:af:1f:4c:57:be:99:3b:2f:3b:ea:4f:77:
ac:e2:21:89:a8:58:86:c3:ef:08:91:25:91:00:a2:
eb:51:70:e7:45:37:1b:df:6a:1f:4f:85:c6:99:3d:
4a:43:5d:5f:ac:21:e0:90:af:e4:b4:e5:61:dd:ec:
e1:47:d3:77:a7:d6:fd:d8:9d:d0:17:47:13:c4:f4:
58:be:50:8f:8c:d2:f2:a2:42:99:08:53:d1:e0:8e:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:33:EB:C3:F4:69:EA:F4:FF:81:66:3E:99:1F:F6:83:33:69:27
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2a:95:06:23:d6:9f:96:ae:92:53:9d:27:68:cb:5c:22:37:
63:a3:93:74:0d:7c:14:ec:1c:8f:c8:17:94:23:53:73:76:9a:
a0:f5:b3:4f:f0:24:23:1c:81:0c:7e:2b:50:88:2d:af:1b:7f:
01:1a:77:ed:a5:da:97:9b:f6:b6:ec:ea:34:34:29:b5:dc:2c:
ee:ae:26:9d:0a:de:69:8e:75:0c:13:15:f9:7b:af:37:12:1d:
d0:62:7a:8b:95:21:b7:1b:7b:26:39:54:f8:f0:d6:3c:f9:a1:
b9:9f:78:75:a8:23:6e:2b:af:91:d0:a1:d3:c5:98:8f:6c:29:
b7:4d:02:87:ba:b7:7a:72:5b:84:e3:3f:bf:0f:c3:5a:24:ec:
90:f9:94:cb:53:94:fb:3a:10:fe:32:58:3b:9b:d5:f0:a7:1d:
b5:fb:fe:17:55:f4:2b:c5:91:ef:49:49:51:26:77:5c:94:29:
7e:3e:07:3f:79:a4:94:89:98:f0:48:b3:2e:6b:67:2c:e9:94:
3c:bf:7b:54:45:83:f0:c2:a4:6e:34:c9:37:f0:75:65:69:d3:
21:27:36:6f:a2:57:00:98:51:e7:3b:a4:b6:af:b1:4a:09:09:
e5:9f:92:24:ee:8a:3c:9b:8f:37:35:44:ce:5c:06:a7:9f:e1:
30:51:68:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Ux7Y46UYya19BQXYvKEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0
ZTEyNzUwHhcNMjYwMzI5MDIwMTI3WhcNMjYwMzMwMDIwMTI3WjAzMTEwLwYDVQQD
EyhiZjRlMzNlYmMzZjQ2OWVhZjRmZjgxNjYzZTk5MWZmNjgzMzM2OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pl1j2tIIWbsDNRv9JLJK2V6P7/R
M7C0A8i5OQlj1R80W5tZWFMcAi1lD3CQ0XQ2oXDfNseqRJwgCI0qm5JusUlAlNI9
mD/ZjVY+2YmKh6mMGq2pvfrJAfNsyzSkHfi6utDut+VYPFnOQINc/p2+v/S7XFZc
DhugDVQJx95033AJ+cNG98VYW8VNkbwmUNArdMB+8CJKvBVnPQMbz3UAYtU1m7jv
znivH0xXvpk7LzvqT3es4iGJqFiGw+8IkSWRAKLrUXDnRTcb32ofT4XGmT1KQ11f
rCHgkK/ktOVh3ezhR9N3p9b92J3QF0cTxPRYvlCPjNLyokKZCFPR4I40pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9OM+vD9Gnq9P+BZj6ZH/aDM2knMB8GA1UdIwQY
MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt
ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx
LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiqVBiPW
n5auklOdJ2jLXCI3Y6OTdA18FOwcj8gXlCNTc3aaoPWzT/AkIxyBDH4rUIgtrxt/
ARp37aXal5v2tuzqNDQptdws7q4mnQreaY51DBMV+XuvNxId0GJ6i5Uhtxt7JjlU
+PDWPPmhuZ94dagjbiuvkdCh08WYj2wpt00Ch7q3enJbhOM/vw/DWiTskPmUy1OU
+zoQ/jJYO5vV8Kcdtfv+F1X0K8WR70lJUSZ3XJQpfj4HP3mklImY8EizLmtnLOmU
PL97VEWD8MKkbjTJN/B1ZWnTISc2b6JXAJhR5zuktq+xSgkJ5Z+SJO6KPJuPNzVE
zlwGp5/hMFFoXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client