Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
File: YUDktab5bKTgzKDD69ZQ2o5fkhw.mft (raw, json)
Hash identifier: 3nBjK5+0pRb3oRPqx/VCKKDjA0REWHepRQOXCk1piSs=
Subject key identifier: 3F:41:85:C4:2A:07:BB:76:CA:CF:20:60:90:F7:44:2F:B4:27:56:F2
Authority key identifier: 61:40:E4:B5:A6:F9:6C:A4:E0:CC:A0:C3:EB:D6:50:DA:8E:5F:92:1C
Certificate issuer: /CN=6140e4b5a6f96ca4e0cca0c3ebd650da8e5f921c
Certificate serial: 019D39413FBCB06D8B84453D4DADA4842DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
Manifest number: 65
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: YUDktab5bKTgzKDD69ZQ2o5fkhw.crl (hash: LxTZxbGHxL/Ed/vtESHp9RzGnuV7pP+wjVu5QXH3Qe8=)
2: YyixRgQkCRlptWPD1EtoXlr--oE.roa (hash: XOxUCcAQJDI29aG4fQOLmqpsz4BUrXY6zDEjsBxBHik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3f:bc:b0:6d:8b:84:45:3d:4d:ad:a4:84:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6140e4b5a6f96ca4e0cca0c3ebd650da8e5f921c
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=3f4185c42a07bb76cacf206090f7442fb42756f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:67:04:9c:27:5a:00:f6:9d:f2:82:fd:40:
df:64:77:30:ca:9e:4f:d0:01:9d:49:0b:44:47:f9:
dc:14:80:65:2b:16:12:28:74:34:4f:0d:a5:b3:e8:
31:23:1b:59:2e:82:ff:78:96:53:b2:e8:e4:37:2c:
98:bd:62:76:40:d8:f0:17:57:b7:31:23:12:ae:9a:
71:f7:6a:9c:13:a3:23:63:55:61:e0:db:1a:ec:bf:
0a:29:51:db:15:b4:85:a6:18:29:63:5e:4c:40:b0:
f1:9a:5d:6d:1a:84:f5:93:88:fa:6b:aa:73:cd:b9:
ea:28:d1:4c:3d:13:fb:0f:34:6f:ad:92:60:a7:0f:
0b:a8:f8:32:7f:ef:ef:67:26:b6:f3:32:ab:6c:e4:
36:d3:c1:ee:a2:ba:20:7b:28:3b:9c:ad:e1:99:54:
0f:01:d0:3d:dc:65:99:34:4b:13:fb:c0:08:7b:31:
77:c5:36:bc:2c:53:b1:2e:13:0f:4b:74:f8:36:e9:
23:ab:e8:d3:b1:21:8d:ed:5c:4e:8b:d1:8b:12:ee:
14:47:c3:80:a5:4c:c8:b7:69:4c:e0:43:b4:ff:f5:
1d:a0:7c:67:3e:25:d7:30:a8:e6:fe:08:a5:4f:a4:
92:5d:02:4f:3b:6b:eb:a1:4e:1a:01:7f:dd:e6:fc:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:85:C4:2A:07:BB:76:CA:CF:20:60:90:F7:44:2F:B4:27:56:F2
X509v3 Authority Key Identifier:
keyid:61:40:E4:B5:A6:F9:6C:A4:E0:CC:A0:C3:EB:D6:50:DA:8E:5F:92:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUDktab5bKTgzKDD69ZQ2o5fkhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/986b51-5db8-4b7c-8605-16500d6c7014/1/YUDktab5bKTgzKDD69ZQ2o5fkhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fb:e8:0e:90:09:e5:51:1b:7a:40:5d:af:83:03:9f:6b:a8:
fa:13:4d:df:7d:9c:97:64:6a:ce:36:04:88:41:78:74:66:22:
b0:ca:85:cb:41:be:27:3d:b3:6e:ab:0a:d2:69:61:19:32:c8:
2f:99:ee:7f:c7:88:b8:76:02:50:43:93:66:ce:f1:59:ed:44:
a9:30:11:e5:b3:30:ae:89:a4:e5:0f:6f:af:72:25:fe:9e:1d:
94:db:24:3f:23:b8:4b:86:f1:96:7f:ef:94:43:68:e1:4b:05:
57:a3:f3:bf:fb:50:88:82:6d:22:62:a7:3b:ea:ce:2b:22:41:
9e:c4:b1:61:7b:06:05:3d:0d:dd:35:79:ed:82:d1:cf:ff:5e:
83:55:e3:27:db:70:fb:c6:92:06:fb:66:12:17:f7:d1:75:bc:
b1:8a:f4:a6:0f:a4:2b:00:b0:85:7a:9d:d8:1a:0e:d3:c9:cb:
5e:fd:54:96:04:85:d8:1c:50:ba:9a:4f:dd:57:ab:44:ac:77:
d7:fa:f6:7e:c7:60:3b:15:44:28:c8:2d:61:44:d0:93:2f:39:
79:f7:04:95:de:70:ca:85:39:f6:15:ae:19:92:59:f4:d8:83:
bf:36:0e:f2:52:51:b4:49:85:96:d2:a8:e6:32:06:b1:42:06:
3f:f5:22:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QT+8sG2LhEU9Ta2khC3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDBlNGI1YTZmOTZjYTRlMGNjYTBjM2ViZDY1MGRhOGU1
ZjkyMWMwHhcNMjYwMzI5MTEwMTEwWhcNMjYwMzMwMTEwMTEwWjAzMTEwLwYDVQQD
EygzZjQxODVjNDJhMDdiYjc2Y2FjZjIwNjA5MGY3NDQyZmI0Mjc1NmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjJnBJwnWgD2nfKC/UDfZHcwyp5P
0AGdSQtER/ncFIBlKxYSKHQ0Tw2ls+gxIxtZLoL/eJZTsujkNyyYvWJ2QNjwF1e3
MSMSrppx92qcE6MjY1Vh4Nsa7L8KKVHbFbSFphgpY15MQLDxml1tGoT1k4j6a6pz
zbnqKNFMPRP7DzRvrZJgpw8LqPgyf+/vZya28zKrbOQ208Huorogeyg7nK3hmVQP
AdA93GWZNEsT+8AIezF3xTa8LFOxLhMPS3T4Nukjq+jTsSGN7VxOi9GLEu4UR8OA
pUzIt2lM4EO0//UdoHxnPiXXMKjm/gilT6SSXQJPO2vroU4aAX/d5vxIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9BhcQqB7t2ys8gYJD3RC+0J1byMB8GA1UdIwQY
MBaAFGFA5LWm+Wyk4Mygw+vWUNqOX5IcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVEa3RhYjViS1RnektERDY5WlEybzVma2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85ODZiNTEtNWRiOC00YjdjLTg2MDUt
MTY1MDBkNmM3MDE0LzEvWVVEa3RhYjViS1RnektERDY5WlEybzVma2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85ODZiNTEtNWRiOC00YjdjLTg2MDUtMTY1MDBkNmM3MDE0
LzEvWVVEa3RhYjViS1RnektERDY5WlEybzVma2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePvoDpAJ
5VEbekBdr4MDn2uo+hNN332cl2RqzjYEiEF4dGYisMqFy0G+Jz2zbqsK0mlhGTLI
L5nuf8eIuHYCUEOTZs7xWe1EqTAR5bMwromk5Q9vr3Il/p4dlNskPyO4S4bxln/v
lENo4UsFV6Pzv/tQiIJtImKnO+rOKyJBnsSxYXsGBT0N3TV57YLRz/9eg1XjJ9tw
+8aSBvtmEhf30XW8sYr0pg+kKwCwhXqd2BoO08nLXv1UlgSF2BxQuppP3VerRKx3
1/r2fsdgOxVEKMgtYUTQky85efcEld5wyoU59hWuGZJZ9NiDvzYO8lJRtEmFltKo
5jIGsUIGP/UiqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:20 2026 by rpki-client